Cybersecurity Commons^™

Not-So-Secret Authentication: The Syncbleed Attacks And Defenses For Zero-Involvement Authentication Systems, Isaac Ahlgren, Rushikesh Shirsat, Omar Achkar, George K. Thiruvathukal, Kyu In Lee, Neil Klingensmith

Computer Science: Faculty Publications and Other Works

Zero-involvement authentication (ZIA) offers a promising solution for autoprovisioning large IoT device networks by enabling devices to extract identical authentication keys from ambient environmental signals without user intervention.

However, we demonstrate that existing ZIA systems leak critical information during key negotiation when they exchange synchronization messages over public wireless channels.

Our novel passive attack, SyncBleed, exploits these leaked messages to reconstruct ZIA-generated keys, successfully cracking approximately 50% of keys in under one second in our testbed experiments.

To address this vulnerability, we introduce TREVOR (Time shift REsistant VEctor ExtractOR), which generates nearly identical bit sequences from environmental signals without exchanging …

Design And Implementation Of Secured Hybrid Gateway Node For Securing Iot - Enabled Distribution Automation, Ally Bitebo

Tanzania Journal of Engineering and Technology (TJET)

The integration of smart grid and Internet of Things (IoT) technologies plays a crucial role in enhancing the quality of services provided by traditional electrical grids. This combination has enabled the introduction of new services, such as demand response, automatic meter reading, and IoT-enabled Distribution Automation (IoT-DA), which incorporates sensors, actuators, intelligent electrical devices (IEDs), and information and communication technologies to monitor and control the grid. However, this integration also introduces network security risks, including Denial of Service (DoS) attacks, false data injection, and masquerading attacks, such as system node impersonation that can transmit incorrect readings, trigger false alarms, and …

A Framework For Evaluating The Security And Privacy Of Smart-Home Devices, And Its Application To Common Platforms, Ravindra Mangar, Timothy Pierson, David Kotz

Dartmouth Scholarship

In this article, we outline the challenges associated with the widespread adoption of smart devices in homes. These challenges are primarily driven by scale and device heterogeneity: a home may soon include dozens or hundreds of devices, across many device types, and may include multiple residents and other stakeholders. We develop a framework for reasoning about these challenges based on the deployment, operation, and decommissioning life cycle stages of smart devices within a smart home. We evaluate the challenges in each stage using the well-known CIA triad—Confidentiality, Integrity, and Availability. In addition, we highlight open research questions at each stage. …

Real-Time Data Analytics For Monitoring Electricity Consumption Using Iot Technology, Waheed Muhammad Sanya, Gaurav Bajpai, Omar Haji Kombo, Evariste Twahirwa

Tanzania Journal of Engineering and Technology (TJET)

Rising electricity bills as a result of climate variability and new home electrical and electronic appliances are becoming a major source of concern for most end users. Consumers are typically unaware of their household electricity consumption patterns and the costs associated with them, making proper planning and budgeting difficult. Monitoring and controlling energy consumption on appliances can reduce energy costs for end-users. The Internet of Things (IoT) has the potential to provide remote monitoring and control of devices via automated monitoring and control. In this study, we propose an IoT-enabled system for monitoring and controlling energy consumption in homes to …

The Applications Of The Internet Of Things In The Medical Field, Cody Repass

Theses and Dissertations

The Internet of Things (IoT) paradigm promises to make “things” include a more generic set of entities such as smart devices, sensors, human beings, and any other IoT objects to be accessible at anytime and anywhere. IoT varies widely in its applications, and one of its most beneficial uses is in the medical field. However, the large attack surface and vulnerabilities of IoT systems needs to be secured and protected. Security is a requirement for IoT systems in the medical field where the Health Insurance Portability and Accountability Act (HIPAA) applies.

This work investigates various applications of IoT in healthcare …