Uma nova abordagem de dois níveis para obtenção de métricas de confiança e avaliação da segurança na comunicação entre dispositivos da Internet das Coisas

Abstract

The Internet of Things (IoT) brings a new wave of Internet evolution, enabling the communication of new devices, making them smart. IoT allows materializing concepts such as Cyber-Physical Systems (CPS) and permits the emergence of new systems and applications. However, the massive and ubiquitous spread of interconnected IoT devices increasingly exposes the vulnerability of data and related applications. If the security of any component in such systems gets compromised, an associated data leak may cause serious threats to privacy, material loss, and even put people’s lives at risk. Therefore, studies on IoT security aspects have become increasingly important. This thesis presents a proposal to defining and obtaining trust metrics in communication between IoT devices, in order to address research questions related to security aspects in this context. The key idea consists of a two-level approach that considers application and network characteristics. In particular, trust is modeled by combining a relative entropy measure of a device data rate and the respective reputation from a distributed-ledger, considering also the use of Identity-Based Encryption (IBE) for devices identification. Through numerical results, we show the effectiveness of our approach in isolating anomalous/untrusted devices based on the proposed trust metric.Também disponível on-line