Search

One of the main security challenges when federating separate Internet of Things (IoT) administrative domains is effective Identity and Access Management, which is required to establish trust and secure communication between federated IoT devices. The primary goal of the work is to develop a "lightweight" protocol to enable authentication and authorization of IoT devices in federated environments and ensure the secure communication of IoT devices. We propose a novel Lightweight Authentication and Authorization Framework for Federated IoT (LAAFFI) which takes advantage of the unique fingerprint of IoT devices based on their configuration and additional hardware modules, such as Physical Unclonable Function, to provide flexible authentication and authorization based on Distributed Ledger technology. Moreover, LAAFFI supports IoT devices with limited computing resources and devices not equipped with secure storage space. We implemented a prototype of LAAFFI and evaluated its performance in the Hyperledger Fabric-based IoT framework. Three main metrics were evaluated: latency, throughput (number of operations or transactions per second), and network resource utilization rate (transmission overhead introduced by the LAAFFI protocol). The performance tests conducted confirmed the high efficiency and suitability of the protocol for federated IoT environments. Also, all LAAFFI components are scalable as confirmed by tests. We formally evaluated LAAFFI security using Verifpal as a formal verification tool. Based on the models developed for Verifpal, we validated their security properties, such as message secrecy, authenticity, and freshness. Our results show that the proposed solution can improve the security of federated IoT environments while providing zero-day interoperability and high scalability. Compared to existing solutions, LAAFFI is more efficient due to the use of symmetric cryptography and algorithms adapted for operations involving IoT devices. LAAFFI supports multiple authorization mechanisms, and since it also offers authentication and accountability, it meets the requirements of Authentication, Authorization and Accounting (AAA). It uses Distributed Ledger (DL) and smart contracts to ensure that the request complies with the policies agreed between the organizations. LAAFFI offers authentication of devices belonging to a single organization and different organizations, with the assurance that the encryption key will be shared with another device only if the appropriate security policy is met. The proposed protocol is particularly useful for ensuring the security of federated IoT environments created ad hoc for special missions, e.g., operations conducted by NATO countries and disaster relief operations Humanitarian Assistance and Disaster Relief (HADR) involving military forces and civilian services, where immediate interoperability is required. [ABSTRACT FROM AUTHOR]

The Military Internet of Things (MIoT) has emerged as a new research area in military intelligence. The MIoT frequently has to constitute a federation-capable IoT environment when the military needs to interact with other institutions and organizations or carry out joint missions as part of a coalition such as in NATO. One of the main challenges of deploying the MIoT in such an environment is to acquire, analyze, and merge vast amounts of data from many different IoT devices and disseminate them in a secure, reliable, and context-dependent manner. This challenge is one of the main challenges in a federated environment and forms the basis for establishing trusting relationships and secure communication between IoT devices belonging to different partners. In this work, we focus on the problem of fulfillment of the data-centric security paradigm, i.e., ensuring the secure management of data along the path from its origin to the recipients and implementing fine-grained access control mechanisms. This problem can be solved using innovative solutions such as applying attribute-based encryption (ABE). In this work, we present a comprehensive solution for secure data dissemination in a federated MIoT environment, enabling the use of distributed registry technology (Hyperledger Fabric), a message broker (Apache Kafka), and data processing microservices implemented using the Kafka Streams API library. We designed and implemented ABE cryptography data access control methods using a combination of pairings-based elliptic curve cryptography and lightweight cryptography and confirmed their suitability for the federations of military networks. Experimental studies indicate that the proposed cryptographic scheme is viable for the number of attributes typically assumed to be used in battlefield networks, offering a good trade-off between security and performance for modern cryptographic applications. [ABSTRACT FROM AUTHOR]

Trichinella spiralis is a parasitic nematode causing trichinellosis, a serious disease, and Caenorhabditis elegans is a free-living nematode, which is used as a model in parasitological studies. High levels of thymidylate synthase (EC 2.1.1.45; ThyA) and certain other enzymes involved in thymidylate biosynthesis were found throughout T. spiralis and C. elegans developmental cycles, including developmentally arrested forms, that is, T. spiralis muscle larva and C. elegans dauer larva. As ThyA activity is characteristic for cells that left the G0 phase of the cell cycle, an exceptional regulation of the cell cycle in nematodes is suggested, manifested by a global cell cycle arrest in developmentally arrested larvae of the two species. ThyA immunolocalization during development of T. spiralis and C. elegans revealed the presence of high enzyme levels not only in the developing embryos, where it was expected, but also in gonad primordia, egg and sperm cells, nerve ring and secretory cells, opening to T. spiralis esophagus and C. elegans pharynx, where it may point to those cell populations remaining cell cycle arrested.

Summary: Currently, the networks of mobile sensor nodes, which are IoT components, are increasingly a source of data for building situational awareness. Such networks can be a source of data for critical infrastructure systems if, in addition to the timeliness (freshness) of the data, it will also be possible to ensure the reliability of these data. Such requirements are met by a secure domain of sensor nodes, in which all sensor nodes are authenticated, sensitive data is stored in protected resources of sensor nodes, and data exchange in the domain and outside the domain is cryptographically protected. This paper presents the concept of a safe domain of sensor nodes for IoT and describes the data structures necessary to ensure security in the domain and the way of protecting the resources of each node. Particular attention was paid to the procedure of preparing a sensor node for work in a secured domain of sensor nodes. [ABSTRACT FROM AUTHOR]

The paper considers some properties of selected types of perfect resource placements in 4-dimensional cube-type networks with soft degradation. The conditions of existence of perfect placements and the ways of determining resource placement are presented. Examples of different types of placements are given. On the basis of the established forms of the network working structures along with network degradation the average number of working processors with specified order is determined. This value could be a measure of the network's computing capabilities loss along with the increasing degree of network degradation for a given type of resource placement. [ABSTRACT FROM AUTHOR]