With reference to the IEEE 802.15.4 standard, many solutions have been formulated to face the different facets of layer-2 security. Unfortunately, the opportunities and subtleties arising from their joint adoption has been not investigated, due to the lack of an integrating framework. To this end, hereby a novel standard compatible framework is proposed, which is able to orchestrate several layer-2 security mechanisms with a limited computational footprint. Conceived as a distributed scheme, it covers the following key features: (i) multiple security configurations in homogeneous and heterogeneous scenarios; (ii) adaption to dynamic networks; (iii) lean and scalable initialization functionalities; (iv) lightweight Key Management Protocol; and (v) resilience to several attacks. The robustness against security attacks have been evaluated through a well-known automatic cryptographic protocol verifier, namely ProVerif. Moreover, to further demonstrate its effectiveness, the proposed framework has been implemented within the emerging OpenWSN protocol stack, experimentally evaluated, and compared with respect to the ZigBee IP security architecture, which integrates the Symmetric Key - Key Establishment protocol (SKKE). Results clearly show that, although security features in constrained nodes incur not negligible computational costs (which impair latencies and energy efficiency), the proposed approach always guarantees better performances with respect to the ZigBee IP security architecture. In fact, it speeds up the configuration of security services (up to 120%), while ensuring relevant energy savings (larger than 50%).

LICITUS: A lightweight and standard compatible framework for securing layer-2 communications in the IoT / Sciancalepore, Savio; Piro, Giuseppe; Vogli, Elvis; Boggia, Gennaro; Grieco, Luigi Alfredo; Cavone, Giuseppe. - In: COMPUTER NETWORKS. - ISSN 1389-1286. - 108:(2016), pp. 66-77. [10.1016/j.comnet.2016.08.003]

LICITUS: A lightweight and standard compatible framework for securing layer-2 communications in the IoT

SCIANCALEPORE, Savio;PIRO, Giuseppe;VOGLI, Elvis;BOGGIA, Gennaro;GRIECO, Luigi Alfredo;CAVONE, Giuseppe
2016-01-01

Abstract

With reference to the IEEE 802.15.4 standard, many solutions have been formulated to face the different facets of layer-2 security. Unfortunately, the opportunities and subtleties arising from their joint adoption has been not investigated, due to the lack of an integrating framework. To this end, hereby a novel standard compatible framework is proposed, which is able to orchestrate several layer-2 security mechanisms with a limited computational footprint. Conceived as a distributed scheme, it covers the following key features: (i) multiple security configurations in homogeneous and heterogeneous scenarios; (ii) adaption to dynamic networks; (iii) lean and scalable initialization functionalities; (iv) lightweight Key Management Protocol; and (v) resilience to several attacks. The robustness against security attacks have been evaluated through a well-known automatic cryptographic protocol verifier, namely ProVerif. Moreover, to further demonstrate its effectiveness, the proposed framework has been implemented within the emerging OpenWSN protocol stack, experimentally evaluated, and compared with respect to the ZigBee IP security architecture, which integrates the Symmetric Key - Key Establishment protocol (SKKE). Results clearly show that, although security features in constrained nodes incur not negligible computational costs (which impair latencies and energy efficiency), the proposed approach always guarantees better performances with respect to the ZigBee IP security architecture. In fact, it speeds up the configuration of security services (up to 120%), while ensuring relevant energy savings (larger than 50%).
2016
LICITUS: A lightweight and standard compatible framework for securing layer-2 communications in the IoT / Sciancalepore, Savio; Piro, Giuseppe; Vogli, Elvis; Boggia, Gennaro; Grieco, Luigi Alfredo; Cavone, Giuseppe. - In: COMPUTER NETWORKS. - ISSN 1389-1286. - 108:(2016), pp. 66-77. [10.1016/j.comnet.2016.08.003]
File in questo prodotto:
Non ci sono file associati a questo prodotto.

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11589/78488
Citazioni
  • Scopus 17
  • ???jsp.display-item.citation.isi??? 14
social impact