Please use this identifier to cite or link to this item:
Title: A network service for preventing data leakage from IoT cloud-assisted equipment
Author: Cunha, Vitor A.
Silva, Eduardo da
Carvalho, Marcio B. de
Corujo, Daniel
Barraca, João P.
Gomes, Diogo
Schaeffer-Filho, Alberto E.
Santos, Carlos R. P. dos
Granville, Lisandro Z.
Aguiar, Rui L.
Issue Date: 2019
Publisher: IEEE
Abstract: The fact that most IoT solutions are provided by third parties, along with the pervasiveness of the collected data, raises privacy and security concerns. There is a need to verify which data is being sent to the third party, as well as preventing those channels from becoming an exploitation avenue. We propose to use existing API definition languages to create contracts which define the data that can be transmitted, their format and constraints. To verify the compliance with these contracts, we propose a Network Service architecture which validates REST-like API requests/responses against a Swagger schema. We deal with encrypted traffic using an Service Function Chaining (SFC)-enabled Man-in-the-Middle (MITM), allowing verifications in “real-time.” We devised a Proof of Concept and showed that we were able to detect (and stop) contract violations.
Peer review: yes
DOI: 10.1109/ISCC47284.2019.8969719
ISBN: 978-1-7281-3000-2
ISSN: 1530-1346
Appears in Collections:DETI - Capítulo de livro
IT - Capítulo de livro

Files in This Item:
File Description SizeFormat 
A Network Service for Preventing Data Leakage from IoT Cloud Assisted Equipment.pdf473.1 kBAdobe PDFView/Open

Formato BibTex MendeleyEndnote Degois 

Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.