Survey on Internet of Things Access Control Security

被引：0
作者：
Liu Q. [1 ,2 ]
Jin Z. [1 ,2 ]
Chen C. [1 ,2 ]
Gao X. [1 ,2 ]
Zheng N. [1 ,2 ]
Fang Y. [1 ,2 ]
Feng Y. [1 ]
机构：
[1] Institute of Information Engineering, Chinese Academy of Sciences, Beijing
[2] School of Cyber Security, University of Chinese Academy of Sciences, Beijing
来源：
Jisuanji Yanjiu yu Fazhan/Computer Research and Development | 2022年 / 59卷 / 10期
关键词：
Access control; Attack surface; Internet of things (IoT); Security; Trust chain;
D O I：
10.7544/issn1000-1239.20220510
中图分类号：
学科分类号：
摘要：
In recent years, Internet of things (IoT) security incidents have occurred frequently. As an important security mechanism, IoT access control plays an important role. However, the existing Internet access control policies cannot be directly applied to the IoT scenarios because of the differences between IoT and Internet. At present, the IoT access control schemes have not paid attention to the security issues. Once the IoT access control is broken, it will cause serious consequences such as privacy data leakage and authority abuse. Thus, it is urgent to comprehensively study the security issues and solutions for access control of IoT. According to the complex architecture, the variety of devices, low storage and computing performance of IoT, the protection surface and trust relationship in IoT access control is combed, the trust chain is built and the risk transmission law in the trust chain is discussed. Around the protection surface and trust chain, we summarize the existing access control attack surface from the perception layer, network layer, and application layer, and analyze the existing security risks. In view of these security risks, we present the necessary access control security demand, including mechanism improvement, attack surface answer, multilevel authentication and authorization, and the combination with specific scenarios. Based on the requirements, the existing security solutions and targeted access control framework are summarized. Finally, we discuss the challenges faced in IoT access control and point out the future research direction that consists of an in-depth study on access control of the cloud platform of IoT, IoT cloud docking standardization, and the introduction of zero trust concept. © 2022, Science Press. All right reserved.
引用
收藏
页码：2190 / 2211
页数：21
相关论文
共 99 条
[41]  
Sikder A K, Aksu H, Uluagac A S., 6thSense: A context-aware sensor-based attack detector for smart devices, Proc of the 26th USENIX Conf on Security Symp, pp. 397-414, (2017)
[42]  
Tukur Y M, Ali Y S., Demonstrating the effect of insider attacks on perception layer of Internet of things (IoT) systems, Proc of the 15th Int Conf on Electronics, Computer and Computation (ICECCO), pp. 1-6, (2019)
[43]  
Tippenhauer N O, Popper C, Rasmussen K B, Et al., On the requirements for successful GPS spoofing attacks, Proc of the 18th ACM Conf on Computer and Communications Security (CCS), pp. 75-86, (2011)
[44]  
Park Y, Son Y, Shin H, Et al., This ain't your dose: Sensor spoofing attack on medical infusion pump[C/OL], Proc of the 10th USENIX Workshop on Offensive Technologies (WOOT), (2016)
[45]  
Marasco E, Ross A., A survey on antispoofing schemes for fingerprint recognition systems, ACM Computing Surveys, 47, 2, pp. 1-36, (2014)
[46]  
Wu Zhizheng, Evans N, Kinnunen T, Et al., Spoofing and countermeasures for speaker verification: A survey, Speech Communication, 66, pp. 130-153, (2015)
[47]  
Sahidullah M, Delgado H, Todisco M, Et al., Introduction to voice presentation attack detection and recent advances, Handbook of Biometric Anti-spoofing, pp. 321-361, (2015)
[48]  
Zhang Guoming, Yan Chen, Ji Xiaoyu, Et al., DolphinAttack: Inaudible voice commands, Proc of the 2017 ACM Conf on Computer and Communications Security (SIGSAC), pp. 103-117, (2017)
[49]  
Son Y, Shin H, Kim D, Et al., Rocking drones with intentional sound noise on gyroscopic sensors, Proc of the 24th USENIX Conf on Security Symp, pp. 881-896, (2015)
[50]  
Kumar D, Shen K, Case B, Et al., All things considered: An analysis of IoT devices on home networks, Proc of the 28th USENIX Conf on Security Symp, pp. 1169-1185, (2019)
12345678910