Cybersecurity for IoT Applications using Attribute-Based Access Control

Abstract:

Given the vast opportunities the IoT promises to provide, it is widely being adopted worldwide in diverse application domains. However, IoT’s “access by anybody from anywhere” concept makes it prone to numerous security challenges. Although data security is studied at various levels of IoT architecture, breach of data security due to internal parties has not received as much attention as that caused by external parties. When an organization with people spread across multiple levels of hierarchies with multiple roles adopts IoT, the approach of providing uniform access of the data to everyone is not a valid one. Past research has extensively investigated various Access Control techniques like Role Based Access Control (RBAC), Identity Based Access Control (IBAC), Attribute Based Access Control (ABAC) and other variations to address the above issue. While ABAC meets the needs of the growing amount of subjects and objects in an IoT environment, when implemented as an encryption algorithm (ABE), it does not cater to the IoT RDBMS applications. Also, given the query processing over huge encrypted dataset on the Cloud and the communication between the Cloud and the end-user, latency issues are highly prevalent in IoT applications. In this talk, we first present an Attribute Based Access Control (ABAC) mechanism for the IoT data on the Cloud in order to provide a fine-grained access control in an organization. Then, we present an Attribute Based Cache Consistency (ABCC) technique that tailors Cache Invalidation according to the users’ attributes to cater to the latency as well as criticality needs of end-users. Finally, we discuss the application of these techniques to healthcare data and present performance evaluation using an IoT testbed environment.

Speaker Bio:

Manimaran Govindarasu is currently the Mehl Professor of Computer Engineering in the Department of Electrical and Computer Engineering at Iowa State University. He received his Ph.D degree in Computer Science and Engineering from the Indian Institute of Technology (IIT), Madras, India, and has been on the faculty of Iowa State University since 1999. His research experiences are in the areas of cyber-physical system (CPS) security for the smart grid, cyber security, real-time systems and networks, and Internet of Things (IoT). He has co-authored over 150 peer-reviewed research publications, and has given several invited talks and tutorials at reputed IEEE conferences, and also industry short courses on the subject of cber security. He is a co-author of the text “Resource Management in Real-time Systems and Networks,” MIT Press, 2001. He served as a guest co-editor for flagship IEEE publications (IEEE Network, IEEE Power & Energy), and serving as an Editor for IEEE Transactions on Smart Grid and IEEE Transactons on Mobile Computing. He is a Fellow of the IEEE.

IoT sessions handled by:

At Frugal Labs, we specialize to work on latest technologies like “Internet Of Things”. Our skilled Team of Engineers work on continuous development of technologies keeping innovation as a prime factor in mind. Through continuous research and development we try to provide the cut through smart and connected technology solutions for our customers. We try to excel in creating value addition by providing services on skill development, training, prototyping solutions, design conceptualization,etc.