The vast areas of applications for IoTs in future smart cities, smart transportation systems, and so on represent a thriving surface for several security attacks with economic, environmental and societal impacts. This survey paper presents a review of the security challenges of emerging IoT networks and discusses some of the attacks and their countermeasures based on different domains in IoT networks. Most conventional solutions for IoT networks are adopted from communication networks while noting the particular characteristics of IoT networks such as the nodes quantity, heterogeneity, and the limited resources of the nodes, these conventional security methods are not adequate. One challenge toward utilizing common secret key-based cryptographic methods in large-scale IoTs is the problem of secret key generation, distribution, and storage and protecting these secret keys from physical attacks. Physically unclonable functions (PUFs) can be utilized as a possible hardware remedy for identification and authentication in IoTs. Since PUFs extract the unique hardware characteristics, they potentially offer an affordable and practical solution for secret key generation. However, several barriers limit the PUFs' applications for key generation purposes. We discuss the advantages of PUF-based key generation methods, and we present a survey of state-of-the-art techniques in this domain. We also present a proof-of-concept PUF-based solution for secret key generation using resistive random-access memories (ReRAM) embedded in IoTs.
翻译:在未来的智能城市中,智能运输系统等广泛应用领域对互联网技术的应用,是若干具有经济、环境和社会影响的安全攻击的蓬勃表面。本调查文件审查了新兴互联网网络的安全挑战,并讨论了一些基于互联网网络不同领域的袭击及其应对措施。互联网网络的大多数常规解决方案来自通信网络,同时注意到互联网网络的特殊性,如节点数量、异质性和节点资源有限,这些常规安全方法是不够的。在大规模互联网安全攻击中使用通用秘密关键加密方法所面临的一个挑战就是秘密钥匙的生成、分配和储存问题,以及保护这些秘密钥匙免遭实物袭击的问题。物理上无法调的功能(PUFs)可以用作在互联网网络中识别和认证的一种可能的硬件补救措施。由于PUFs提取了独特的硬件特征,因此这些常规安全方法可能为秘密关键关键一代提供一种可负担的、实用的解决方案。然而,在大规模互联网技术中使用通用关键关键关键关键的关键生成工具的应用受到若干障碍的限制。我们讨论了目前基于互联网的关键生成方法的实地测试方法的优势。