The extensive networking of devices and the large amount of data generated from the Internet of Things (IoT) has brought security issues to the attention of the researcher. Java is the most common platform for embedded applications such as IoT, Wireless Sensors Networks (WSN), Near Field Communications (NFC) and Radio Frequency Identification (RFID). The object programming languages such as Java, SWIFT, PHP and C++ use garbage collection after any object run which creates security loophole for attacks such as Next Memory Address Occupation (NMAO), memory replay, Learning Tasks Behaviors (LTB). The security risk increases in IoT when attacks exceeds the target device to the surrounding connected devices. Inappropriate or wrong operations causes energy loss and increased costs. In this paper, a security method to protect IoT system operation from memory heap penetration and address modification attack is proposed. The proposed method prevents directed attack by encrypting the object Garbage Collection at run time. To form a unique signature mechanism, the Cryptographic Hash Function (CHF) which employs a specific one-way hash algorithm. The proposed framework uses L-function based ECC and one-time Key (OTK) to secure the memory heap. Our method is used with open system where the effect on the operating system is not considered. The proposed method proved to be powerful and efficient which can help in achieving higher levels of security across several IoT applications, by enabling better detection of malicious attacks.
翻译:各种装置的广泛联网和从Tings Internet(IoT)产生的大量数据使研究人员注意到安全问题。爪哇是IoT、无线传感器网络、近地通信和无线电频率识别等嵌入应用程序的最常见平台。诸如Java、SWIFT、PHP和C+++等对象编程语言在任何物体运行后使用垃圾收集方法,造成攻击的安全漏洞,如下一次记忆地址职业、记忆重播、学习任务行为(LTB)等。当攻击超过目标装置时,IoT的安保风险会增加至周围的连接装置。不适当或错误的操作造成能源损失和费用增加。在本文件中,提出了一种安全方法来保护IoT系统的运作,使其不因记忆高渗透渗透率和地址修改攻击而发生。拟议的方法是及时将目标Garbage收藏系统加密,从而防止直接攻击。为了形成一个独特的签字机制,Chyptlogic Hash 函数(CHFY),它使用一种更强的系统进行更强的辅助式的系统,而不能使KOLFSY操作系统达到安全操作的系统。这个框架已经证明使用了一种安全操作方法。在CHT中可以使K-CFy-C-Chy-Chismas