How P2P framework can help mitigate trust and security risks of IoT applications

The rapid growth of IoT devices and its impact in our day to day is one of the biggest challenges for information security nowadays. Privacy in IoT is one of these challenges since IoT devices collect massive amounts of personal data about users and its environment unbeknownst to them and, due to th...

ver descrição completa

Detalhes bibliográficos
Autor: Riutort Grande, Pablo
Formato: tesis de maestría
Fecha de publicación:2021
País:España
Recursos:Universitat Oberta de Catalunya (UOC)
Repositorio:O2, repositorio institucional de la UOC
OAI Identifier:oai:openaccess.uoc.edu:10609/132267
Acesso em linha:http://hdl.handle.net/10609/132267
Access Level:acceso abierto
Palavra-chave:Internet of things
privacy
Anonymous Communication
The Onion Router
internet de las cosas
privacidad
internet de les coses
privacitat
Computer security -- TFM
Seguretat informàtica -- TFM
Seguridad informática -- TFM
Descrição
Resumo:The rapid growth of IoT devices and its impact in our day to day is one of the biggest challenges for information security nowadays. Privacy in IoT is one of these challenges since IoT devices collect massive amounts of personal data about users and its environment unbeknownst to them and, due to the hardware limitations of the devices, they cannot apply traditional encryption schemes and other privacy centered architectures. We must search new ways to connect these devices without forfeit user privacy and to guarantee same security standards as other current user based applications. Currently, there are many ways to provide user privacy in several contexts but there is no standard to provide users and developers ways to achieve it IoT applications. This paper presents a framework proposal to connect one or several IoT devices to create applications with user privacy in its design through The Onion Router (TOR) to send data over the net anonymously. Our main contribution is to adapt a device whose capabilities to use a heavy encryption- based technology are limited into a fully extendable system that closes the gap between anonymity and IoT.