The success of the Internet of Things (IoT) depends significantly on solving the underlying security and privacy challenges. Due to their scale of deployment and limited resources, some of these systems will be extremely challenging to secure. One key aspect is decentralization, as many if not most of IoT scenarios include intermittent connectivity. Furthermore, decentralized security may help to overcome privacy concerns and scalability bottlenecks, both of which become increasingly serious in large-scale deployments, such as smart cities or Industry 4.0.
A decentralized approach to IoT security brings forth many opportunities but also challenges, such as operating with constrained device and network capabilities, state synchronization, and trust management.
At the same time, many IoT standards are now under development and decisions are being made today which will have long-term impact on the security of these systems. Of particular interest are open standards (e.g., IETF CoAP, OCF, and LWM2M), developed by organizations such as the IETF and the W3C including W3C Web of Things. Many of these open standards implicitly or explicitly support metadata and have interoperability as goals. These features widen the scope and enhance the utility of these standards, but also raise new security and privacy issues that need to be discussed and addressed. Systems composed of multiple standards also raise challenges: for example, how to maintain security across bridges and how to evaluate trust across standards boundaries.
Following the spirit of NDSS, the goal of this workshop is to bring together researchers and practitioners to analyze and discuss the potential and limits of decentralized security in the IoT, especially in the light of ongoing standardisation work and wider systems interoperability.
|
User Name : cressida
Posted 27-10-2017 on 19:50:56 AEDT