arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2207.08482cs.NI
收藏

国产IoT器械隐私保护控制性能评估

Performance Evaluation for Privacy-preserving Control of Domestic IoT Devices

Sameh Zakhary, Thomas Lodge, Derek McAuley

摘要:

部署物联网生态系统的大多数现有模型都涉及供应商处于物联网设备的命令和控制循环中,因此用户的隐私和安全是主要挑战之一。尽管存在这些问题,但用户通常面临着限制设备功能或通过注册供应商集中式模型来启用对物联网设备的互联网访问之间的选择,以便从家庭外部访问他们的设备。在本文中,我们认为,尽管物联网有望成为向用户提供服务的革命性方式,但由于隐私和安全风险增加,大多数此类设备不应被允许访问互联网。我们提出了一种替代的家庭网络设计模型,该模型限制了物联网设备的暴露,并使用WireGuard(WG)(一种最先进的虚拟专用网络(VPN)协议)从家庭外部无缝访问其功能。我们使用现成的物联网设备构建了一个测试床,用于在各种条件下测试我们提出的网络设计;包括从家庭,4G,办公室和公共Wifi网络访问。我们表明,当使用超文本传输协议(HTTP)时,我们基于VPN的物联网设备远程访问在所有场景中的端到端延迟方面提供了更好的性能,并且当使用VPN上的双重加密超文本传输协议安全(HTTPS)时,性能相当。

英文摘要:

Most of the existing models for deploying IoT ecosystem involves the vendor being in the loop of the command and control of IoT devices hence users' privacy and security is one of the main challenges. Despite these concerns, users are often faced with a choice between limiting the device functionality or enabling internet access to the IoT devices by signing up to the vendor centralized model in order to access their device from outside their home. In this paper, we argue that although IoT is promising a revolutionary way of offering services to users, most of these devices shouldn't be allowed to have Internet access due to the increased risks to privacy and security. We present an alternative home networking design model which limits the exposure of IoT devices, and enable seamless access to their functionality from outside the home using WireGuard (WG), a state-of-the-art Virtual Private Network (VPN) protocol. We built a test-bed using off-the-shelf IoT devices for testing our proposed network design under various conditions; including access from Home, 4G, Office and Public Wifi networks. We show that our VPN-based remote access to the IoT device offers a better performance in terms of end-to-end delay in all scenarios when using Hypertext Transport Protocol (HTTP) and comparable performance when using double encryption Hypertext Transport Protocol Secure (HTTPS) over the VPN.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑