Proxy-based solution for legacy IoT security and privacy

• Autor(a) principal: Rodrigo Monteiro da Cunha Costa Caldas
• Data de Publicação: 2021
• Tipo de documento: Dissertação
• Idioma: eng
• Título da fonte: Repositórios Científicos de Acesso Aberto de Portugal (RCAAP)
• Texto Completo: https://hdl.handle.net/10216/135000
• topic: Engenharia electrotécnica, electrónica e informática; Electrical engineering, Electronic engineering, Information engineering

Numerous legacy IoT devices are vulnerable to even trivial attacks that can easily compromise the entire system, and as such, securing legacy device traffic becomes a necessity when redesigning the device itself is not feasible. After implementing a layer 2 tunnel over TLS for legacy device traffic, the goal is to analyze one of the threats that the tunnel does not address, specifically inference attacks on encrypted tunnel traffic. Using a multi-node fire detection and alarm system, it is covered the possibility of inferring device behavior, even if the device traffic is encrypted. Then, in order to avoid traffic detection, by implementing traffic obfuscation methods such as padding and dummy traffic in the tunnel, it will result in an expected decrease in the ability of an eavesdropper to infer the behavior of the legacy device, even if the eavesdropper retrains its model with both padding and dummy traffic.