Principles of Secure BootStrapping for IoT

PI: Ninghui Li; Researchers: Syed Hussain (Post Doc), Weicheng Wang (Graduate Student)

HARD PROBLEM(S) ADDRESSED
This refers to Hard Problems, released November 2012.

Policy.

PUBLICATIONS
Papers written as a result of your research from the current quarter only.

• Ankush Singla, Syed Rafiul Hussain, Omar Chowdhury, Elisa Bertino, and Ninghui Li. Protecting the 4G and 5G Cellular Paging Protocols against Security and Privacy Attacks. In Proceedings on Privacy Enhancing Technologies (PoPETs).

KEY HIGHLIGHTS

• We identified the underlying design weaknesses of 4G and 5G cellular paging protocols, and proposed efficient and backward-compatible approaches to address these weaknesses. We also demonstrated the deployment feasibility of our enhanced paging protocol by implementing it on an open-source cellular protocol library and commodity hardware. Our evaluation demonstrates that the enhanced protocol can thwart attacks without incurring substantial overhead.
• We continued analyzing the security and privacy issues in the Zigbee protocol. To address these problems, we developed a new design for the initial joining procedure. We are currently integrating our defense in the open-source implementation of Zigbee stack so that we can evaluate it.

COMMUNITY ENGAGEMENTS

EDUCATIONAL ADVANCES: