1. Lightweight Security Architecture Based on Embedded Virtualization and Trust Mechanisms for IoT Edge Devices
- Author
-
Leonardo Albernaz Amaral, Everton de Matos, Carlos Moratelli, Ramao Tiago Tiburski, Sergio F. Johann, Fabiano Hessel, and Marcelo Neves
- Subjects
Edge device ,Computer Networks and Communications ,Computer science ,020206 networking & telecommunications ,02 engineering and technology ,Enterprise information security architecture ,Virtualization ,computer.software_genre ,Computer security ,Computer Science Applications ,Data access ,0202 electrical engineering, electronic engineering, information engineering ,Overhead (computing) ,Electrical and Electronic Engineering ,computer ,Edge computing - Abstract
Security issues represent the greatest obstacle to the growth of edge computing and the Internet of Things (IoT). In this paradigm, IoT applications are migrating to edge devices. As a result, potential security risks are arising, and unauthorized access to data from IoT edge devices is becoming a real concern. Thus, there is a need for a comprehensive, end-toend security approach since the system's more vulnerable point determines its overall security level. An edge device security system has to be built with a root of trust (i.e., something that is unclonable) and a chain of trust. Additionally, a security layer is necessary to ensure that different IoT applications execute isolated from each other in the device. In this sense, this article defines a security architecture that integrates trust mechanisms with embedded virtualization, providing security from hardware to applications. Our experiments show that the proposed architecture can be implemented with a smaller overhead and memory footprint compared to other proposed approaches in the literature, which makes it highly suitable for resource-constrained edge devices.
- Published
- 2019
- Full Text
- View/download PDF