Modeling and Design of Secure Internet of Things

677 Pages·2020·24.751 MB·English

by  Charles A. Kamhoua (editor), Laurent L. Njilla (editor), Alexander Kott (editor)

Modeling and Design of
Secure Internet of Things
IEEEPress
445HoesLane
Piscataway,NJ08854
IEEEPressEditorialBoard
EkramHossain,EditorinChief
JónAtliBenediktsson DavidAlanGrier ElyaB.Joffe
XiaoouLi PeterLian AndreasMolisch
SaeidNahavandi JeffreyReed DiomidisSpinellis
SarahSpurgeon AhmetMuratTekalp
Modeling and Design of
Secure Internet of Things
Edited by
Charles A. Kamhoua
Laurent L. Njilla
Alexander Kott
Sachin Shetty
Copyright©2020byTheInstituteofElectricalandElectronicsEngineers,Inc.Allrightsreserved.
PublishedbyJohnWiley&Sons,Inc.,Hoboken,NewJersey.
PublishedsimultaneouslyinCanada.
Nopartofthispublicationmaybereproduced,storedinaretrievalsystem,ortransmittedinany
formorbyanymeans,electronic,mechanical,photocopying,recording,scanning,orotherwise,
exceptaspermittedunderSection107or108ofthe1976UnitedStatesCopyrightAct,without
eitherthepriorwrittenpermissionofthePublisher,orauthorizationthroughpaymentofthe
appropriateper-copyfeetotheCopyrightClearanceCenter,Inc.,222RosewoodDrive,Danvers,
MA01923,[phone],fax[phone],oronthewebatwww.copyright.com.Requests
tothePublisherforpermissionshouldbeaddressedtothePermissionsDepartment,JohnWiley&
Sons,Inc.,111RiverStreet,Hoboken,NJ07030,[phone],fax[phone],oronlineat
http://www.wiley.com/go/permissions.
LimitofLiability/DisclaimerofWarranty:Whilethepublisherandauthorhaveusedtheirbest
effortsinpreparingthisbook,theymakenorepresentationsorwarrantieswithrespecttothe
accuracyorcompletenessofthecontentsofthisbookandspecificallydisclaimanyimplied
warrantiesofmerchantabilityorfitnessforaparticularpurpose.Nowarrantymaybecreatedor
extendedbysalesrepresentativesorwrittensalesmaterials.Theadviceandstrategiescontained
hereinmaynotbesuitableforyoursituation.Youshouldconsultwithaprofessionalwhere
appropriate.Neitherthepublishernorauthorshallbeliableforanylossofprofitoranyother
commercialdamages,includingbutnotlimitedtospecial,incidental,consequential,orother
damages.
Forgeneralinformationonourotherproductsandservicesorfortechnicalsupport,pleasecontact
ourCustomerCareDepartmentwithintheUnitedStatesat(800)762-2974,outsidetheUnited
Statesat(317)572-3993orfax(317)572-4002.
Wileyalsopublishesitsbooksinavarietyofelectronicformats.Somecontentthatappearsinprint
maynotbeavailableinelectronicformats.FormoreinformationaboutWileyproducts,visit
ourwebsiteatwww.wiley.com.
LibraryofCongressCataloging-in-Publicationdataappliedfor
ISBN: 9781119593362
Setin9.5/12.5ptSTIXTwoTextbySPiGlobal,Pondicherry,India
CoverDesign:Wiley
CoverImage:©Photographerismylife./GettyImages
PrintedintheUnitedStatesofAmerica.
10 9 8 7 6 5 4 3 2 1
v
Contents
AbouttheEditors ix
ListofContributors xiii
Foreword xix
Preface xxiii
1 Introduction 1
CharlesA.Kamhoua,LaurentL.Njilla,AlexanderKott,andSachinShetty
PartI GameTheoryforCyberDeception 27
2 Game-TheoreticAnalysisofCyberDeception:Evidence-BasedStrategies
andDynamicRiskMitigation 29
TaoZhang,LinanHuang,JeffreyPawlick,andQuanyanZhu
3 AHypergame-BasedDefenseStrategyTowardCyberDeceptioninInternet
ofBattlefieldThings(IoBT) 59
BoweiXiandCharlesA.Kamhoua
4 CooperativeSpectrumSharingandTrustManagement
inIoTNetworks 79
FatemehAfghah,AlirezaShamsoshoara,LaurentL.Njilla,and
CharlesA.Kamhoua
5 AdaptationandDeceptioninAdversarialCyberOperations 111
GeorgeCybenko
6 OnDevelopmentofaGame-TheoreticModelforDeception-Based
Security 123
SatyakiNan,SwastikBrahma,CharlesA.Kamhoua,andLaurentL.Njilla
7 DeceptionforCyberAdversaries:Status,Challenges,andPerspectives 141
AbdullahAlshammari,DandaB.Rawat,MosesGaruba,CharlesA.Kamhoua,
andLaurentL.Njilla
vi Contents
PartII IoTSecurityModelingandAnalysis 161
8 Cyber-PhysicalVulnerabilityAnalysisofIoTApplicationsUsing
Multi-Modeling 163
TedBapty,AbhishekDubey,andJanosSztipanovits
9 SecuringSmartCities:ImplicationsandChallenges 185
IoannisAgadakos,PrashantAnantharaman,GabrielaF.Ciocarlie,BogdanCopos,
MichaelEmmi,TancrèdeLepoint,UlfLindqvist,MichaelLocasto,andLiweiSong
10 ModelingandAnalysisofIntegratedProactiveDefenseMechanisms
forInternetofThings 217
MengmengGe,Jin-HeeCho,BilalIshfaq,andDongSeongKim
11 AddressingPolymorphicAdvancedThreatsinInternetofThings
NetworksbyCross-LayerProfiling 249
HishamAlasmary,AfsahAnwar,LaurentL.Njilla,CharlesA.Kamhoua,
andAzizMohaisen
12 AnalysisofStepping-StoneAttacksinInternetofThingsUsing
DynamicVulnerabilityGraphs 273
MarcoGamarra,SachinShetty,OscarGonzalez,DavidM.Nicol,
CharlesA.Kamhoua,andLaurentL.Njilla
13 AnomalyBehaviorAnalysisofIoTProtocols 295
PratikSatam,ShalakaSatam,SalimHariri,andAmanyAlshawi
14 DynamicCyberDeceptionUsingPartiallyObservableMonte-CarloPlanning
Framework 331
MdAliRezaAlAmin,SachinShetty,LaurentL.Njilla,DeepakK.Tosh,
andCharlesA.Kamhoua
15 ACodingTheoreticViewofSecureStateReconstruction 357
SuhasDiggaviandPauloTabuada
16 GovernancefortheInternetofThings:StrivingTowardResilience 371
S.E.Galaitsi,BenjaminD.Trump,andIgorLinkov
PartIII IoTSecurityDesign 383
17 SecureandResilientControlofIoT-Based3DPrinters 385
ZhihengXuandQuanyanZhu
18 ProactiveDefenseAgainstSecurityThreatsonIoTHardware 407
QiaoyanYu,ZhimingZhang,andJayaDofe
19 IoTDeviceAttestation:FromaCross-LayerPerspective 435
OrlandoArias,FahimRahman,MarkTehranipoor,andYierJin
Contents vii
20 Software-DefinedNetworkingforCyberResilienceinIndustrialInternet
ofThings(IIoT) 453
KamrulHasan,SachinShetty,AminHassanzadeh,MalekBenSalem,
andJayChen
21 LeverageSDNforCyber-SecurityDeceptioninInternetofThings 479
YaoqingLiu,GareginGrigoryan,CharlesA.Kamhoua,andLaurentL.Njilla
22 DecentralizedAccessControlforIoTBasedonBlockchainand
SmartContract 505
RonghuaXu,YuChen,andErikBlasch
23 IntentasaSecureDesignPrimitive 529
PrashantAnantharaman,J.PeterBrady,IraRayJenkins,VijayH.Kothari,
MichaelC.Millian,KartikPalani,KirtiV.Rathore,JasonReeves,
RebeccaShapiro,SyedH.Tanveer,SergeyBratus,andSeanW.Smith
24 AReviewofMovingTargetDefenseMechanismsforInternet
ofThingsApplications 563
NicoSaputro,SametTonyali,AbdullahAydeger,KemalAkkaya,
MohammadA.Rahman,andSelcukUluagac
25 TowardRobustOutlierDetectorforInternetofThingsApplications 615
RajManiShuklaandShamikSengupta
26 SummaryandFutureWork 635
CharlesA.Kamhoua,LaurentL.Njilla,AlexanderKott,andSachinShetty
Index 647
ix
About the Editors
Charles A. Kamhoua is a Senior Electronics
Engineerat the Network SecurityBranch of the
USArmyResearchLaboratory(ARL)inAdelphi,
MD, where he is responsible for conducting
anddirectingbasicresearchintheareaofgame
theoryappliedtocybersecurity.Priortojoining
the Army Research Laboratory, he was a
researcherattheUSAirForceResearchLabora-
tory(AFRL),Rome,NewYork,for6yearsandan
educator in different academic institutions for
morethan10years.Hehasheldvisitingresearch
positionsattheUniversityofOxfordandHarvardUniversity.Hehascoauthored
more than 200 peer-reviewed journal and conference papers that include 5 best
paper awards. He is a coinventor of 3 patents and 4 patent applications. He has
been at the forefront of several new technologies, coediting three books at
Wiley-IEEE Press entitled Assured Cloud Computing, Blockchain for Distributed
SystemSecurity,andModelingandDesignofSecureInternetofThings.Hehaspre-
sentedover60invitedkeynoteanddistinguishedspeechesandhasco-organized
over10conferencesandworkshops.Hehasmentoredmorethan60youngscho-
lars,includingstudents,postdocs,andSummerFacultyFellow.Hehasbeenrecog-
nized for his scholarship and leadership with numerous prestigious awards,
includingthe2019USArmyCivilianServiceCommendationMedal,the2019Fed-
eral100-FCWannualawardsforindividualsthathavehadanexceptionalimpact
onfederalIT,the2019IEEEComSocTechnicalCommitteeonBigData(TCBD)
BestJournalPaperAward,the2018ARLAchievementAwardforleadershipand
outstanding contribution to the ARL Cyber Camo (cyber deception) project, the
2018FulbrightSeniorSpecialistFellowship,the2017AFRLInformationDirecto-
rate Basic Research Award “For Outstanding Achievements in Basic Research,”
the 2017 Fred I. Diamond Award for the best paper published at AFRL’s
x AbouttheEditors
InformationDirectorate,40AirForceNotableAchievementAwards,the2016FIU
CharlesE.PerryYoungAlumniVisionaryAward,the2015BlackEngineerofthe
YearAward(BEYA),the2015NSBEGoldenTorchAward–PioneeroftheYear,
andselectiontothe2015HeidelbergLaureateForum,tonameafew.Hehasbeen
congratulatedbytheWhiteHouse,theUSCongress,andthePentagonforthose
achievements. He received a B.S. in electronics from the University of Douala
(ENSET),Cameroon,in1999,anMSinTelecommunicationandNetworkingfrom
FloridaInternationalUniversity(FIU)in2008,andaPhDinElectricalEngineer-
ingfromFIUin2011.HeiscurrentlyanadvisorfortheNationalResearchCouncil
postdoc program,a member of the FIU alumni association and Sigma Xi, and a
seniormemberofACMandIEEE.
Laurent L. Njilla joined the Cyber Assurance
BranchoftheUSAirForceResearchLaboratory
(AFRL), Rome, NY, as a Research Electronics
Engineerin2015.Asaresearcher,heisrespon-
sibleforconductinganddirectingbasicresearch
intheareaofcyberdefense,cyberphysicalsys-
tem, cyber resiliency, hardware security, and
theapplicationofgametheory,categorytheory,
and Blockchain technology. He is the Program
Manager of the Center of Excellence (CoE) in
Cyber Security for the Historically Black Col-
leges and Universities & Minorities Institutions
(HBCU/MI), and the Program Manager of the
Disruptive Information Technology Program at AFRL/RI. He has coauthored
over 70 peer-reviewed journal and conference papers with a best paper award.
Heisacoinventorof2patentsand3patentapplications.Coeditingoftwobooks
at Wiley-IEEE Press entitled Blockchain for Distributed System Security and
ModelingandDesignofSecureInternetofThings.Hismentorshipofyoungstudents
and scholars is recognized with multiple awards including Air Force Notable
Achievementawards,FIUDistinguishedAlumniinGovernment Serviceaward,
and the 2015 FIU World Ahead Graduate award. Prior to joining the AFRL, he
was a Senior Systems Analyst in the industry sector for more than 10 years. He
isareviewerofmultiplejournalsandservesonthetechnicalprogramcommittees
of several international conferences. He received his BS in Computer Science
from the University of Yaoundé-1 in Yaoundé, Cameroon, an MS in Computer
Engineering from the University of Central Florida (UCF) in 2005, and a PhD
in Electrical Engineering from Florida International University (FIU) in 2015.
HeisamemberoftheNationalSocietyofBlackEngineer(NSBE).