Design Rationale for Symbiotically Secure Key Management Systems in IoT and Beyond

Witali Bartsch, Prosanta Gope, Elif Kavun, Owen Millwood, Andriy Panchenko, Aryan Pasikhani, Ilia Polian

2023

Abstract

The overwhelmingly widespread use of Internet of Things (IoT) in different application domains brought not only benefits, but, alas, security concerns as a result of the increased attack surface and vectors. One of the most critical mechanisms in IoT infrastructure is key management. This paper reflects on the problems and challenges of existing key management systems, starting with the discussion of a recent real-world attack. We identify and elaborate on the drawbacks of security primitives based purely on physical variations and – after highlighting the problems of such systems – continue on to deduce an effective and cost-efficient key management solution for IoT systems extending the symbiotic security approach in a previous work. The symbiotic architecture combines software, firmware, and hardware resources for secure IoT while avoiding the traditional scheme of static key storage and generating entropy for key material on-the-fly via a combination of a Physical Unclonable Function (PUF) and pseudo-random bits pre-populated in firmware.

Paper Citation

in Harvard Style

Bartsch W., Gope P., Kavun E., Millwood O., Panchenko A., Pasikhani A. and Polian I. (2023). Design Rationale for Symbiotically Secure Key Management Systems in IoT and Beyond. In Proceedings of the 9th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-624-8, pages 583-591. DOI: 10.5220/0011726900003405

in Bibtex Style

@conference{icissp23,
author={Witali Bartsch and Prosanta Gope and Elif Kavun and Owen Millwood and Andriy Panchenko and Aryan Pasikhani and Ilia Polian},
title={Design Rationale for Symbiotically Secure Key Management Systems in IoT and Beyond},
booktitle={Proceedings of the 9th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2023},
pages={583-591},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0011726900003405},
isbn={978-989-758-624-8},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 9th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - Design Rationale for Symbiotically Secure Key Management Systems in IoT and Beyond
SN - 978-989-758-624-8
AU - Bartsch W.
AU - Gope P.
AU - Kavun E.
AU - Millwood O.
AU - Panchenko A.
AU - Pasikhani A.
AU - Polian I.
PY - 2023
SP - 583
EP - 591
DO - 10.5220/0011726900003405