NDLI: Dethroning Transport Layer Security in the Embedded World

Content Provider	IEEE Xplore Digital Library
Author	Unger, S. Pfeiffer, S. Timmermann, D.
Copyright Year	2012
Abstract	Developing a security concept feasible for a large number of cooperating embedded devices is crucial for the practical relevance of visions such as the Internet of Things, Ambient Assisted Living or Pervasive Computing. However, designing these concepts in conjunction with new technologies usually is more expensive. Thus, new technologies often rely on existing security techniques on lower layers of the network stack. Especially the Transport Layer Security (TLS) protocol suite is a very popular solution because TLS is a widely spread and well accepted protocol. However, TLS is not ideal for the realm of embedded devices and it does not provide all the necessary features. We state that a comprehensive security framework for large distributed systems of embedded devices has to be implemented on application level. We investigate on the applicability and adaptability of the Web Service (WS) Security specification suite since it offers such a desired comprehensive security framework. Furthermore, its base technology - Web Services - has already been ported to the domain of embedded devices by means of the Devices Profile for Web Services (DPWS). However, WS Security imposes a dramatic overhead on message sizes and parsing efforts for providing confidentiality, integrity and authenticity. Thus, in this paper we discuss two variants of WS Security that decrease the imposed overhead but remain compatible to the classical WS Security. A performance analysis shows that our proposed solutions have no significant drawback compared to the state of the art - TLS - but even provide a richer feature set.
Starting Page	1
Ending Page	5
File Size	101670
Page Count	5
File Format	PDF
ISBN	9781467302289
ISSN	21574952
e-ISBN	9781467302296
e-ISBN	9781467302272
DOI	10.1109/NTMS.2012.6208685
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2012-05-07
Publisher Place	Turkey
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Protocols Encryption Simple object access protocol Payloads
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Evaluation of transport protocols for web services

A CoAP based SOAP transport binding

An implementation of embedded RESTful Web services

Security protection using simple object access protocol (SOAP) messages techniques

Preventing Service Oriented Denial of Service (PreSODoS): A Proposed Approach

A study on network security technology based on Web Service

Implementing Attribute-Based Encryption in Web Services

Performance analysis of security layer on embedded web services

Service Security Revisited

Dethroning Transport Layer Security in the Embedded World

Similar Documents

Evaluation of transport protocols for web services

A CoAP based SOAP transport binding

An implementation of embedded RESTful Web services

Security protection using simple object access protocol (SOAP) messages techniques

Preventing Service Oriented Denial of Service (PreSODoS): A Proposed Approach

A study on network security technology based on Web Service

Implementing Attribute-Based Encryption in Web Services

Performance analysis of security layer on embedded web services

Service Security Revisited

Dethroning Transport Layer Security in the Embedded World