arrow
返回

SoftAuthZ: A Context-Aware, Behavior-Based Authorization Framework for Home IoT

delete2019-12-01
delete25
PRE
AI
N
Nirnay Ghosh
C
Chandra, Saket
V
Vinay Sachidananda *
Y
Yuval Elovici
DOI:10.1109/JIOT.2019.2941767delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
The smart home is one of the most prominent applications in the paradigm of the Internet of Things (IoT). While, it has added a level of comfort and convenience to our everyday life, at the same time, it brings a unique security challenge of mitigating insider threats, posed by legitimate users. Such threats primarily arise due to sharing of IoT devices and the presence of complex social and trust relationships among the users. The state-of-the-art home IoT platforms manage access control by deploying various multifactor authentication mechanisms. Nevertheless, such hard-security measures are inadequate to thwart insider threats, and there is a growing need to integrate user behavior and environmental contexts to make intelligent authorization decisions. In this article, we propose a novel context-sensitive and behavior-based security framework, called SoftAuthZ, that incorporates soft-security mechanisms, such as belief, confidence, etc., to support authorization decisions. Our framework integrates multiple IoT environment-specific attributes, such as environmental context, nature of the device, requested capabilities (actions), users' trust levels concerning the home environment, and variability in device access requests into a linear regression model, and computes confidence related to access requests. Such confidence scores can be used by the home IoT platform to make authorization decisions. Extensive analysis and simulation-based performance evaluation validate the efficacy of our framework, demonstrating that it can classify users based on their device usages, and also achieve higher rates of successful authorization.
Keyword:
Authorization
environmental contexts
insider threat
Internet of Things (IoT)
smart home
soft security
unalikeability
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Internet of Things Journal 封面图
IEEE Internet of Things Journal
IF:
8.9
论文数:
1.4W
被引数:
7.8W

机构

S
singapore university of technology & design
学者数:
2.8K
论文数: 3.6K
被引数: 5
B
ben-gurion university of the negev
学者数:
8.4K
论文数: 5.1K
被引数: 1
学者 查看更多机构
引用论文

引用论文

err分享
err收藏
ABA signaling and metabolism on anthocyanin and sugar syntheses in grapes
err2022-09-01
err0
PREAI
errS. Kondo; C. Hoshi; H. Tomiyama; H. Lin; T. Saito; K. Ohkawa; H. Ohara; N. Iwasaki
err分享
err收藏
Toward a Lightweight Authentication and Authorization Framework for Smart Objects
err2015-04-01
err99
errOAAI
errHernandez-Ramos, Jose L.; Pawlowski, Marcin Piotr; Jara, Antonio J.; Skarmeta, Antonio F.; Ladid, Latif
err分享
err收藏
Increased γ-glutamyl transferase positively contributed to the poor prognosis in lung cancer patients
err2018-12-01
err0
errOAAI
errJing Jing Ran; Ruixin He; Qiang Yu; Limei Kang; Yaoqi Fu; Cong Bo; Li Zhang
err分享
err收藏
err分享
err收藏
学者 查看更多内容