보안 공격에 강인한 사물인터넷 센서 기반 정보 시스템 개발 = Development of Internet of Things Sensor-based Information System Robust to Security Attack

다국어 초록 (Multilingual Abstract)

With the rapid development of Internet of Things sensor devices and big data processing techniques, Internet of Things sensor-based information systems have been applied in various industries. Depending on the industry in which the information systems are applied, the accuracy of the information derived can affect the industry's efficiency and safety. Therefore, security techniques that protect sensing data from security attacks and enable information systems to derive accurate information are essential. In this paper, we examine security threats targeting each processing step of an Internet of Things sensor-based information system and propose security mechanisms for each security threat. Furthermore, we present an Internet of Things sensor-based information system structure that is robust to security attacks by integrating the proposed security mechanisms. In the proposed system, by applying lightweight security techniques such as a lightweight encryption algorithm and obfuscation-based data validation, security can be secured with minimal processing delay even in low-power and low-performance IoT sensor devices. Finally, we demonstrate the feasibility of the proposed system by implementing and performance evaluating each security mechanism.

국문 초록 (Abstract)

사물인터넷 센서 장치와 빅데이터 처리 기법의 개발 및 보급으로 사물인터넷 센서를 활용한 정보 시스템이 여러 산업 분야에 적용되어 활용되고 있다. 정보 시스템이 적용된 산업 분야에 따라 정보 시스템이 도출하는 정보의 정확성이 산업의 효율, 안전에 영향을 미칠수 있다. 따라서 외부 공격으로부터 센싱 데이터를 보호하고 정보 시스템이 정확한 정보를 도출할 수 있도록 하는 보안 기법이 필수적이다. 본 논문에서는 사물인터넷 센서 기반 정보 시스템의 각 처리 단계를 대상으로 하는 보안 위협을 살펴보고, 각 보안 위협에 대한대응 기법을 제안한다. 나아가 제안하는 대응 기법을 통합하여 보안 공격에 강인한 사물인터넷 센서 기반 정보 시스템 구조를 제시한다.
제안 시스템에서는 경량 암호 알고리즘, 난독화 기반 데이터 유효성 검사 등 경량 보안 기법을 적용함으로써 저전력, 저성능의 사물인터넷 센서 장치에서도 최소한의 처리 지연만으로 보안성을 확보할 수 있도록 한다. 보편적으로 각 보안 기법을 실제로 구현하고 실험을통해 성능을 보임으로써 제안 시스템의 실현 가능성을 보인다.

참고문헌 (Reference)

• 1 Sayyada Fahmeeda Sultana, "Video Encryption Algorithm and Key Management using Perfect Shuffle" IOSR Journals 07 (07): 01-05, 2017
• 2 Kuemper, D., "Valid. IoT : a framework for sensor data quality analysis and interpolation" 294-303, 2018
• 3 Yajun Guo, "Study on Intelligent Logistics Management Information System Based on IOT and Cloud Computation in Big Data Era" Bentham Science Publishers Ltd. 9 (9): 934-941, 2015
• 4 Joon-hyuk Yoon, "Smart parking system using mobile crowdsensing : focus on removing privacy information" 32-35, 2018
• 5 Tharayil, K. S., "Sensor defense in-software(SDI) : Practical software based detection of spoofing attacks on position sensors" 95 : 103904-, 2020
• 6 Xiao, Q, "Seeing is not believing: Camouflage attacks on image scaling algorithms" 28-19, 2019
• 7 Chatterjee, S., "Securing IoT devices in smart cities of India : from ethical and enterprise information system management perspective" 15 (15): 585-615, 2021
• 8 Boukerche, A., "Outlier detection : Methods, models, and classification" 53 (53): 1-37, 2020
• 9 Angelin, B., "Outlier Detection using Clustering Techniques-K-means and K-median" 373-378, 2020
• 10 Grosse, K., "On the(statistical)detection of adversarial examples"
• 11 Dean, J., "MapReduce : simplified data processing on large clusters" 51 (51): 107-113, 2008
• 12 Sharma, P. S., "Localisation of License Plate and Character Recognition Using Haar Cascade" 971-974, 2019
• 13 Damian Dziak, "IoT-Based Information System for Healthcare Application: Design Methodology Approach" MDPI AG 7 (7): 596-, 2017
• 14 Tcheumadjeu, L. C. T., "Integration of mobile wireless RF sensors into a traffic information system" 25 : 1865-1883, 2017
• 15 Yoon, C., "Implement smart farm with IoT technology" 749-752, 2018
• 16 Hongjun Liu, "Image encryption using DNA complementary rule and chaotic maps" Elsevier BV 12 (12): 1457-1466, 2012
• 17 Mo, Y, "False data injection attacks in control systems" 1-6, 2010
• 18 Sung-sik Mun, "Dos Attack Defense Using SDN and Honeypot" 397-400, 2020
• 19 Kim, B., "Decamouflage : A Framework to Detect Image-Scaling Attacks on Convolutional Neural Networks"
• 20 Ma, Y., "Cryptanalysis of an image block encryption algorithm based on chaotic maps" 54 : 102566-, 2020
• 21 Giuste, F. O, "CIFAR-10 Image Classification Using Feature Ensembles"
• 22 Abbasi, A., "Big data research in information systems: Toward an inclusive research agenda" 17 (17): 3-, 2016
• 23 Apache, "Apache Spark"
• 24 Apache, "Apache Hadoop"
• 25 Qureshi, A. U. H., "An adversarial approach for intrusion detection systems using Jacobian Saliency Map Attacks(JSMA)" 9 (9): 58-, 2020
• 26 Quiring, E., "Adversarial preprocessing : Understanding and preventing image-scaling attacks in machine learning" 1363-1380, 2020
• 27 Chakraborty, A., "Adversarial attacks and defences : A survey"
• 28 Kapalova, N., "A block encryption algorithm based on exponentiation transform" 7 (7): 1788292-, 2020
• 29 Anaya, E., "A Performance Study on Cryptographic Algorithms for IoT Devices" 159-161, 2020
• 30 Moo-kyung Jung, "A Design of Platform of Portable Cultural Asset Surveilance System" 599-600, 2013