Improving functionality, efficiency, and trustworthiness of secure communication on an Internet diversified by mobile devices and the Internet of things

Viac o knihe

Secure communication is crucial for various Internet data exchanges, yet widely used protocols like TLS 1.2 were established years ago. The rise of smartphones and the Internet of Things (IoT) has created new scenarios with diverse devices, highlighting the need for evolved secure communication. Our analysis of current secure communication practices across different scenarios reveals significant challenges, particularly in the IoT, where advanced security and privacy features are lacking. Additionally, there is a pressing need for improved efficiency in secure communication for smartphones and low-latency solutions in industrial IoT settings. We also identify issues within the PKI-based trust infrastructure and emphasize the importance of understanding the factors influencing the adoption of new security mechanisms. To address these challenges, we adapt the Tor anonymity network for resource-constrained IoT devices, enhancing metadata protection and enabling efficient in-network access control. We also empower IoT devices with versatile secure communication stacks and improve efficiency in industrial IoT communication. Furthermore, we propose best practices for secure connection setups via smartphones and conduct a risk analysis of cross-signing in Web PKI, which can lead to problematic certificate trust paths. Lastly, we explore the drivers and obstacles affecting the implementation of updated security protocols, using TLS 1.