• Journal of the Korea Convergence Society
• /
• v.8 no.10
• /
• pp.61-66
• /
• 2017

Recently, IoT technology is rapidly developing with the keyword "Anytime, Anywhere, Convenient". In addition, security problems in IoT systems are exploding and the damage is increasing as well. In this paper, we propose a method to develop IoT system safely by using internationally recognized CC evaluation in ICT by identifying the standardization and security technology development status defining IoT system security requirements. For this purpose, IoT system and service security aspects are analyzed. Based on this, it is possible to design the security functional requirements and to demonstrate the rationale of the security objective through the correspondence relation, and it is possible to design the protection profile for the IoT system. This is a sufficient basis for the development methodology to be presented in this paper because it is used as a means of referring to the set of security requirements of administrators, developers, and users.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.33 no.3
• /
• pp.459-469
• /
• 2023

The number of IoT devices is explosively increasing due to the development of embedded equipment and computer networks. As a result, cyber threats to IoT are increasing, and currently, malicious codes are being distributed and infected to IoT devices and exploited for DDoS. Currently, IoT devices that are the target of such an attack have various installation environments and have limited resources. In addition, IoT devices have a characteristic that once set up, the owner does not care about management. Because of this, IoT devices are becoming a blind spot for management that is easily infected with malicious codes. Because of these difficulties, the threat of malicious codes always exists in IoT devices, and when they are infected, responses are not properly made. In this paper, we will design an malware detection system for IoT in consideration of the characteristics of the IoT environment and present detection rules suitable for use in the system. Using this system, it will be possible to construct an IoT malware detection system inexpensively and efficiently without changing the structure of IoT devices that are already installed and exposed to cyber threats.

• KNOM Review
• /
• v.23 no.1
• /
• pp.51-62
• /
• 2020

Open IoT platform that shares communication infrastructure and provides cloud resources can flexibly reduce development period and cost of smart service. In this paper, as an open IoT platform, we propose a virtual IoT system based on edge computing that implements a virtual IoT device for a physical IoT device and allows service developers to interact with the virtual device. A management server in the edge cloud, near the IoT physical device, manages the creation, movement, and removal of virtual IoT devices corresponding to the physical IoT devices. This paper define the operations of the management server, the physical IoT device, and the virtual IoT device, which are major components of the virtual IoT system, and design the communication protocol required to perform the operations. Finally, through simulations, this paper evaluate the performance of the edge computing based virtual IoT system by confirming that each component performs the defined states and operations as designed.

• The Journal of the Institute of Internet, Broadcasting and Communication
• /
• v.16 no.5
• /
• pp.151-156
• /
• 2016

The IoT technology and sensors used for collecting the environment information has rapidly increased the number and type. With the increasing need for this type of sensor effective system for selecting and testing the sensor nodes for the IoT to develop products and services. In this study, we design and implement IoT sensor testing system for IoT service and product. In order to support rapid prototyping, the proposed system provides testing and management tools for IoT sensor nodes. We analyze the requirements of the proposed system and design the system based on the functional component-specific design. Finally, we implement testing application to verify the functional elements of the proposed system.

• Asia-pacific Journal of Multimedia Services Convergent with Art, Humanities, and Sociology
• /
• v.8 no.6
• /
• pp.909-917
• /
• 2018

Recently, the Internet of Thing (IoT) technology is expanding explosively in the number of devices and applications in many application areas. In IoT systems, sensors and actuators are connected to the Internet and cooperate to do some applications by exchanging information. In this paper an IoT smart home system is developed to monitor and control home devices easily. Our system consists of sensor devices, IoT gateways, and an IoT server. Sensor devices developed using Rfduino sense the physical world and transmit their data using BLE to the IoT server thru the IoT gateway. We implemented the IoT gateway using Raspberry Pi and the IoT server using ARTIK cloud. We installed our system and made a test in our lab, which showed that our system can be installed and managed easily and extended its functionality in an easy way. By taking advantage of the rule mechanism and action messages of ARTIK cloud, we implemented the control of device parameters easily by sending action messages to the ARTIK cloud.

• KIPS Transactions on Computer and Communication Systems
• /
• v.7 no.2
• /
• pp.59-66
• /
• 2018

Android Things is an Android-based platform running in Google's IoT environment. Android smartphones require permissions from application users to use certain features, but in the case of Android Things, there is no display to send request notifications to users. Therefore Does not make a request to use the permissions and automatically accepts the permissions from the system. If the privilege is used indiscriminately, malicious behavior such as system failure or leakage of personal information can be performed by a function which is not related to the function originally. Therefore, By monitoring the privileges that a device uses in an Android-based IoT system, users can proactively respond to security threats that can arise through unauthorized use of the IoT system. This paper proposes a system that manages the rights currently being used by IoT devices in the Android Things based IoT environment, so that Android-based IoT devices can cope with irrelevant use of rights.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2022.10a
• /
• pp.344-345
• /
• 2022

ogy is being used in many fields, such as smart farms, smart oceans, smart homes, and smart energy. Various IoT terminals are used for these IoT services. Here, IoT devices are physically installed in various places. A malicious attacker can access the IoT service using an unauthorized IoT device, access unauthorized important information, and then modify it. In this study, to solve these problems, we propose an authentication system for IoT devices used in IoT services. The IoT device authentication system proposed in this study consists of an authentication module mounted on the IoT device and an authentication module of the IoT server. If the IoT device authentication system proposed in this study is used, only authorized IoT devices can access the service and access of unauthorized IoT devices can be denied. Since this study proposes only the basic IoT device authentication mechanism, additional research on additional IoT device authentication functions according to the security strength is required.IoT technol

• Proceedings of the Korea Information Processing Society Conference
• /
• 2023.11a
• /
• pp.196-199
• /
• 2023

다양한 산업과 환경에서 IoT 기술이 사용되는 만큼 보안에 대한 위협도 증가하고 있다. IoT 서비스를 제공하는 디바이스와 시스템이 보안 공격을 당해 중단되는 경우 그에 따른 피해가 막대하기 때문에 IoT 의 보안 중요성은 날로 커지고 있다. IoT 디바이스 보안을 강화하기 위한 방법으로 FOTA 시스템를 통한 펌웨어 업데이트를 하는 것이 필요하다. 본 고에서는 IoT 디바이스 펌웨어 업데이트를 위해 필요한 FOTA 시스템에 대한 아키텍처와 구성 등을 제언한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2018.05a
• /
• pp.566-568
• /
• 2018

최근 IoT 기술이 산업 전반에 걸쳐 적용되고 있다. 본 논문에서는 기존 택배 시스템에서 비효율적인 경로로 배송되는 문제점을 개선하기 위해 택배 시스템에 IoT 기술을 적용하여 경로 최적화를 도모하며 IoT 장치와 IoT 플랫폼을 중심으로 문제 해결 솔루션을 제시한다.

• KIPS Transactions on Computer and Communication Systems
• /
• v.3 no.11
• /
• pp.403-408
• /
• 2014

In the Internet of Things(IoT) era, many of the things or objects that enclose our environments are able to associate with those things on the Internet. To construct IoT systems, it needs to consider a component for acquiring and aggregating of sensory data via things with sensors and instruments, which is connected by diverse networks, in IoT environment. An IoT system is intrinsically distributed in a variety of ways. In addition, to manage an IoT system efficiently, interoperability is needed to meet requirements while the IoT system is designed to deliver data among its applications. In this paper, a reference architecture based on asynchronous messaging is defined and used for designing an IoT system. To apply the architecture, we discuss how to manage data streams with real-time characteristics and make a prototype based on pipe-and-filter to produce and consume them by a pub/sub messaging system NaradaBrokering.