Survey of Operating Systems for the IoT Environment
---
paper_title: A Survey on Various Data Hiding Techniques and their Comparative Analysis

paper_content:

With the explosive growth of internet and the fast communication techniques in recent years the security and the confidentiality of the sensitive data has become of prime and supreme importance and concern. To protect this data from unauthorized access and tampering various methods for data hiding like cryptography, hashing, authentication have been developed and are in practice today. In this paper we will be discussing one such data hiding technique called Steganography. Steganography is the process of concealing sensitive information in any media to transfer it securely over the underlying unreliable and unsecured communication network. Our paper presents a survey on various data hiding techniques in Steganography that are in practice today along with the comparative analysis of these techniques.
---
paper_title: A Multi-Dimensional approach towards Intrusion Detection System

paper_content:

In this paper, we suggest a multi-dimensional approach towards intrusion detection. Network and system usage parameters like source and destination IP addresses; source and destination ports; incoming and outgoing network traffic data rate and number of CPU cycles per request are divided into multiple dimensions. Rather than analyzing raw bytes of data corresponding to the values of the network parameters, a mature function is inferred during the training phase for each dimension. This mature function takes a dimension value as an input and returns a value that represents the level of abnormality in the system usage with respect to that dimension. This mature function is referred to as Individual Anomaly Indicator. Individual Anomaly Indicators recorded for each of the dimensions are then used to generate a Global Anomaly Indicator, a function with n variables (n is the number of dimensions) that provides the Global Anomaly Factor, an indicator of anomaly in the system usage based on all the dimensions considered together. The Global Anomaly Indicator inferred during the training phase is then used to detect anomaly in the network traffic during the detection phase. Network traffic data encountered during the detection phase is fed back to the system to improve the maturity of the Individual Anomaly Indicators and hence the Global Anomaly Indicator.
---
paper_title: Internet of Things (IoT): A Vision, Architectural Elements, and Future Directions

paper_content:

Ubiquitous sensing enabled by Wireless Sensor Network (WSN) technologies cuts across many areas of modern day living. This offers the ability to measure, infer and understand environmental indicators, from delicate ecologies and natural resources to urban environments. The proliferation of these devices in a communicating-actuating network creates the Internet of Things (IoT), wherein sensors and actuators blend seamlessly with the environment around us, and the information is shared across platforms in order to develop a common operating picture (COP). Fueled by the recent adaptation of a variety of enabling wireless technologies such as RFID tags and embedded sensor and actuator nodes, the IoT has stepped out of its infancy and is the next revolutionary technology in transforming the Internet into a fully integrated Future Internet. As we move from www (static pages web) to web2 (social networking web) to web3 (ubiquitous computing web), the need for data-on-demand using sophisticated intuitive queries increases significantly. This paper presents a Cloud centric vision for worldwide implementation of Internet of Things. The key enabling technologies and application domains that are likely to drive IoT research in the near future are discussed. A Cloud implementation using Aneka, which is based on interaction of private and public Clouds is presented. We conclude our IoT vision by expanding on the need for convergence of WSN, the Internet and distributed computing directed at technological research community.
---
paper_title: A generalized scheme for data encryption technique using a randomized matrix key

paper_content:

Abstract In public key encryption there is always a possibility of some information being leaked out. Because a cryptoanalyst can always encrypt random messages with a public key, he can get some information. Not a whole of information is to be gained here, but there are potential problems with allowing a crypto analyst to encrypt random messages with public key. Some information is leaked out every time to the crypto analyst, he encrypts a message. With probabilistic encryption algorithms, a crypto analyst can no longer encrypt random plain texts looking for correct cipher text. Since multiple cipher texts will be developed for one plain text, even if he decrypts the message to plain text, he does not know how far he had guessed the message correctly. There are several algorithms for encryption. The algorithm that is going to be discussed in this work is going to generate a sequence. The algorithm considers a matrix key and executes a sequence of steps, which generates this sequence. Based on the similar...
---
paper_title: Image encryption for secure Internet multimedia applications

paper_content:

Internet multimedia applications have become very, popular. Valuable multimedia content such as digital images, however, is vulnerable to unauthorized access while in storage and during transmission over a network. Streaming digital images also require high network bandwidth for transmission. For effective image transmission over the Internet, therefore, both security and bandwidth issues must be considered. We present a novel scheme, which combines the discrete wavelet transform (DWT) for image compression and block cipher Data Encryption Standard (DES) for image encryption. The simulation results indicate that our proposed method enhances the security for image transmission over the Internet as well as improves the transmission rate.
---
paper_title: Implementation of a Real Time Passenger Information System

paper_content:

Intelligent Transportation Systems (ITS) are gaining recognition in developing countries like India. This paper describes the various components of our prototype implementation of a Real-time Passenger Information System (RTPIS) for a public transport system like a fleet of buses. Vehicle-mounted units, bus station units and a server located at the transport company premises comprise the system. The vehicle unit reports the current position of the vehicle to a central server periodically via General Packet Radio Service (GPRS). An Estimated Time of Arrival (ETA) algorithm running on the server predicts the arrival times of buses at their stops based on real-time observations of the buses' current Global Positioning System (GPS) coordinates. This information is displayed and announced to passengers at stops using station units, which periodically fetch the required ETA from the server via GPRS. Novel features of our prototype include: (a) a route creator utility which automatically creates new routes from scratch when a bus is driven along the new route, and (b) voice tagging of stops and points of interest along any route. Besides, the prototype provides: (i) web-based applications for passengers, providing useful information like a snapshot of present bus locations on the streets, and (ii) web-based analysis tools for the transport authority, providing information useful for fleet management, like number of trips undertaken by a specific bus. The prototype has been demonstrated in a campus environment, with four-wheelers and two-wheelers emulating buses. The automatic real-time passenger information system has the potential of making the public transport system an attractive alternative for city-dwellers, thereby contributing to fewer private vehicles on the road, leading to lower congestion levels and less pollution.
---
paper_title: An LSB Data Hiding Technique Using Natural Number Decomposition

paper_content:

In this paper, a novel data hiding technique is proposed, as an improvement over the Fibonacci LSB data-hiding technique proposed by Battisti et al. and the technique using prime number system. First we mathematically model and generalize our approach. Then we propose our novel technique, based on decomposition of a number (pixel-value) as sum of natural numbers. The particular representation generates a different set of (virtual) bit-planes altogether, suitable for embedding purposes. They not only allow one to embed secret message in higher bit- planes but also do it without much distortion and in a reliable and secured manner, guaranteeing efficient retrieval of secret message. Analysis indicates that image quality of the stego-image hidden by the technique using the natural number decomposition technique improves drastically against that using prime and Fibonacci decomposition techniques. Experimental results show that stego-image is visually indistinguishable from cover-image.
---
paper_title: A Semi-distributed Reputation Based Intrusion Detection System for Mobile Adhoc Networks

paper_content:

A Mobile Adhoc Network (manet) is a coop- erative engagement of a collection of mobile nodes without any centralized access point. The underlying concept of coordination among nodes in a cooperative manet has in- duced in them a vulnerability to attacks due to issues like dynamically changing network topology, cooperative algo- rithms and lack of centralized monitoring point. We pro- pose a semi-distributed approach towards a reputation-based Intrusion Detection System (ids) that combines with the Dy- namic Source Routing (dsr) protocol for strengthening the defense of a manet. Our system inherits the features of rep- utation from human behavior, hence making the ids socially inspired. It has a semi-distributed architecture as the crit- ical observations of the system are neither spread globally nor restricted locally. The system assigns maximum prior- ity to self observation by nodes for updating any reputation parameters, thus avoiding the need of a trust relationship be- tween nodes. Our system is also unique in the sense that it features the concepts of Redemption and Fading with a ro- bust Path Manager and Monitor system. Simulation studies show that dsr fortied with our system outperforms normal dsr in terms of the packet delivery ratio and routing over- head even when up to half of nodes in the network behave as malicious. Various parameters introduced such as timing window size, reputation update values, congestion parameter and other thresholds have been optimized over several simu- lation runs. By combining the semi-distributed architecture and other design essentials like path manager, monitor mod- ule, redemption and fading concepts, our system proves to be robust enough to counter most common attacks in manets.
---
paper_title: TinySec: a link layer security architecture for wireless sensor networks

paper_content:

We introduce TinySec, the first fully-implemented link layer security architecture for wireless sensor networks. In our design, we leverage recent lessons learned from design vulnerabilities in security protocols for other wireless networks such as 802.11b and GSM. Conventional security protocols tend to be conservative in their security guarantees, typically adding 16--32 bytes of overhead. With small memories, weak processors, limited energy, and 30 byte packets, sensor networks cannot afford this luxury. TinySec addresses these extreme resource constraints with careful design; we explore the tradeoffs among different cryptographic primitives and use the inherent sensor network limitations to our advantage when choosing parameters to find a sweet spot for security, packet overhead, and resource requirements. TinySec is portable to a variety of hardware and radio platforms. Our experimental results on a 36 node distributed sensor network application clearly demonstrate that software based link layer protocols are feasible and efficient, adding less than 10% energy, latency, and bandwidth overhead.
---
paper_title: ContikiSec: A Secure Network Layer for Wireless Sensor Networks under the Contiki Operating System

paper_content:

In this paper we introduce ContikiSec, a secure network layer for wireless sensor networks, designed for the Contiki Operating System. ContikiSec has a configurable design, providing three security modes starting from confidentiality and integrity, and expanding to confidentiality, authentication, and integrity. ContikiSec has been designed to balance low energy consumption and security while conforming to a small memory footprint. Our design was based on performance evaluation of existing security primitives and is part of the contribution of this paper. Our evaluation was performed in the Modular Sensor Board hardware platform for wireless sensor networks, running Contiki. Contiki is an open source, highly portable operating system for wireless sensor networks (WSN) that is widely used in WSNs.
---
paper_title: Proposed embedded security framework for Internet of Things (IoT)

paper_content:

IoT is going to be an established part of life by extending the communication and networking anytime, anywhere. Security requirements for IoT will certainly underline the importance of properly formulated, implemented, and enforced security policies throughout their life-cycle. This paper gives a detailed survey and analysis of embedded security, especially in the area of IoT. Together with the conventional security solutions, the paper highlights the need to provide in-built security in the device itself to provide a flexible infrastructure for dynamic prevention, detection, diagnosis, isolation, and countermeasures against successful breaches. Based on this survey and analysis, the paper defines the security needs taking into account computational time, energy consumption and memory requirements of the devices. Finally, this paper proposes an embedded security framework as a feature of software/hardware co-design methodology.
---
paper_title: A public-key infrastructure for key distribution in TinyOS based on elliptic curve cryptography

paper_content:

We present the first known implementation of elliptic curve cryptography over F/sub 2p/ for sensor networks based on the 8-bit, 7.3828-MHz MICA2 mote. Through instrumentation of UC Berkeley's TinySec module, we argue that, although secret-key cryptography has been tractable in this domain for some time, there has remained a need for an efficient, secure mechanism for distribution of secret keys among nodes. Although public-key infrastructure has been thought impractical, we argue, through analysis of our own implementation for TinyOS of multiplication of points on elliptic curves, that public-key infrastructure is, in fact, viable for TinySec keys' distribution, even on the MICA2. We demonstrate that public keys can be generated within 34 seconds, and that shared secrets can be distributed among nodes in a sensor network within the same, using just over 1 kilobyte of SRAM and 34 kilobytes of ROM.
---
paper_title: Embedded security for Internet of Things

paper_content:

Internet of Things (IoT) consists of several tiny devices connected together to form a collaborative computing environment. IoT imposes peculiar constraints in terms of connectivity, computational power and energy budget, which make it significantly different from those contemplated by the canonical doctrine of security in distributed systems. In order to circumvent the problem of security in IoT domain, networks and devices need to be secured. In this paper, we consider the embedded device security only, assuming that network security is properly in place. It can be noticed that the existence of tiny computing devices that form ubiquity in IoT domain are very much vulnerable to different security attacks. In this work, we provide the requirements of embedded security, the solutions to resists different attacks and the technology for resisting temper proofing of the embedded devices by the concept of trusted computing. Our paper attempts to address the issue of security for data at rest. Addressing this issue is equivalent to addressing the security issue of the hardware platform. Our work also partially helps in addressing securing data in transit.
---
paper_title: Security in IPv6-based wireless sensor network — Precision agriculture example

paper_content:

Security aspects of the wireless sensor networks (WSN) are extremely complex since they are implemented in very heterogeneous real scenarios. None of the security mechanisms can independently provide full protection for the WSN and guarantee proper security level for the user. Different security mechanisms should operate cooperatively and integrated into unique security framework. This paper proposes integrated security framework designed especially for IPv6-based WSN. The structure of the proposed framework is given and functions of its modules are explained. Also, some suggestions about its implementation are given through the example of possible use of the IPv6-based WSN in precision agriculture.
---
paper_title: Nano-RK: an energy-aware resource-centric RTOS for sensor networks

paper_content:

Many sensor networking applications such as surveillance and environmental monitoring are time-sensitive in nature. To support such applications, we design and implement Nano-RK, a reservation-based real-time operating system (RTOS) with multi-hop networking support for use in wireless sensor networks. We support fixed-priority preemptive multitasking for guaranteeing that task deadlines are met, along with support for CPU and network bandwidth reservations. Tasks can specify their resource demands and the operating system provides timely, guaranteed and controlled access to CPU cycles and network packets in resource-constrained embedded sensor environments. We also introduce the concept of virtual energy reservations that allows the OS to enforce energy budgets associated with a sensing task by controlling resource accesses. A lightweight wireless networking stack supports packet forwarding, routing and TDMA-based network scheduling. Nano-RK has been implemented on the Atmel ATMEGA128 processor with the Chipcon CC2420 802.15.4 transceiver chip. Our results show that a light-weight embedded resource kernel with rich functionality and timing support is practical and constitutes a simple and alternative paradigm for supporting distributed sensing tasks
---
paper_title: Securing passwords against dictionary attacks

paper_content:

The use of passwords is a major point of vulnerability in computer security, as passwords are often easy to guess by automated programs running dictionary attacks. Passwords remain the most widely used authentication method despite their well-known security weaknesses. User authentication is clearly a practical problem. From the perspective of a service provider this problem needs to be solved within real-world constraints such as the available hardware and software infrastructures. From a user's perspective user-friendliness is a key requirement.In this paper we suggest a novel authentication scheme that preserves the advantages of conventional password authentication, while simultaneously raising the costs of online dictionary attacks by orders of magnitude. The proposed scheme is easy to implement and overcomes some of the difficulties of previously suggested methods of improving the security of user authentication schemes.Our key idea is to efficiently combine traditional password authentication with a challenge that is very easy to answer by human users, but is (almost) infeasible for automated programs attempting to run dictionary attacks. This is done without affecting the usability of the system. The proposed scheme also provides better protection against denial of service attacks against user accounts.
---
paper_title: Dynamic Reconfiguration of Wireless Sensor Networks

paper_content:

A wireless sensor network (WSN) is a wireless network consisting of spatially distributed autonomous devices using sensors to cooperatively monitor physical or environmental conditions, such as temperature, sound, vibration, pressure, motion or pollutants, at different locations. Wireless sensor networks gather data from places where it is difficult for humans to reach and once they are deployed, they work on their own and serve the data for which they are deployed. When the environment changes, sensor network should change too. This paper is an attempt to devise an efficient, robust and stable solution for the problem of remote reprogramming of wireless sensor networks and trying to address some of the problems associated with attempts taken by other researchers such as Network Reprogramming, Sensor reconfiguration and Supporting Tools.
---
paper_title: User authentication with provable security against online dictionary attacks

paper_content:

Dictionary attacks are the best known threats on the password-based authentication schemes. Based on Reverse Turing Test (RTT), some usable and scalable authentication schemes are proposed to defeat online dictionary attacks mounted by automated programs. However it is found that these authentication schemes are vulnerable to various online dictionary attacks. In this paper, a practical decision function is presented, based on which RTT authentication schemes are constructed and shown to be secure against all the known online dictionary attacks. After formally modeling of the adversary, the static and dynamic security of the authentication schemes are proved formally.
---
paper_title: Cross-Layer Design for the Security of Wireless Sensor Networks

paper_content:

Improved security is especially important for the success of the wireless sensor network (WSN), because the data collected are often sensitive and the network is particularly vulnerable. While a number of approaches have been proposed to provide security solutions against various threats to the WSN, most of which are based on the layered design. In this paper, we point out that these layered approaches are often inadequate and inefficient, and it is advantageous to break with the conventional layering rules and design the security scheme for the WSN based on information from several protocol layers. We overview the existing schemes for the cross-layer design of WSN security and propose some new solutions. A few open problems in this area are also discussed.
---
paper_title: Security in wireless sensor networks

paper_content:

They are susceptible to a variety of attacks, including node capture, physical tampering, and denial of service, while prompting a range of fundamental research challenges.
---
paper_title: A Multifactor Secure Authentication System For Wireless Payment

paper_content:

Organizations are deploying wireless based online payment applications to expand their business globally, it increases the growing need of regulatory requirements for the protection of confidential data, and especially in internet based financial areas. Existing internet based authentication systems often use either the Web or the Mobile channel individually to confirm the claimed identity of the remote user. The vulnerability is that access is based on only single factor authentication which is not secure to protect user data, there is a need of multifactor authentication. This paper proposes a new protocol based on multifactor authentication system that is both secure and highly usable. It uses a novel approach based on Transaction Identification Code and SMS to enforce another security level with the traditional Login/password system. The system provides a highly secure environment that is simple to use and deploy with in a limited resources that does not require any change in infrastructure or underline protocol of wireless network. This Protocol for Wireless Payment is extended as a two way authentications system to satisfy the emerging market need of mutual authentication and also supports secure B2B communication which increases faith of the user and business organizations on wireless financial transaction using mobile devices.
---

Title: Survey of Operating Systems for the IoT Environment

Section 1: INTRODUCTION
Description 1: Write about the necessity of operating systems tailored for the resource-constrained environment of IoT devices and sensors.

Section 2: OVERVIEW
Description 2: Introduce the various aspects and types of operating systems designed for the IoT environment and outline the structure of the paper.

Section 3: INTRODUCTION TO OS FOR THE IOT ENVIRONMENT
Description 3: Detail how operating systems enable the integration of IoT devices, their essential features, and security measures taken to enhance the stability and usability of these OSes.

Section 4: OS'ES
Description 4: Provide a comprehensive survey of various operating systems used in the IoT environment, including their development platforms, programming models, supported protocols, and unique features.

Section 5: CONCLUSION
Description 5: Summarize the findings from the survey and suggest additional measures for enhancing the security and reliability of the IoT infrastructure.