@conference {538, title = {Integrating DOTS With Blockchain Can Secure Massive IoT Sensors}, booktitle = {2020 IEEE International Parallel and Distributed Processing Symposium Workshops (IPDPSW)}, year = {2020}, publisher = {IEEE}, organization = {IEEE}, address = {New Orleans, LA, USA}, abstract = {

This paper presents a novel approach to securing IoT devices by leveraging DDoS Open Threat Signaling (DOTS) architecture on a Blockchain framework. Like many areas of the information technology domain, IoT sensors are also prone to attacks but on a larger scale. There are millions of devices being connected to a central domain to provide different types of services. Since these low-powered IoT devices have constrained technical requirements with less computational capabilities, they lack the capacity to judge their behavior as benign or malignant. IoT relies heavily on the higher level of intelligent nodes to decide on their status. An IoT Controller/Edge server handles the registration and the limited management of devices. Since traditional security is unable to protect the IoT environment sufficiently, we present a Blockchain-based DDoS detection approach to secure and mitigate such attacks in the IoT environment. Our test setup includes dataset from four sensors over two months. These values were tested using a threshold calculation against the variation of temperature, humidity, pressure, and wind direction on that day to find out whether an IoT sensor is under a DDoS attack. Our results show how DOTS can help in detection of attack when mapped on IoT edge computing.

}, keywords = {blockchain, Cybersecurity, DDOS Protection, distributed ledger, Edge Computing, IoT, Smart Contracts}, isbn = {978-1-7281-7445-7}, doi = {10.1109/IPDPSW50202.2020.00156}, url = {https://ieeexplore.ieee.org/abstract/document/9150345}, author = {Badruddoja, Syed and Dantu, Ram and Widick, Logan and Zaccagni, Zachary and Upadhyay, Kritagya} } @conference {403, title = {Blockchain Based Authentication and Authorization Framework for Remote Collaboration Systems}, booktitle = {2019 IEEE 20th International Symposium on "A World of Wireless, Mobile and Multimedia Networks" (WoWMoM)}, year = {2019}, month = {June}, abstract = {

Due to the advantages of blockchain technologies, including decentralization, immutability, transparency and security, people try to replace existing problematic architectures /frameworks with blockchain based ones. In this paper we propose a novel authentication and authorization framework based on blockchain technologies to control access to the resources of an IoT device. In this paper, we focus on devices such as the Cyber Handyman used in remote collaboration applications to develop our framework. We tested our smart contracts on the Ropsten test network. Our results showed that it can handle 25 service requests simultaneously.

}, keywords = {Access Control, authorization, blockchain, Digital Certificate, IoT, remote collaboration, Security}, doi = {10.1109/WoWMoM.2019.8792994}, author = {Widick, Logan and Ranasinghe, Ishan and Dantu, Ram and Jonnada, Srikanth} } @conference {310, title = {An OAuth-Based Authorization Framework for Access Control in Remote Collaboration Systems}, booktitle = {National Cyber Summit}, year = {2018}, month = {06/2018}, address = {Huntsville, Alabama, USA}, abstract = {

Advanced human computer interaction systems have made it possible for helpers (professionals) to remotely collaborate with workers (individuals seeking assistance from the professionals). For example, a professional can remotely help a worker fix automobiles or electronics, identify how much of what medication to take, or perform household repairs. We have presented a system, Collaborative Appliance for Remote-help (CARE) that allows for such collaborations. Our system allows a skilled professional or other helper to remotely access and control a worker{\textquoteright}s locally deployed resources over the Internet. These locally deployed resources may include cameras, microphones, speakers, processors, and memory. The remote helper then directs the worker to perform specific tasks to complete the job at hand. Like other Internet of Things (IoT) based systems, CARE is inputconstrained. That is, a worker cannot provide input via a touch screen or keyboard.

The resources are accessed over the Internet. Thus, security and privacy are big concerns. In this paper, we present the authorization and access control framework for the inputconstrained CARE system. This framework has been implemented using the OAuth 2.0 Authorization Framework and has been designed to meet the needs of resource owners who have no technical knowledge. We have shown that our proposed framework is very effective and consistent with the access control guidelines set by the National Institute of Standards and Technology (NIST).

}, author = {Jonnada, Srikanth and Ram Dantu and Shrestha, Pradhumna and Ranasinghe, Ishan and Widick, Logan} } @conference {88, title = {A framework for secured collaboration in mHealth}, booktitle = {Collaboration Technologies and Systems (CTS), 2015 International Conference on}, year = {2015}, month = {06/2015}, abstract = {

We have designed a novel framework of services, protocols and technologies to ensure the secure collaboration in M2M networks, specifically in mobile health. The promise of mobile health to reform preventive self-care opens new doors for remote monitoring to improve health care communication. With cardiopulmonary resuscitation (CPR) as an example, we classify our M2M elements into services, roles, human-computer protocols and technologies through which we require trust, anonymity, scalability, and active detachment. We simulate a scenario in which a patient needs CPR and through the use of widely available technologies (such as a smartphone and secure web sockets) we demonstrate a technological collaboration that facilitates secure emergency mobile health services.

}, keywords = {cardiology, cardiopulmonary resuscitation, Cardiopulmonary resuscitation(CPR), Collaboration, Computers, CPR, health care, health care communication, human computer interaction, human-computer protocol, M2M network, machine to machine(M2M), Medical services, mHealth, Mobile communication, mobile computing, mobile health, Protocols, remote monitoring, Scalability, secure collaboration, secure emergency mobile health services, secured collaboration, security of data, servers, smart phones, smartphone}, doi = {10.1109/CTS.2015.7210450}, author = {Widick, Logan and Talkington, Josh and Bajwa, Garima and Ram Dantu} }