Out of kilter: Holistic exploitation of denial of service in internet of things

Suhas Setikere; Vinay Sachidananda; Yuval Elovici

doi:10.1007/978-3-030-01701-9_3

Out of kilter: Holistic exploitation of denial of service in internet of things

Suhas Setikere, Vinay Sachidananda, Yuval Elovici

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Internet of Things (IoT) expose various vulnerabilities at different levels. One such exploitable vulnerability is Denial of Service (DoS). In this paper, we showcase our preliminary efforts towards study of various forms of DoS and how it can be exploited in different protocols of IoT. We propose our initial attack and defense framework for IoT and that can perform various forms of DoS on IP and Bluetooth. We show the initial results of DoS vulnerabilities such as Resource Exhaustion and Bluetooth Low Energy (BLE) Packet Injection. In order to understand how resilient is IoT for DoS, we propose a new metric to measure the Resilience against DoS in IoT. We have conducted a real time experimentation with IoT devices in our security IoT testbed. The experiments conducted are for DoS, Distributed Denial of Service (DDoS) by setting up Mirai and Permanent Denial of Service (PDoS) using BrickerBot on various IoT devices.

Original language	English
Title of host publication	Security and Privacy in Communication Networks - 14th International Conference, SecureComm 2018, Proceedings
Editors	Yingjiu Li, Bing Chang, Sencun Zhu, Raheem Beyah
Publisher	Springer Verlag
Pages	43-52
Number of pages	10
ISBN (Print)	9783030017002
DOIs	https://doi.org/10.1007/978-3-030-01701-9_3
State	Published - 1 Jan 2018
Externally published	Yes
Event	14th International EAI Conference on Security and Privacy in Communication Networks, SecureComm 2018 - Singapore, Singapore Duration: 8 Aug 2018 → 10 Aug 2018

Publication series

Name	Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST
Volume	254
ISSN (Print)	1867-8211

Conference

Conference	14th International EAI Conference on Security and Privacy in Communication Networks, SecureComm 2018
Country/Territory	Singapore
City	Singapore
Period	8/08/18 → 10/08/18

Keywords

Denial of service
Internet of things
Security analysis

ASJC Scopus subject areas

Computer Networks and Communications

Access to Document

10.1007/978-3-030-01701-9_3

Cite this

Setikere, S., Sachidananda, V., & Elovici, Y. (2018). Out of kilter: Holistic exploitation of denial of service in internet of things. In Y. Li, B. Chang, S. Zhu, & R. Beyah (Eds.), Security and Privacy in Communication Networks - 14th International Conference, SecureComm 2018, Proceedings (pp. 43-52). (Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST; Vol. 254). Springer Verlag. https://doi.org/10.1007/978-3-030-01701-9_3

Setikere, Suhas ; Sachidananda, Vinay ; Elovici, Yuval. / Out of kilter : Holistic exploitation of denial of service in internet of things. Security and Privacy in Communication Networks - 14th International Conference, SecureComm 2018, Proceedings. editor / Yingjiu Li ; Bing Chang ; Sencun Zhu ; Raheem Beyah. Springer Verlag, 2018. pp. 43-52 (Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST).

@inproceedings{dd72602b148e4f25926e4de1df802d32,

title = "Out of kilter: Holistic exploitation of denial of service in internet of things",

abstract = "Internet of Things (IoT) expose various vulnerabilities at different levels. One such exploitable vulnerability is Denial of Service (DoS). In this paper, we showcase our preliminary efforts towards study of various forms of DoS and how it can be exploited in different protocols of IoT. We propose our initial attack and defense framework for IoT and that can perform various forms of DoS on IP and Bluetooth. We show the initial results of DoS vulnerabilities such as Resource Exhaustion and Bluetooth Low Energy (BLE) Packet Injection. In order to understand how resilient is IoT for DoS, we propose a new metric to measure the Resilience against DoS in IoT. We have conducted a real time experimentation with IoT devices in our security IoT testbed. The experiments conducted are for DoS, Distributed Denial of Service (DDoS) by setting up Mirai and Permanent Denial of Service (PDoS) using BrickerBot on various IoT devices.",

keywords = "Denial of service, Internet of things, Security analysis",

author = "Suhas Setikere and Vinay Sachidananda and Yuval Elovici",

note = "Publisher Copyright: {\textcopyright} ICST Institute for Computer Sciences, Social Informatics and Telecommunications Engineering 2018.; 14th International EAI Conference on Security and Privacy in Communication Networks, SecureComm 2018 ; Conference date: 08-08-2018 Through 10-08-2018",

year = "2018",

month = jan,

day = "1",

doi = "10.1007/978-3-030-01701-9_3",

language = "English",

isbn = "9783030017002",

series = "Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST",

publisher = "Springer Verlag",

pages = "43--52",

editor = "Yingjiu Li and Bing Chang and Sencun Zhu and Raheem Beyah",

booktitle = "Security and Privacy in Communication Networks - 14th International Conference, SecureComm 2018, Proceedings",

address = "Germany",

}

Setikere, S, Sachidananda, V & Elovici, Y 2018, Out of kilter: Holistic exploitation of denial of service in internet of things. in Y Li, B Chang, S Zhu & R Beyah (eds), Security and Privacy in Communication Networks - 14th International Conference, SecureComm 2018, Proceedings. Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST, vol. 254, Springer Verlag, pp. 43-52, 14th International EAI Conference on Security and Privacy in Communication Networks, SecureComm 2018, Singapore, Singapore, 8/08/18. https://doi.org/10.1007/978-3-030-01701-9_3

Out of kilter: Holistic exploitation of denial of service in internet of things. / Setikere, Suhas; Sachidananda, Vinay; Elovici, Yuval.
Security and Privacy in Communication Networks - 14th International Conference, SecureComm 2018, Proceedings. ed. / Yingjiu Li; Bing Chang; Sencun Zhu; Raheem Beyah. Springer Verlag, 2018. p. 43-52 (Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST; Vol. 254).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Out of kilter

T2 - 14th International EAI Conference on Security and Privacy in Communication Networks, SecureComm 2018

AU - Setikere, Suhas

AU - Sachidananda, Vinay

AU - Elovici, Yuval

N1 - Publisher Copyright: © ICST Institute for Computer Sciences, Social Informatics and Telecommunications Engineering 2018.

PY - 2018/1/1

Y1 - 2018/1/1

N2 - Internet of Things (IoT) expose various vulnerabilities at different levels. One such exploitable vulnerability is Denial of Service (DoS). In this paper, we showcase our preliminary efforts towards study of various forms of DoS and how it can be exploited in different protocols of IoT. We propose our initial attack and defense framework for IoT and that can perform various forms of DoS on IP and Bluetooth. We show the initial results of DoS vulnerabilities such as Resource Exhaustion and Bluetooth Low Energy (BLE) Packet Injection. In order to understand how resilient is IoT for DoS, we propose a new metric to measure the Resilience against DoS in IoT. We have conducted a real time experimentation with IoT devices in our security IoT testbed. The experiments conducted are for DoS, Distributed Denial of Service (DDoS) by setting up Mirai and Permanent Denial of Service (PDoS) using BrickerBot on various IoT devices.

AB - Internet of Things (IoT) expose various vulnerabilities at different levels. One such exploitable vulnerability is Denial of Service (DoS). In this paper, we showcase our preliminary efforts towards study of various forms of DoS and how it can be exploited in different protocols of IoT. We propose our initial attack and defense framework for IoT and that can perform various forms of DoS on IP and Bluetooth. We show the initial results of DoS vulnerabilities such as Resource Exhaustion and Bluetooth Low Energy (BLE) Packet Injection. In order to understand how resilient is IoT for DoS, we propose a new metric to measure the Resilience against DoS in IoT. We have conducted a real time experimentation with IoT devices in our security IoT testbed. The experiments conducted are for DoS, Distributed Denial of Service (DDoS) by setting up Mirai and Permanent Denial of Service (PDoS) using BrickerBot on various IoT devices.

KW - Denial of service

KW - Internet of things

KW - Security analysis

UR - http://www.scopus.com/inward/record.url?scp=85059677989&partnerID=8YFLogxK

U2 - 10.1007/978-3-030-01701-9_3

DO - 10.1007/978-3-030-01701-9_3

M3 - Conference contribution

AN - SCOPUS:85059677989

SN - 9783030017002

T3 - Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST

SP - 43

EP - 52

BT - Security and Privacy in Communication Networks - 14th International Conference, SecureComm 2018, Proceedings

A2 - Li, Yingjiu

A2 - Chang, Bing

A2 - Zhu, Sencun

A2 - Beyah, Raheem

PB - Springer Verlag

Y2 - 8 August 2018 through 10 August 2018

ER -

Setikere S, Sachidananda V, Elovici Y. Out of kilter: Holistic exploitation of denial of service in internet of things. In Li Y, Chang B, Zhu S, Beyah R, editors, Security and Privacy in Communication Networks - 14th International Conference, SecureComm 2018, Proceedings. Springer Verlag. 2018. p. 43-52. (Lecture Notes of the Institute for Computer Sciences, Social-Informatics and Telecommunications Engineering, LNICST). doi: 10.1007/978-3-030-01701-9_3

Out of kilter: Holistic exploitation of denial of service in internet of things

Abstract

Publication series

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this