Constant video surveillance of remote locations in rural areas, dense urbanized dwellings and strategic military sites is of paramount interest to law enforcing agencies. Aerial monitoring is now made possible by using dozens of camera mounted UAVs (Unmanned Aerial Vehicles) streaming video from different vantage points to a single command and control center. In this paper, we present an architecture for closed circuit monitoring of such sites, which may consist of multiple indoor and outdoor vantage points by using the legacy 4G LTE wireless network cellular infrastructure in and around the buildings consisting of several outdoor macro cells and indoor femto cells to build a closed-circuit monitoring framework for streaming real time video. Such a framework would lead to timely action in crime or disaster prevention. We investigate the technical performance of such a video streaming system using the metrics of throughputs, loss rates and delay in relation to the physical aspects of wireless propagation; multipath propagation loss, shadowing and fading models.
In this paper, we propose hardware based secure and trusted communication over CAN bus in the intra vehicle network connecting electronic Control Units (ECUs). CAN bus is an insecure communication channel, connecting resource constraint devices that have limited resources to devote for data security and real-time requirements to meet the safety critical design specifications. We propose a hardware based secure and trusted framework that implements lightweight PUF based mutual authentication and secure encryption over the insecure communication channel. The paper discusses the framework design and implementation details along with the resource utilization and performance analysis of the proposed system.
Integration of complex and high-speed electronic components in the state of art electric power system enhances the need for improved security infrastructure and resilience against invasive and non-invasive attacks on the smart grid. A modern smart grid system integrates a variety of instruments and standards to achieve cost-effective and time-effective energy measurement and management. As the fundamental component in the smart grid, the smart meter supports real-time monitoring, automatic control, and high-speed communication along with power consumption recording. However, the wide use of smart meters also increases privacy and security concerns. In this paper, we demonstrate the vulnerability of side-channel attacks on secure communication in smart grids for software-based and hardware-based implementations.
Electronic Control Units (ECUs) are enriched devices to control mechanical parts through communication of control signals between them. Vehicles, like other internet of things, are vulnerable to device and network level attacks that are undeniably a safety concern. In this paper, we present a hardware-based framework with Trusted Platform Modules (TPM) enabled secure boot, traffic control for secure communication and mitigating Denial of Service (DoS) attacks by whitelisting, blacklisting and thresholding mechanism. Additionally, at the time of possible compromise, the proposed system provides self-perseverance constructs that are discussed with respect to architecture, implementation and security analysis.
Reconfigurable computing is becoming ubiquitous in the form of consumer-based Internet of Things (IoT) devices. Reconfigurable computing architectures have found their place in safety-critical infrastructures such as the automotive industry. As the target architecture evolves, it also needs to be updated remotely on the target platform. This process is susceptible to remote hijacking, where the attacker can maliciously update the reconfigurable hardware target with tainted hardware configuration. This paper proposes an architecture of establishing Root of Trust at the hardware level using cryptographic co-processors and Trusted Platform Modules (TPMs) and enable over the air updates. The proposed framework implements a secure boot protocol on Xilinx based FPGAs. The project demonstrates the configuration of the bitstream, boot process integration with TPM and secure over-the-air updates for the hardware reconfiguration.
Recent documented remote hijacking attacks on vehicles have created a need for improving on-board vehicular network security. Electronic Control Units (ECUs) in a vehicle are resource constrained devices that are connected using network standard such as Controller Area Network (CAN). In our work, we demonstrate threat models of CANBus, and propose a secure and trusted framework that implements lightweight hardware based authentication and secure key exchange for enhanced security over the insecure CANFD standard. The scheme integrates a hardware based code isolation using Trusted Execution Environment that further restricts the access to crypto IPs and resources at the time of device or network compromise. The paper discusses the overhead, performance and security analysis of our proposed framework.