论文标题
IoT Content Object Security借助Oscore和NDN:第一个实验比较
IoT Content Object Security with OSCORE and NDN: A First Experimental Comparison
论文作者
论文摘要
新兴的物联网(IoT)通过执行协议翻译的低功率损失链接和网关挑战了Internet的端到端运输。 DTLS会话的开销降低了COAP或MQTT-SN之类的协议,该协议通常在通常的部署保护内容传输到网关上。为了通过网关和代理保护内容安全性端到端,IETF最近开发了针对受限的RESTFUL ENVOROMENT(OSCORE)的对象安全性,该对象安全性通过信息中心网络(ICN)通常已知的内容对象安全功能扩展了COAP。 本文介绍了保护请求响应交易的协议堆栈的比较分析。我们测量了DTL,Oscore和以信息为中心的数据网络(NDN)协议在单台和多跳上的大规模IOT测试上的协议性能。我们的发现表明,(a)Oscore因省略了在端点处维持安全性会话的开销而改善了易错无线制度的DTL,并且(b)NDN由于其内在网络缓存而获得了卓越的鲁棒性和可靠性,并获得了可靠性。
The emerging Internet of Things (IoT) challenges the end-to-end transport of the Internet by low power lossy links and gateways that perform protocol translations. Protocols such as CoAP or MQTT-SN are degraded by the overhead of DTLS sessions, which in common deployment protect content transfer only up to the gateway. To preserve content security end-to-end via gateways and proxies, the IETF recently developed Object Security for Constrained RESTful Environments (OSCORE), which extends CoAP with content object security features commonly known from Information Centric Networks (ICN). This paper presents a comparative analysis of protocol stacks that protect request-response transactions. We measure protocol performances of CoAP over DTLS, OSCORE, and the information-centric Named Data Networking (NDN) protocol on a large-scale IoT testbed in single- and multi-hop scenarios. Our findings indicate that (a) OSCORE improves on CoAP over DTLS in error-prone wireless regimes due to omitting the overhead of maintaining security sessions at endpoints, and (b) NDN attains superior robustness and reliability due to its intrinsic network caches and hop-wise retransmissions.