DOCSLIB.ORG

Security Vetting Process of Smart-Home Assistant

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Security Vetting Process of Smart-Home Assistant Security Vetting Process of Smart-home Assistant Applications: A First Look and Case Studies Hang Hu Limin Yang Virginia Tech University of Illinois Urbana-Champaign hanghu@vt:edu liminy2@illinois:edu Shihan Lin Gang Wang Fudan University University of Illinois Urbana-Champaign shlin15@fudan:edu:cn gangw@illinois:edu ABSTRACT encryptions and unpatched OS/software. While most existing stud- The popularity of smart-home assistant systems such as Amazon ies focus on the system and device-level flaws, limited efforts are Alexa and Google Home leads to a booming third-party applica- investigated to vetting the security of third-party applications, and tion market (over 70,000 applications across the two stores). While more importantly, helping developers to improve the security of their existing works have revealed security issues in these systems, it is applications. not well understood how to help application developers to enforce In this paper, we perform a preliminary case study to examine security requirements. In this paper, we perform a preliminary the mechanisms that Amazon and Google implemented to vet the case study to examine the security vetting mechanisms adopted security of third-party applications for their smart home assistants. by Amazon Alexa and Google Home app stores. With a focus on More specifically, before a third-party application (or “skill”) can the authentication mechanisms between Alexa/Google cloud and be published to the app stores, they must go through a series of third-party application servers (i.e. end-points), we show the cur- automated tests and manual vetting. In this paper, we seek to un- rent security vetting is insufficient as developer mistakes cannot derstand (1) what aspects the security vetting process is focused be effectively detected and notified. A weak authentication would on, and (2) how effective the vetting process is to help developers allow attackers to spoof the cloud to insert/retrieve data into/from to improve security. the application endpoints. We validate the attack through ethical As a preliminary study, we focus on the authentication mecha- proof-of-concept experiments. To confirm vulnerable applications nism used by the third-party application’s server (called “endpoint”) have indeed passed the security vetting and entered the markets, to authenticate the Alexa/Google cloud (namely, cloud authenti- we develop a heuristic-based searching method. We find 219 real- cation). We choose cloud authentication because cloud-endpoint world Alexa endpoints that carry the vulnerability, many of which interaction is a key component that makes smart-home assistant 1 are related to critical applications that control smart home devices skills structurally different from the conventional smartphone and electronic cars. We have notified Amazon and Google about apps. Smart-home assistant skills need to route their traffic to a our findings and offered our suggestions to mitigate the issue. central cloud to translate a voice command to an API call in order to interact with the application server. 1 INTRODUCTION Method and Key Observations. Amazon Alexa runs both au- Smart home assistant systems such as Amazon Alexa and Google tomated vetting and manual vetting before a skill can be published, Home are entering tens of millions of households today [37]. As a while Google Home only runs manual vetting. Our methodology result, the corresponding app marketplace is also expanding quickly. is to build our own (vulnerable) skills and walk them through the Just like installing apps on smartphones, users can enable third- required testing to understand the vetting process. Our results show party applications for smart-assistant devices. These applications concerning issues in terms of the enforcement of cloud authentica- are called “skills” or “actions”. So far there are collectively more tion. First, we find that the Google Home vetting process does not arXiv:2001.04520v1 [cs.CR] 13 Jan 2020 than 70,000 skills available [1, 2], many of which are security/safety- require the endpoints to authenticate the cloud and their queries, critical. For example, there are skills that allow users to manage which leaves the endpoints vulnerable to spoofed queries. Second, bank accounts, place shopping orders, and control smart-home Amazon Alexa requires skills to perform cloud authentication, but devices through a voice interface. does a poor job enforcing it on third-party developers. Alexa per- Considering the sensitive nature of smart-home assistants, re- forms automated vetting that is supposed to detect and inform searchers have looked into the security aspects of these systems developer mistakes in the skill implementation. However, the se- and their third-party applications. For example, recent studies show curity tests are erroneous and have missed important checks (e.g., that it is possible to craft a voice clip with hidden commands em- application identifiers). As a result, a vulnerable skill, in theory, can bedded that are recognizable by the Alexa device but not by human pass the security vetting process to enter the app store. observers [6, 12, 46, 47]. In addition, researchers demonstrate the Proof-of-Concept. To illustrate the problem, we run controlled feasibility of a “skill squatting” attack to invoke a malicious ap- experiments to show how an outsider can spoof the cloud to query plication whose name sounds like the legitimate one [38, 50]. A recent survey study [8] investigated the network interfaces of many 1For convenience, we refer smart-home assistant application as “skills” for both Ama- IoT devices (including smart-assistant devices) to reveal their weak zon Alexa and Google Home. the target endpoint. More specifically, an attacker can build its own skill application, and use this skill to obtain a valid signature from the cloud for the attack traffic. Then the attacker can replay the signed traffic to attack the target endpoints. The attack is possible because the cloud uses the same private key to sign all the traffic for all the skills. The signature obtained by the attacker’s skill works on the victim endpoint too. We validate the feasibility of the attack and show that vulnerable skills can bypass both the automated tests and the manual vetting process to enter the app markets. Vulnerable Applications in the Wild. To confirm that there are indeed vulnerable skills in practice, we perform a scanning experiment. Since all Google Home skills are by default vulnerable, this experiment focused on searching for vulnerable Alexa skills. Figure 1: The execution of a simple voice command. We leverage ZMap to locate live HTTPS hosts and replay a spoofed but non-intrusive query to see if a given HTTPS host returns a valid converts the text-based response to audio, and (») plays it at the response. In this way, we located 219 vulnerable real-world Alexa edge-device. Note that the edge device never directly interact with endpoints. A closer analysis shows that some of these vulnerable the endpoint, and every request is routed through the cloud. For endpoints are related to important skills such as those that con- certain skills, users need to explicitly “enable” them in the skill store. trol electric cars, smart locks, thermostats, security cameras, and However, many skills can be directly triggered/used by calling the watering systems. skill’s name. We make three main contributions: Skill developers need to implement the endpoint to respond to • First, we present the first empirical analysis of the security user requests. For simple skills that do not require a database, both vetting process used by Amazon and Google to vet their Alexa and Google provide a “serverless” option for developers to smart-home assistant skills. We find that the current vetting hard-code the responses in the cloud. For sophisticated skills, an process is insufficient to identify and notify developers of endpoint is needed. the authentication issues in their endpoints. Authentication between Entities. The system contains three • Second, we validate the security problem by running a proof- main entities: the edge device, the cloud, and the endpoint. Both of-concept cloud spoofing attack, in an ethical manner. Alexa and Google require HTTPS for all network communications. • Third, we discover real-world applications that carry the This also helps the “clients” to authenticate the “servers”: The edge vulnerability. We notified Amazon and Google about our device can verify the identity of the cloud, and the cloud can also findings and offered our suggestions to mitigate the issue. verify the identity of the endpoint. Our work makes a concrete step towards enhancing the security For the other direction, two main authentications are used for vetting process of smart-assistant applications. Give the increasing the “servers” to authenticate the “clients”. First, in step ·, the cloud number and diversity of IoT applications and web of things, we needs to authenticate the edge device. This can be done because an argue that developers need more help to build their applications in “access token” has been exchanged when the user first sets up the a secure way. Effective security vetting and feedback will be critical edge device at home. Second, in step ¸, the endpoint also needs to improving the security of the IoT ecosystem. to authenticate the cloud. This step helps the endpoint to ensure that the queries are indeed coming from the Alexa/Google cloud 2 BACKGROUND & MOTIVATION instead of outsiders. We call it “cloud authentication”, which is done in different ways for Google and Alexa. We start by introducing the background for third-party applications in Amazon Alexa and Google Home. We then discuss the security • Amazon Alexa uses a public-key based method. The cloud vetting process on both platforms. signs its request payload with a private key, and the skill Alexa and Google Home Skills. Both platforms support third- endpoints can verify the signature using the cloud’s public party applications, which are called “Skills” on Alexa and are called key when receiving the request.
Load more

Recommended publications
  • Internet of Things: a Scientometric Review
    S S symmetry Article Internet of Things: A Scientometric Review Juan Ruiz-Rosero 1,* ID , Gustavo Ramirez-Gonzalez 1 ID , Jennifer M. Williams 2 ID , Huaping Liu 2, Rahul Khanna 3 ID and Greeshma Pisharody 3 ID 1 Departamento de Telemática, Universidad del Cauca, Popayán, Cauca 190002, Colombia; [email protected] 2 School of Electrical Engineering and Computer Science, Oregon State University, Corvallis, OR 97331, USA; [email protected] (J.M.W.); [email protected] (H.L.) 3 Intel Corporation, 2111 NE 25th Ave., Hillsboro, OR 97124, USA; [email protected] (R.K.); [email protected] (G.P.) * Correspondence: [email protected]; Tel.: +57-(2)-820-9900 Received: 31 August 2017; Accepted: 23 November 2017; Published: 6 December 2017 Abstract: Internet of Things (IoT) is connecting billions of devices to the Internet. These IoT devices chain sensing, computation, and communication techniques, which facilitates remote data collection and analysis. wireless sensor networks (WSN) connect sensing devices together on a local network, thereby eliminating wires, which generate a large number of samples, creating a big data challenge. This IoT paradigm has gained traction in recent years, yielding extensive research from an increasing variety of perspectives, including scientific reviews. These reviews cover surveys related to IoT vision, enabling technologies, applications, key features, co-word and cluster analysis, and future directions. Nevertheless, we lack an IoT scientometrics review that uses scientific databases to perform a quantitative analysis. This paper develops a scientometric review about IoT over a data set of 19,035 documents published over a period of 15 years (2002–2016) in two main scientific databases (Clarivate Web of Science and Scopus).
    [Show full text]
  • Business Process Management & Enterprise Architecture Track
    BIO - Bioinformatics Track Track Co-Chairs: Juan Manuel Corchado, University of Salamanca, Spain Paola Lecca, University of Trento, Italy Dan Tulpan, University of Guelph, Canada An Insight into Biological Data Mining based on Rarity and Correlation as Constraints .............................1 Souad Bouasker, University of Tunis ElManar, Tunisia Drug Target Discovery Using Knowledge Graph Embeddings .........................................................................9 Sameh K. Mohamed, Insight Centre for Data Analytics, Ireland Aayah Nounu, University of Bristol, UK Vit Novacek, INSIGHT @ NUI Galway, Ireland Ensemble Feature Selectin for Biomarker Discovery in Mass Spectrometry-based Metabolomics ............17 Aliasghar Shahrjooihaghighi, University of Louisville, USA Hichem Frigui, University of Louisville, USA Xiang Zhang, University of Louisville, USA Xiaoli Wei, University of Louisville, USA Biyun Shi, University of Louisville, USA Craig J. McClain, University of Louisville, USA Molecule Specific Normalization for Protein and Metabolite Biomarker Discovery ....................................23 Ameni Trabelsi, University of Louisville, USA Biyun Shi, University of Louisville, USA Xiaoli Wei, University of Louisville, USA HICHEM FRIGUI, University of Louisville, USA Xiang Zhang, University of Louisville, USA Aliasghar Shahrajooihaghighi, University of Louisville, USA Craig McClain, University of Louisville, USA BPMEA - Business Process Management & Enterprise Architecture Track Track Co-Chairs: Marco Brambilla, Politecnico di
    [Show full text]
  • Exploring Internet of Things, Mobile Computing and Ubiquitous Computing in Computer Science Education: a Systematic Mapping Study
    www.ijtes.net Exploring Internet of Things, Mobile Computing and Ubiquitous Computing in Computer Science Education: A Systematic Mapping Study Olga Fragou1, Anna Mavroudi2 1Hellenic Open University, Greece 2Νorwegian University of Science & Technology, Norway To cite this article: Fragou, O. & Mavroudi, A. (2020). Exploring internet of things, mobile computing and ubiquitous computing in computer science education: A systematic mapping study. International Journal of Technology in Education and Science (IJTES), 4(1), 72-85. The International Journal of Technology in Education and Science (IJTES) is a peer-reviewed scholarly online journal. This article may be used for research, teaching, and private study purposes. Authors alone are responsible for the contents of their articles. The journal owns the copyright of the articles. The publisher shall not be liable for any loss, actions, claims, proceedings, demand, or costs or damages whatsoever or howsoever caused arising directly or indirectly in connection with or arising out of the use of the research material. All authors are requested to disclose any actual or potential conflict of interest including any financial, personal or other relationships with other people or organizations regarding the submitted work. International Journal of Technology in Education and Science Volume 4, Issue 1, Winter 2020 ISSN: 2651-5369 Exploring Internet of Things, Mobile Computing and Ubiquitous Computing in Computer Science Education: A Systematic Mapping Study Olga Fragou, Anna Mavroudi Article Info Abstract Article History Ubiquitous computing, mobile computing and the Internet of Things (UMI) have been widely used in several application areas. To date, methods and techniques Received: for the application of these technologies in real life situations have continued to 17 June 2019 emerge; however, their use in education settings focusing on existing practices remain largely underexplored.
    [Show full text]
  • Internet of Nano-Things, Things and Everything: Future Growth Trends
    future internet Review Internet of Nano-Things, Things and Everything: Future Growth Trends Mahdi H. Miraz 1 ID , Maaruf Ali 2, Peter S. Excell 3,* and Richard Picking 3 1 Centre for Financial Regulation and Economic Development (CFRED), The Chinese University of Hong Kong, Sha Tin, Hong Kong, China; [email protected] 2 International Association of Educators and Researchers (IAER), Kemp House, 160 City Road, London EC1V 2NX, UK; [email protected] 3 Faculty of Art, Science and Technology, Wrexham Glyndwrˆ University, Wrexham LL11 2AW, UK; [email protected] * Correspondence: [email protected]; Tel.: +44-797-480-6644 Received: 22 June 2018; Accepted: 25 July 2018; Published: 28 July 2018 Abstract: The current statuses and future promises of the Internet of Things (IoT), Internet of Everything (IoE) and Internet of Nano-Things (IoNT) are extensively reviewed and a summarized survey is presented. The analysis clearly distinguishes between IoT and IoE, which are wrongly considered to be the same by many commentators. After evaluating the current trends of advancement in the fields of IoT, IoE and IoNT, this paper identifies the 21 most significant current and future challenges as well as scenarios for the possible future expansion of their applications. Despite possible negative aspects of these developments, there are grounds for general optimism about the coming technologies. Certainly, many tedious tasks can be taken over by IoT devices. However, the dangers of criminal and other nefarious activities, plus those of hardware and software errors, pose major challenges that are a priority for further research. Major specific priority issues for research are identified.
    [Show full text]
  • Advancing the Industrial Internet of Things
    Advancing the Industrial Internet of Things An Industrial Internet Consortium and oneM2M™ Joint Whitepaper Authors Amar Deol (Huawei), Ken Figueredo (InterDigital Inc.), Shi-Wan Lin (Yo-i), Brett Murphy (RTI), Dale Seed (Convida Wireless), Jason Yin (Huawei) Editors Shi-Wan Lin (Yo-i) and Ken Figueredo (InterDigital Inc.) Contributors1 Josef Blanz (Qualcomm), Omar Elloumi (Nokia), Rajive Joshi (RTI), Peter Klement (XMPro), Sam Bhattarai (Toshiba), Atte Lansisalmi (Nokia) and Chuck Byers (IIC) 2019-12-12 1 Individuals who have provided valuable comments and inputs that have substantially improved the quality of this whitepaper. - i - 1 Context for Collaboration .................................................................................................. 1 2 Organizational Overviews ................................................................................................. 2 2.1 Overview of the IIC .............................................................................................................. 2 2.2 Overview of oneM2MTM....................................................................................................... 3 3 Alignment Between IIRA and oneM2M Architecture Frameworks ...................................... 6 3.1 IIC’s IIRA .............................................................................................................................. 7 3.2 oneM2M Architecture and Common Services Layer .............................................................. 9 3.2.1 Common Service Layer Functions
    [Show full text]
  • Case Studies in Iot -Smart-Home Solutions Pedagogical Perspective
    Case Studies in IoT -Smart-Home Solutions Pedagogical Perspective with Industrial Applications and some latest Developments Hans-Petter Halvorsen, Alexander Jonsaas, Saba Mylvaganam, Josef Timmerberg, Jean-Marc Thiriet To cite this version: Hans-Petter Halvorsen, Alexander Jonsaas, Saba Mylvaganam, Josef Timmerberg, Jean-Marc Thiriet. Case Studies in IoT -Smart-Home Solutions Pedagogical Perspective with Industrial Applications and some latest Developments. EAEEIE 2017 - 27th EAEEIE Annual Conference on Innovation in Education for Electrical and Information Engineering, Jun 2017, Grenoble, France. hal-01658856 HAL Id: hal-01658856 https://hal.archives-ouvertes.fr/hal-01658856 Submitted on 7 Dec 2017 HAL is a multi-disciplinary open access L’archive ouverte pluridisciplinaire HAL, est archive for the deposit and dissemination of sci- destinée au dépôt et à la diffusion de documents entific research documents, whether they are pub- scientifiques de niveau recherche, publiés ou non, lished or not. The documents may come from émanant des établissements d’enseignement et de teaching and research institutions in France or recherche français ou étrangers, des laboratoires abroad, or from public or private research centers. publics ou privés. Case Studies in IoT - Smart-Home Solutions Pedagogical Perspective with Industrial Applications and some latest Developments Hans-Petter Halvorsen, Alexander Jonsaas, Saba Josef Timmerberg Mylvaganam Jade University of Applied Sciences, D-26389 Wilhelmshaven, [email protected] ; Faculty of Technology, Department
    [Show full text]
  • Recommending Privacy Settings for Internet-Of-Things
    Clemson University TigerPrints All Dissertations Dissertations December 2019 Recommending Privacy Settings for Internet-of-Things Yangyang He Clemson University, [email protected] Follow this and additional works at: https://tigerprints.clemson.edu/all_dissertations Recommended Citation He, Yangyang, "Recommending Privacy Settings for Internet-of-Things" (2019). All Dissertations. 2528. https://tigerprints.clemson.edu/all_dissertations/2528 This Dissertation is brought to you for free and open access by the Dissertations at TigerPrints. It has been accepted for inclusion in All Dissertations by an authorized administrator of TigerPrints. For more information, please contact [email protected]. Recommending Privacy Settings for Internet-of-Things A Dissertation Presented to the Graduate School of Clemson University In Partial Fulfillment of the Requirements for the Degree Doctor of Philosophy Computer Science by Yang He December 2019 Accepted by: Dr. Bart P. Knijnenburg, Committee Chair Dr. Larry F. Hodges Dr. Alexander Herzog Dr. Ilaria Torre Abstract Privacy concerns have been identified as an important barrier to the growth of IoT. These concerns are exacerbated by the complexity of manually setting privacy preferences for numerous different IoT devices. Hence, there is a demand to solve the following, urgent research question: How can we help users simplify the task of managing privacy settings for IoT devices in a user-friendly manner so that they can make good privacy decisions? To solve this problem in the IoT domain, a more fundamental understanding of the logic behind IoT users' privacy decisions in different IoT contexts is needed. We, therefore, conducted a series of studies to contextualize the IoT users' decision-making characteristics and designed a set of privacy-setting interfaces to help them manage their privacy settings in various IoT contexts based on the deeper understanding of users' privacy decision behaviors.
    [Show full text]
  • Indoor Air Quality Monitoring Sensor for the Web of Things †
    Proceedings Indoor Air Quality Monitoring Sensor for the Web of Things † Daniel Ibaseta 1, Julio Molleda 2,*, Fidel Díez 1 and Juan C. Granda 2 1 CTIC Technological Centre, 33203 Gijón, Spain; [email protected] (D.I.); [email protected] (F.D.) 2 Department of Computer Science and Engineering, University of Oviedo, 33204 Gijón, Spain; [email protected] * Correspondence: [email protected]; Tel.: +34-985-182-518 † Presented at 2nd International Research Conference on Sustainable Energy Engineering, Materials and Environment, Mieres, Spain, 25–27 July 2018. Published: 14 November 2018 Abstract: Many Internet of Things platforms use dedicated software coupled with proprietary devices and interfaces, creating silo solutions with no interoperability. The Web of Things paradigm promotes using open Web standards to connect physical objects to the Internet through an application layer. In this paper, we propose a low-cost, indoor air quality monitoring sensor implementing a minimal servient building block recommended by the Web of Things Working Group of the World Wide Web Consortium. The proposed sensor runs a Web server on a low-power system-on-chip microcontroller, which provides temperature, relative humidity and carbon dioxide measurements to the Internet through a REST API. Any client on the Internet able to manage the HTTP protocol may access this sensor, making it compatible with any air quality monitoring platform that uses HTTP. Keywords: IoT; WoT; REST API; air quality monitoring; SoC microcontroller 1. Introduction Embedded computing and low-power wireless communication provide physical objects with Internet connectivity, forming the Internet of Things (IoT) [1]. The IoT offers services that lay at the core of many fields, such as smart homes, smart cities, smart industries and smart agriculture.
    [Show full text]
  • Table of Contents
    Table of Contents Scroll to the title and select a Blue link to open a paper. After viewing the paper, use the bookmarks to the left to return to the beginning of the Table of Contents. Theme: AI and Agents BIO - Bioinformatics Track Track Co-Chairs: Paola Lecca, University of Trento, Italy Dan Tulpan, University of Guelph, Canada Juan Manuel Corchado, University of Salamanca, Spain Track Editorial ..................................................................................................................................................... 1 An Insight into Biological Data Mining based on Rarity and Correlation as Constraints ........................... 3 Souad Bouasker, University of Tunis ElManar, Tunisia Sadok Ben Yahia, Tallinn University of Technology, Estonia Gayo Diallo, University of Bordeaux, France Drug Target Discovery using Knowledge Graph Embeddings ..................................................................... 11 Sameh K. Mohamed, National University of Ireland Galway, Ireland Aayah Nounu, University of Bristol, UK Vit Nováček, National University of Ireland Galway, Ireland Ensemble Feature Selectin for Biomarker Discovery in Mass Spectrometry-based Metabolomics .......... 19 AliAsghar ShahrjooiHaghighi, University of Louisville, USA Hichem Frigui, University of Louisville, USA Xiang Zhang, University of Louisville, USA Xiaoli Wei, University of Louisville, USA Biyun Shi, University of Louisville, USA Craig J. McClain, University of Louisville, USA Molecule Specific Normalization for Protein and Metabolite Biomarker
    [Show full text]
  • A Wot Testbed for Research and Course Projects 6
    CHAPTER A WOT TESTBED FOR RESEARCH AND COURSE PROJECTS 6 Mina Younan ∗, Sherif Khattab †, Reem Bahgat † Computer Science Department, Minia University, Minia, Egypt ∗ Computer Science Department, Cairo University, Cairo, Egypt † 6.1 WHAT YOU NEED TO GET STARTED The main objective of this chapter is to gain the required practical knowledge and skills for building simple physical testbeds for the WoT, which integrates the real world into the digital world. Concrete steps for building a WoT testbed are presented in the form of four experiments and a mini-project. Testbed evaluation is out of the scope of this chapter; our work elsewhere [1] discusses evaluation of an integrated WoT testbed. This chapter focuses on the interaction between microcontrollers, sen- sors, actuators, and PCs using HTTP and Zigbee protocols. The required platforms and devices for running examples in this chapter are as follows: • Platforms : C#, ASP.net, and Arduino programming language. • Devices: Examples in this chapter are for WoT-based smart home applications and will use the components listed in Table 6.1 . 6.2 INTRODUCTION Augmenting everyday’s objects (e.g., light bulbs, curtains, and appliances) with em- bedded computers or visual markers (e.g., LEDs and small LCD displays) allows things and information about them to be digitally accessible through the Web or mobile phones [1,2] . They become the Internet’s interface to the physical world by converging the physical world into digital world [3,4] . With a partial lack of efficient and scalable communication standards, the number of devices connected to the In- ternet will increase rapidly as soon as IP becomes the core standard in the field of embedded devices.
    [Show full text]
  • Context Aware Computing for the Internet of Things: a Survey
    IEEE COMMUNICATIONS SURVEYS & TUTORIALS, VOL. X, NO. X, XXXX XXXX 1 Context Aware Computing for The Internet of Things: A Survey Charith Perera, Student Member, IEEE, Arkady Zaslavsky, Member, IEEE, Peter Christen, and Dimitrios Georgakopoulos, Member, IEEE Abstract—As we are moving towards the Internet of Things discuss briefly in Section III. The definitions for ‘context’ and (IoT), the number of sensors deployed around the world is ‘context-awareness’ that are widely accepted by the research growing at a rapid pace. Market research has shown a significant community today were proposed by Abowd et al. [3] in 1999. growth of sensor deployments over the past decade and has predicted a significant increment of the growth rate in the During the last two decades, researchers and engineers future. These sensors continuously generate enormous amounts have developed a significant amount of prototypes, systems, of data. However, in order to add value to raw sensor data and solutions using context-aware computing techniques. Even we need to understand it. Collection, modelling, reasoning, and though the focus varied depending on each project, one aspect distribution of context in relation to sensor data plays critical remained fairly unchanged: that is the number of data sources role in this challenge. Context-aware computing has proven to be successful in understanding sensor data. In this paper, we (e.g. software and hardware sources). For example, most of survey context awareness from an IoT perspective. We present the proposed solutions collect data from a limited number of the necessary background by introducing the IoT paradigm and physical (hardware) and virtual (software) sensors.
    [Show full text]
  • A Survey on Internet of Things Architectures
    Journal of King Saud University – Computer and Information Sciences (2016) xxx, xxx–xxx King Saud University Journal of King Saud University – Computer and Information Sciences www.ksu.edu.sa www.sciencedirect.com A survey on Internet of Things architectures P.P. Ray Department of Computer Applications, Sikkim University, Sikkim 737102, India Received 4 July 2016; revised 24 September 2016; accepted 3 October 2016 KEYWORDS Abstract Internet of Things is a platform where every day devices become smarter, every day pro- Internet of Things (IoT); cessing becomes intelligent, and every day communication becomes informative. While the Internet Architecture; of Things is still seeking its own shape, its effects have already stared in making incredible strides as Cyber physical system a universal solution media for the connected scenario. Architecture specific study does always pave the conformation of related field. The lack of overall architectural knowledge is presently resisting the researchers to get through the scope of Internet of Things centric approaches. This literature surveys Internet of Things oriented architectures that are capable enough to improve the under- standing of related tool, technology, and methodology to facilitate developer’s requirements. Directly or indirectly, the presented architectures propose to solve real-life problems by building and deployment of powerful Internet of Things notions. Further, research challenges have been investigated to incorporate the lacuna inside the current trends of architectures to motivate the aca- demics and industries get involved into seeking the possible way outs to apt the exact power of Internet of Things. A main contribution of this survey paper is that it summarizes the current state-of-the-art of Internet of Things architectures in various domains systematically.
    [Show full text]