English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Many IoT use cases involve constrained battery-powered devices offeringservices in a RESTful manner to their communication partners. Such services mayinvolve, e.g., costly computations or actuator/sensor usage, which may havesignificant influence on the power consumption of the service Providers. Remoteattackers may excessively use those services in order to exhaust the Providers'batteries, which is a form of a Denial of Service (DoS) attack. Previous workproposed solutions based on lightweight symmetric authentication. Thesesolutions scale poorly due to requiring pre-shared keys and do not provideprotection against compromised service Requesters. In contrast, we considermore powerful attackers even capable of compromising legit Requesters. Wepropose a method that combines attacker detection and throttling, conducted bya third trusted Backend, with a lightweight authentication protocol. Forattacker detection and throttling, we propose a novel approach using ratelimitation algorithms. In addition, we propose and formally verify twoauthentication protocols suitable for different, widely used IoT networktopologies. Our protocols ensure service availability for benign Requesterseven if Providers are under a battery exhaustion attack. The protocols doneither require pre-shared keys between Requesters and Providers, nor the usageof asymmetric cryptography and public key infrastructures on the Provider. Thismakes our protocols suitable for a variety of IoT deployments involvingconstrained devices and constrained networks. We demonstrate the feasibility ofour method through a simulation and a proof of concept implementation.

Protecting RESTful IoT Devices from Battery Exhaustion DoS Attacks