79014 20200925115926.0 doi 10.1109/ACCESS.2019.2900939 sideral 111512 ART-2019-111512 eng (orcid)0000-0001-7738-5517 De Hoz Diego, J.D. IoTsafe, Decoupling Security from Applications for a Safer IoT 2019 Access copy available to the general public Unrestricted The use of robust security solutions is a must for the Internet of Things (IoT) devices and their applications: regulators in different countries are creating frameworks for certifying those devices with an acceptable security level. However, even for already certified devices, security protocols have to be updated when a breach is found or a certain version becomes obsolete. Many approaches for securing IoT applications are nowadays based on the integration of a security layer [e.g., using transport layer security, (TLS)], but this may result in difficulties when upgrading the security algorithms, as the whole application has to be updated. This fact may shorten the life of IoT devices. As a way to overcome these difficulties, this paper presents IoTsafe, a novel approach relying on secure socket shell (SSH), a feasible alternative to secure communications in IoT applications based on hypertext transfer protocol (HTTP and HTTP/2). In order to illustrate its advantages, a comparison between the traditional approach (HTTP with TLS) and our scheme (HTTP with SSH) is performed over low-power wireless personal area networks (6loWPAN) through 802.15.4 interfaces. The results show that the proposed approach not only provides a more robust and easy-To-update solution, but it also brings an improvement to the overall performance in terms of goodput and energy consumption. Core server stress tests are also presented, and the server performance is also analyzed in terms of RAM consumption and escalation strategies. info:eu-repo/grantAgreement/ES/DGA-FEDER/Construyendo Europa desde Aragón info:eu-repo/grantAgreement/ES/DGA/T31-17R info:eu-repo/grantAgreement/ES/MINECO/TIN2015-64770-R-TISFIBE info:eu-repo/grantAgreement/ES/MINECO/TIN2016-76770-R info:eu-repo/semantics/openAccess All rights reserved http://www.europeana.eu/rights/rr-f/ 3.745 2019 COMPUTER SCIENCE, INFORMATION SYSTEMS 35 / 156 = 0.224 2019 Q1 T1 ENGINEERING, ELECTRICAL & ELECTRONIC 61 / 266 = 0.229 2019 Q1 T1 TELECOMMUNICATIONS 26 / 90 = 0.289 2019 Q2 T1 0.775 2019 Computer Science (miscellaneous) 2019 Q1 Engineering (miscellaneous) 2019 Q1 Materials Science (miscellaneous) 2019 Q2 info:eu-repo/semantics/article info:eu-repo/semantics/publishedVersion (orcid)0000-0002-6977-6363 Saldaña, J. Universidad de Zaragoza (orcid)0000-0002-5237-0447 Fernandez-Navajas, J. Universidad de Zaragoza (orcid)0000-0003-4690-6089 Ruiz-Mas, J. Universidad de Zaragoza 5008 560 Universidad de Zaragoza Dpto. Ingeniería Electrón.Com. Área Ingeniería Telemática 7 (2019), 29942-29962 IEEE Access IEEE Access 2169-3536 8311503 http://zaguan.unizar.es/record/79014/files/texto_completo.pdf Versión publicada 116519 http://zaguan.unizar.es/record/79014/files/texto_completo.jpg?subformat=icon icon Versión publicada oai:zaguan.unizar.es:79014 articulos driver 2020-09-25-11:45:24 ARTICLE