IoT security through web application firewall
Abstract
The current trend in home electronics needs to be Internet Connectivity. Internet of Things is a collection of many interconnected objects, services and devices that can communicate and share the data to achieve a common goal in different areas and applications using internet. Attacks on IoT devices are physical attacks, side channel attacks, cryptanalysis attacks, software attacks, network attacks. The network attacks does not require physical access to create a major disruption like DDos in the network. The attackers can insert themselves between us and our devices like Man in Middle Attack. A firewall acts as a barrier between a trusted network and an untrusted network. This is a proposed work to focus on the security challenges of IoT using web application firewall.
About this article
Keywords
- IPS
- OWASP
- Web Application Firewall(WAF).
References
[1] Frost & Sullivan, "High-Profile Data Breaches Demand Web Application Firewall Adoption," [online]. Available: http://ww2.frost.com/news/press-releases/highprofile-data-breaches-demand-web-application-firewall-adoption/ [Accessed 14th July 2016].
[2] Darisuz palka, Marak Zachara, “Learning Web Application Firewall – Benefits and Caveats”, August 2011.
[3] Hope P., Walther B.: Web Security Testing Cookbook. O’Reilly Media, ISBN: 9780-596-51483-9 (2008)
[4] Jason Pubal, “Web Application Firewall”, Gold Certification, Sans Institute, March 13, 2015.
[5] SANS Institute. (2012). The OSI Model: An Overview. [Online].Available:http://www.sans.org/reading_room/whitepapers/standards/osi-model - overview_543
[6] Alexander Endraca, Bryan King, George Nodalo, Maricone Sta. Maria, and Isaac Sabas, “ Web Application Firewall”, International Journal of e-Education, e-Business, e-Management and e-Learning, Vol. 3, No. 6, December 2013.
[7] Web Application Security Consortium, “Web Application Firewall Evaluation Criteria," [online]. Available: http://projects.webappsec.org/w/page/13246983/WAFEC%201%20HTML%20Version [Accessed 29th June 2016].
[8] Joonas Bloomberg, “ Securing Internet of Things with a Web Application Firewall”, Master Thesis, 2017.
[9] Richardh, “Benefits of using a Web Application Firewall” [online]. Available https://www.veber.co.uk/web-application-firewall-benefits/ [September 7, 2016].
[10] Tony Perez, “Website Application Firewalls(WAF)- Practical Approach to Website Security”, [online]. Avaliable: https://blog.sucuri.net/2017/02/website-application-firewalls-waf-practical-approach-to-website-security.html [February 3, 2017].