FoNAC - An automated Fog Node Audit and Certification scheme. Issue 93 (June 2020)

• Record Type: Journal Article
• Authors: Aslam, Mudassar; Mohsin, Bushra; Nasir, Abdul; Raza, Shahid
• Is Part Of: Computers & security. Issue 93(2020)
• Publication Date: 2020-06
• Subjects: Fog -- Edge -- Cloud computing -- Continuous auditing -- TPM 2.0 -- Remote attestation -- Certification -- Security -- SLA; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2020.101759
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Meeting the security and privacy needs for IoT data becomes equally important in the newly introduced intermediary Fog Computing layer, as it was in its former technological layer - Cloud; but the accomplishment of such security is critical and challenging. While security assurance of the fog layer devices is imperative due to their exposure to the public Internet, it becomes even more complex, than the cloud layer, as it involves a large number of heterogeneous devices deployed hierarchically. Manual audit and certification schemes are unsuitable for large number of fog nodes thereby inhibiting the involved stakeholders to use manual security assurance schemes altogether. However, scalable and feasible security assurance can be provided by introducing automated and continuous monitoring and auditing of fog nodes to ensure a trusted, updated and vulnerability free fog layer. This paper presents such an solution in the form of an automated Fo g N ode A udit and C ertification scheme (FoNAC) which guarantees a secure fog layer through the proposed fog layer assurance mechanism. FoNAC leverages Trusted Platform Module (TPM 2.0) capabilities to evaluate/audit the platform integrity of the operating fog nodes and grants certificate to the individual node after a successful security audit. FoNAC security is also validated through its formal security analysis performed using AVISPA under Dolev-Yao intruder model. The security analysis of FoNAC shows its resistance against cyber-attacks like impersonation, replay attack, forgery, Denial of Service(DoS) and MITM attack.