Lightweight Security Architecture Based on Embedded Virtualization and Trust Mechanisms for IoT Edge Devices
Open accessAbstract
Security issues represent the greatest obstacle to the growth of edge computing and the Internet of Things (IoT). In this paradigm, IoT applications are migrating to edge devices. As a result, potential security risks are arising, and unauthorized access to data from IoT edge devices is becoming a real concern. Thus, there is a need for a comprehensive, end-toend security approach since the system's more vulnerable point determines its overall security level. An edge device security system has to be built with a root of trust (i.e., something that is unclonable) and a chain of trust. Additionally, a security layer is necessary to ensure that different IoT applications execute isolated from each other in the device. In this sense, this article defines a security architecture that integrates trust mechanisms with embedded virtualization, providing security from hardware to applications. Our experiments show that the proposed architecture can be implemented with a smaller overhead and memory footprint compared to other proposed approaches in the literature, which makes it highly suitable for resource-constrained edge devices.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The IoT architecture can be broken down into four fundamental layers.
“The IoT architecture can be broken down into four fundamental layers [36]”
From A Comprehensive Survey on TinyML (2023) · cites this paper as [36]
Cites
Mobile edge computing, Fog et al.: A survey and analysis of security threats and challenges
Roman, R., Lopez, J., & Mambo, M. (2018) · Future Generation Computer Systems · doi:10.1016/j.future.2016.11.009 · Cited by 1,338 · see citing works
Fog Computing for the Internet of Things: Security and Privacy Issues
Alrawais, A., Alhothaily, A., Hu, C., & Cheng, X. (2017) · IEEE Internet Computing · doi:10.1109/mic.2017.37 · Cited by 727 · see citing works
Trusted Execution Environment: What It is, and What It is Not
Sabt, M., Achemlal, M., & Bouabdallah, A. (2015) · 2015 IEEE Trustcom/BigDataSE/ISPA · doi:10.1109/trustcom.2015.357 · Cited by 724 · see citing works
Security and trust issues in Fog computing: A survey
Zhang, P., Zhou, M., & Fortino, G. (2018) · Future Generation Computer Systems · doi:10.1016/j.future.2018.05.008 · Cited by 364 · see citing works
Dall, C., & Nieh, J. (2014) · International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) · doi:10.1145/2541940.2541946 · Cited by 170 · see citing works
TrustShadow: Secure Execution of Unmodified Applications with ARM TrustZone
Guan, L., Liu, P., Xing, X., Ge, X., Zhang, S., Yu, M., & Jaeger, T. (2017) · International Conference on Mobile Systems, Applications, and Services · doi:10.1145/3081333.3081349 · Cited by 137 · see citing works
IIoTEED: An Enhanced, Trusted Execution Environment for Industrial IoT Edge Devices
Pinto, S., Gomes, T., Pereira, J. R., Cabral, J., & Tavares, A. (2017) · IEEE Internet Computing · doi:10.1109/mic.2017.17 · Cited by 128 · see citing works
SeCReT: Secure Channel between Rich Execution Environment and Trusted Execution Environment
Jang, J., Kong, S., Kim, M., Kim, D. G., & Kang, B. B. (2015) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2015.23189 · Cited by 100 · see citing works
Embedded Hypervisor Xvisor: A Comparative Analysis
Patel, A., Daftedar, M., Shalan, M., et al. (2015) · Proceedings - Euromicro Workshop on Parallel and Distributed Processing/Proceedings · doi:10.1109/pdp.2015.108 · Cited by 67 · see citing works
TEE: A virtual DRTM based execution environment for secure cloud-end computing
Dai, W., Jin, H., Zou, D., et al. (2014) · Future Generation Computer Systems · doi:10.1016/j.future.2014.08.005 · Cited by 27 · see citing works
Embedded virtualization for the design of secure IoT applications
Moratelli, C., Johann, S. F., Neves, M. V., et al. (2016) · doi:10.1145/2990299.2990301 · Cited by 26 · see citing works
Self-citationOptimizing Soft Real-Time Scheduling Performance for Virtual Machines with SRT-Xen
Cheng, K., Bai, Y., Wang, R., et al. (2015) · IEEE/ACM International Symposium on Cluster, Cloud and Grid Computing (CCGrid) · doi:10.1109/ccgrid.2015.52 · Cited by 13 · see citing works
Masters, J. (2018) · Cited by 7 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
A Comprehensive Survey on TinyML
Abadade, Y., Temouden, A., Bamoumen, H., Benamar, N., Chtouki, Y., & Hafid, A. S. (2023) · IEEE Access · doi:10.1109/access.2023.3294111 · Cited by 366 · see citing works
“based on computing capacity, according to [36].”
- Authors
- Tiburski, R. T., Moratelli, C. R., Johann, S. F., Neves, M. V., Matos, E. D., Amaral, L. A., & Hessel, F.
- Affiliations
- Universidade Federal de Santa Catarina (BR)
- Pontifícia Universidade Católica do Rio Grande do Sul (BR)
- Venue
- IEEE Communications Magazine
- Published
- 2019-02
- Volume
- 57
- Issue
- 2
- Pages
- 67-73
- ISSN
- 0163-6804 (ISSN-L)
- 1558-1896
- OpenAlex
- W2917849969
- Cited by
- 78
- References
- 13
- Citations by year
- 2026: 5 · 2025: 6 · 2024: 7 · 2023: 9 · 2022: 17 · 2021: 11 · 2020: 16 · 2019: 7
- FWCI
- 5.88
- Type
- journal article
- Language
- en
- Open access
- green
- hdl.handle.net
- Licence
- Locations
- IEEE Communications Magazine (publishedVersion)
- LA Referencia (Red Federada de Repositorios Institucionales de Publicaciones Científicas) (publishedVersion, other-oa)
- PUCRS Repository (Pontifical Catholic University of Rio Grande do Sul) (submittedVersion, cc-by-nc-sa)
- Funders
- Coordenação de Aperfeiçoamento de Pessoal de Nível Superior ((Code 001))
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Security and Verification in Computing
- Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
- Physical Sciences › Computer Science › Information Systems › Blockchain Technology Applications and Security
- Keywords
- IoT edge devices, edge computing security, trust mechanisms, root of trust, trust chain, application isolation, resource-constrained devices, unauthorized access prevention
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
