CoChat
Sign Up
Cited by 62Access Control and TrustIoT-based Smart Home SystemsAdvanced Authentication Protocols Security

The DOI matches its Crossref record; 2 of the 2 references it cites were found in a registry or an index.

Hybrid Approaches (ABAC and RBAC) Toward Secure Access Control in Smart Home IoT

Ameer, Safwa, Benson, James, Sandhu, Ravi·2023·IEEE Transactions on Dependable and Secure Computing
DOI 10.1109/tdsc.2022.3216297
Open this paper in CoChat — free account

Abstract

Smart homes are interconnected homes in which a wide variety of digital devices with limited resources communicate with multiple users and among themselves using multiple protocols. The deployment of resource-limited devices and the use of a wide range of technologies expand the attack surface and position the smart home as a target for many potential security threats. Access control is among the top security challenges in smart home IoT. Several access control models have been developed or adapted for IoT in general, with a few specifically designed for the smart home IoT domain. Most of these models are built on the role-based access control (RBAC) model or the attribute-based access control (ABAC) model. However, recently some researchers demonstrated that the need arises for a hybrid model combining ABAC and RBAC, thereby incorporating the benefits of both models to better meet IoT access control challenges in general and smart homes requirements in particular. In this paper, we used two approaches to develop two different hybrid models for smart home IoT. We followed a role-centric approach and an attribute-centric approach to develop HyBAC$_{RC}$and HyBAC$_{AC}$, respectively. We formally define these models and illustrate their features through a use case scenario demonstration. We further provide a proof-of-concept implementation for each model in Amazon Web Services (AWS) IoT platform. Finally, we conduct a theoretical comparison between the two models proposed in th…

Overview

Integrity signals

Registry

Crossref · 10.1109/tdsc.2022.3216297

Cites

2 of 2 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Verification

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Novo et al. found that monitoring a ZigBee network can obtain useful network layer commands and use them to launch selective RF and spoofing attacks.

    “Novo et al. [72] found that by monitoring the ZigBee network, they could obtain some useful network layer commands and use these commands to launch selective RF and spoofing attacks.”

    From A Survey of IoT Privacy Security: Architecture, Technology, Challenges, and Trends (2024) · cites this paper as [72]

  • Key cracking usually starts from the pairing process, for example, by eavesdropping on the key during ZigBee pairing.

    “Key cracking usually starts from the pairing process of the device, for example, by eavesdropping on the key during the ZigBee pairing process [72].”

    From A Survey of IoT Privacy Security: Architecture, Technology, Challenges, and Trends (2024) · cites this paper as [72]

Citations

Cites

Flagged first, then by citations

Research works printed but not linked: 73

  1. 10.1109/JIOT.2019.2963794 · DOI
  2. 10.1145/365230.365252 · DOI · Paper page
  3. 10.1109/BigDataSecurity-HPSC-IDS49724.2020.00044 · DOI
  4. 10.1145/3381991.3395618 · DOI
  5. 10.1109/IRI49571.2020.00076 · DOI
  6. 10.1109/MC.2010.155 · DOI
  7. 10.1145/507711.507722 · DOI
  8. 10.1109/VTCFall.2015.7391174 · DOI
  9. 10.1109/PowerAfrica.2016.7556606 · DOI
  10. 10.1007/978-3-030-59638-5_13 · DOI
  11. 10.1145/3292006.3300048 · DOI
  12. 10.1145/3445969.3450428 · DOI
  13. 10.1155/2021/5531369 · DOI
  14. 10.1109/ICCCN.2017.8038503 · DOI
  15. 10.5815/ijcnis.2013.05.03 · DOI
  16. 10.3390/info13020060 · DOI
  17. 10.1109/CIT.2012.81 · DOI
  18. hu, 2015, Attribute-based access control, IEEE Comput, 48, 85, 10.1109/MC.2015.33 · DOI · Paper page
  19. 10.1109/APCC.2016.7581479 · DOI
  20. 10.1109/ICWS.2009.98 · DOI
  21. 10.1007/978-3-319-18681-8_2 · DOI
  22. 10.1109/ICDCSW.2012.23 · DOI
  23. 10.1007/978-3-540-78731-0_4 · DOI
  24. 10.1007/s12243-019-00709-7 · DOI
  25. 10.1109/JIOT.2020.2969326 · DOI · Paper page
  26. zhang, 2010, An extended role based access control model for the Internet of Things, Int Conf Inf Netw Automat, 1v
  27. 10.1145/501978.501980 · DOI
  28. 10.3390/s140814786 · DOI
  29. 10.1007/978-3-319-11119-3_31 · DOI
  30. 10.12785/amis/080416 · DOI
  31. 10.1109/ACCESS.2020.2969715 · DOI
  32. 10.1007/978-3-319-64701-2_57 · DOI
  33. 10.1145/3180457.3180464 · DOI
  34. 10.1145/344287.344301 · DOI · Paper page
  35. 10.1016/j.jnca.2019.06.017 · DOI · Paper page
  36. 10.23919/MIPRO.2017.7973622 · DOI
  37. 10.1145/3532105.3535020 · DOI
  38. fernandes, 2016, Flowfence: Practical data protection for emerging IoT application frameworks, Proc 25th USENIX Secur Symp, 531
  39. 10.1145/3450569.3463559 · DOI
  40. 10.1145/2897845.2897886 · DOI
  41. 10.1145/3532105.3535017 · DOI
  42. 10.1145/3205977.3205994 · DOI
  43. 10.1016/j.dcan.2017.04.003 · DOI
  44. 10.1109/CoCoNet.2015.7411221 · DOI
  45. 10.1016/j.cosrev.2020.100312 · DOI · Paper page
  46. attia, 2018, A new hybrid access control model for security policies in multimodal applications environments, J Univ Comput Sci, 24, 392
  47. 10.1109/SP.2016.44 · DOI
  48. 10.1109/ACCESS.2021.3126201 · DOI
  49. 10.1145/3313831.3376255 · DOI
  50. 10.3390/s21206832 · DOI
  51. he, 2018, Rethinking access control and authentication for the home Internet of Things (IoT), Proc 27th USENIX Conf Secur, 255
  52. 10.1007/1-85233-854-7_2 · DOI
  53. ouaddah, 2017, Access control in the internet of things: Big challenges and new opportunities, Comput Netw, 112, 237, 10.1016/j.comnet.2016.11.007 · DOI
  54. 10.1016/j.jisa.2019.02.003 · DOI
  55. 10.1016/j.future.2018.12.061 · DOI
  56. 10.1145/3510547.3517920 · DOI
  57. 10.1007/s11277-020-07649-9 · DOI
  58. ur, 2013, The current state of access control for smart devices in homes, Proc Workshop Home Usable Privacy Secur, 209
  59. 10.1109/JIOT.2019.2931372 · DOI
  60. 10.1145/1920261.1920276 · DOI
  61. 10.1145/2398356.2398377 · DOI
  62. 10.1145/373256.373258 · DOI
  63. 10.1016/S0065-2458(08)60206-5 · DOI
  64. 10.1007/978-3-319-46568-5_53 · DOI
  65. 10.1145/3198458.3198463 · DOI
  66. 10.1109/TMSCS.2015.2498605 · DOI · Paper page
  67. 10.1007/978-3-642-31540-4_4 · DOI
  68. 10.1109/JIOT.2018.2812239 · DOI · Paper page
  69. 10.1007/978-981-13-7166-0_25 · DOI
  70. 10.1109/COMST.2015.2388550 · DOI
  71. oluwafemi, 2013, Experimental security analyses of non-networked compact fluorescent lamps: A case study of home automation security, Proc Workshop Learn Authoritative Secur Exp Results, 13
  72. 10.1145/1108906.1108908 · DOI
  73. guoping, 2011, The research of access control based on UCON in the Internet of Things, J Softw, 6, 724

Cited by

Sorted by citations

Metadata

Authors
Ameer, S., Benson, J., & Sandhu, R.
Affiliations
The University of Texas at San Antonio (US)
ORCID
Venue
IEEE Transactions on Dependable and Secure Computing
Publisher
Institute of Electrical and Electronics Engineers (IEEE)
Published
2023-09-01
Volume
20
Issue
5
Pages
4032-4051
ISSN
  • 1545-5971 (ISSN-L)
  • 1941-0018
  • 2160-9209
DOI
10.1109/tdsc.2022.3216297
OpenAlex
W4313135279
Cited by
62
References
2
Citations by year
2026: 15 · 2025: 21 · 2024: 23 · 2023: 3
FWCI
16.93
Type
journal article
Language
en
Open access
closed
Licence
Locations
IEEE Transactions on Dependable and Secure Computing (publishedVersion)
Funders
National Science Foundation (2112590, HRD1736209)
Topics
  • Physical Sciences › Computer Science › Computer Networks and Communications › Access Control and Trust
  • Physical Sciences › Engineering › Electrical and Electronic Engineering › IoT-based Smart Home Systems
  • Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
Keywords
access control, home automation, Internet of Things security, attribute-based access control, role-based access control, AWS IoT, resource-constrained devices

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review