Sürdürülebilir Kalkınma Amaçları
Yazarlar
Yayınlar
- MakaleAçık Erişim2025Scopus SJRQ1A comprehensive and realistic performance evaluation of post-quantum security for consumer IoT devices
Hanna, Yacoub; Bozhko, Jessica; Tonyali, Samet; Harrilal-Parchment, Ricardo; Cebe, Mumin; Akkaya, Kemal
The computational capacity envisaged for quantum computers poses a significant threat to today's traditional cryptographic algorithms. Although they are not yet large enough to compromise current cryptographic protocols, one can practice retrospective decryption since data packets traveling through the Internet can be easily sniffed. This threat extends to wireless communication security within consumer IoT devices that use lightweight cryptography due to limited computational power. Thus, countermeasures against potential quantum attacks should be preemptively adopted. NIST is leading efforts to standardize several algorithms as quantum-resistant Key Exchange Mechanisms (KEMs) and Digital Signatures. In this paper, we investigate the viability of these Post-Quantum algorithms in the Transport Layer Security (TLS) of power-constrained IoT devices. Specifically, it focuses on two widely used IoT network protocol stacks, i.e., Bluetooth Low Energy (BLE) and Wi-Fi. To this end, we build a realistic IoT testbed running IP over BLE. Our evaluation considers the impact of several realistic factors for the first time, such as using a chain of certificates on the server side and incorporating certificate validation methods such as Online Certificate Status Protocol (OCSP) and Certificate Revocation Lists (CRL). We also evaluate the impact of mutual authentication between the server and the client. Utilizing the outcomes of this evaluation, we then propose a novel approach for IoT devices to dynamically choose the most efficient KEM algorithm for TLS based on the device's physical network interface. The performance results provide valuable insights with respect to the TLS latency and energy consumption of consumer IoT devices.
AtıfScopus34WoS24OpenAlex34İncele - MakaleAçık Erişim2023Scopus SJRQ43D data integration for geo-located cave mapping based on unmanned aerial vehicle and terrestrial laser scanner data
Çömert, Resul; Özdemir, Samed; Bilgilioglu, Burhan Baha; Alemdag, Selçuk; Zeybek, Halil Ibrahim
The Akçakale cave is a significant natural and cultural heritage site in the Black Sea region of eastern Turkey. The complex geometry and difficult-to-access areas of the cave have made the use of traditional mapping methods challenging. To overcome these limitations, this study utilized TLS and UAV technology to produce highly accurate 2D and 3D data for cave management and risk assessment purposes. The TLS system was used to create a detailed 3D point cloud of the cave interior, while the UAV system generated a 3D model of the surface topography outside the cave. The two sets of data were combined in the GIS environment using a geodetic network established in the study area, providing a common geodetic reference system for both TLS and UAV data. The study found that the cave area is 13,750 m2, which is smaller than the area of 18,000 m2 that was previously estimated using conventional measurement methods. The volume and ceiling heights of the cave were calculated using the elevation models generated from TLS point cloud data. The 3D point cloud data were also used to map dripstone locations on the floor and ceiling of the cave, and the boundaries of rock blocks on the ground were precisely determined. The study identified potential risks associated with the cave, particularly the risk of rockfall in the source rock areas around the cave entrance and the southern part of the cave. The nearest building to the cave is approximately 35 meters away, and all the buildings in the area are less than 300 meters from the cave. In the event of the cave collapse, the buildings in the southern part of the cave are at risk of rockfall. This study demonstrates the effectiveness of combining data from TLS and UAV systems to generate broad and sensitive cave mapping and risk assessment data, which are critical for cave management and safety. The collected data can be used for cave stability investigations and rockfall risk assessments. This study provides a foundation for future explorations of the Akcakale cave and highlights the potential for modern surveying techniques to enhance our understanding of complex geological structures such as caves.
AtıfScopus4WoS3OpenAlex4İncele - BildiriYalnız künye2023Performance Evaluation of Quantum-Resistant TLS for Consumer IoT Devices
Bozhko, Jessica; Hanna, Yacoub; Harrilal-Parchment, Ricardo; Tonyali, Samet; Akkaya, Kemal
Post-quantum (PQ) cryptographic algorithms are currently being developed to be able to resist attacks by quantum computers. The practical use of these algorithms for securing networks will depend on their computational and communication efficiency. In particular, this is critical for the security of wireless communications within the context of consumer IoT devices that may have limited computational power and depend on a constrained wireless bandwidth. To this end, there is a need to evaluate the performance of widely used application layer security standards such as transport layer security (TLS) to understand the use of the existing PQ algorithms that are being evaluated by NIST as a replacement to the current cryptographic algorithms. This paper focuses on two widely used IoT standards Bluetooth Low Energy (BLE) and WiFi to find out the optimal performing PQ algorithm for their security when used in end-to-end connections over the Internet. By implementing the capability for IP over BLE and all options of TLS connection establishment, we developed a client-server IoT testbed to measure the efficiency of PQ key encapsulation mechanisms (KEMs) and PQ digital signature algorithms. The test results showed that Kyber512 is the ideal KEM while Falcon-512 and Dilithium2 are the best signatures for BLE and WiFi devices. Based on this outcome, we developed a mechanism for IoT devices with multiple communication interfaces, that dynamically chooses a PQ KEM algorithm based on the MAC layer protocol being used at the time.
AtıfScopus26WoS15OpenAlex21İncele - BildiriAçık Erişim2022Performance Evaluation of TLS 1.3 Handshake on Resource-Constrained Devices Using NIST's Third Round Post-Quantum Key Encapsulation Mechanisms and Digital Signatures
Saribas, Sultan; Tonyali, Samet
Towards the end of the 20. century, quantum computing came into sight by the main effect of Shor's Algorithm. While this algorithm offers a solution for the factorization problem, which makes it exponentially faster, it alongside becomes a critical threat for the encryption schemes since mostly their security mechanisms rely on the difficulty of integer factorization or discrete log problems. Despite it is not known when advanced quantum computers will show up, yet, once it is developed, most existing cryptography will be rendered useless, which means all existing information security will be vulnerable. Owing to this risky situation, The National Institute of Standards and Technology (NIST) launched post-quantum cryptography (PQC) standardization process for the development of PQC schemes. In this paper, we have chosen three key encapsulation mechanisms and two digital signature algorithms with different parameter sets from the round three submissions. We measured their TLS 1.3 handshake performance using two resource-constrained devices and compared it to that of classical encryption and digital signature schemes. Experiment results showed that post-quantum algorithms come with an extra message overhead while their handshake delay values are promising.
AtıfScopus12OpenAlex11İncele