Sigurnost u aplikacijskim protokolima Interneta stvari

master's thesis

• Title (english): Security in Internet of Things application protocols
• Author: Petar Podbrežnički
• Mentor: Mario Kušek (mentor)
• Committee member: Mario Kušek (predsjednik povjerenstva)
• Committee member: Gordan Ježić (član povjerenstva)
• Committee member: Pavle Skočir (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2021-02-11, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Electrical Engineering

Abstract

Internet stvari je skup tehnologija koji omogućava povezivanje fizičkih uređaja nazvanih stvari koje prikupljaju, dijele i razmjenjuju podatke putem interneta s ciljem olakšavanja života ljudi. Uz sve prednosti ovih tehnologija, potrebno je i odgovoriti na teška sigurnosna pitanja koje one povlače. Problem sigurnosti u Internetu stvari je kompleksan i često zanemaren. Velike poteškoće unosi i ograničenost uređaja korištenih u IoT-u zbog kojih je implementacija već postojećih rješenja otežana.
Ovaj rad obrazlaže važnost sigurnosti u komunikaciji uređaja u IoT-u i opisuje rad komunikacijskih protokola MQTT i CoAP. Također je prikazan način rada, slabosti i preporuke za ispravno korištenje sigurnosnih protokola TLS i DTLS.
U praktičnom dijelu ovog rada demonstrirana je implementacija protokola MQTT i CoAP na mikrokontroleru ESP32 osiguranih sa protokolima TLS i DTLS. ESP32 korišten je kao primjer ograničenog uređaja čije se mogućnosti i dostupne platforme za razvoj moraju uzeti u obzir pri implementaciji ovih protokola. Prikazane su mogućnosti dva razvojna okvira, ESP-IDF i Arduino.

Abstract (english)

Internet of Things is a set of technologies that enables the connection of physical devices called things that collect, share, and exchange data over the Internet with the goal of improving people's lives. Despite the benefits these technologies offer, they also require answering difficult questions about security. The issue of security in the Internet of Things is complex and often overlooked. The difficulty of this problem is increased by the limitations of the devices often used in IoT, which make it difficult to implement existing solutions.
This thesis justifies the importance of security in IoT device communication and describes the MQTT and CoAP communication protocols. It also provides an overview and recommendations for the secure use of the TLS and DTLS protocols.
The practical part of this thesis demonstrates an implementation of the MQTT and CoAP communication protocols on an ESP32 microcontroller secured with TLS and DTLS. The ESP32 is used as an example of a constrained device whose capabilities and available programming platforms must be considered when implementing these protocols. Two development frameworks are examined: ESP-IDF and Arduino.

• Keywords: Internet stvari; MQTT; COAP; TLS; DTLS; Sigurnost; ESP32
• Keywords (english): Internet of Things; MQTT; COAP; TLS; DTLS; Security; ESP32
• Language: croatian
• URN:NBN: urn:nbn:hr:168:848024
• Study programme: Title: Information and Communication Technology; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije (magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2023-01-13 10:38:00