Handbook of Big Data and IoT Security

382 Pages·2019·11.87 MB·English

by  Ali Dehghantanha

Ali Dehghantanha
Kim-Kwang Raymond Choo Editors
Handbook of
Big Data and
IoT Security
Handbook of Big Data and IoT Security
Ali Dehghantanha • Kim-Kwang Raymond Choo
Editors
Handbook of Big Data and
IoT Security
123
Editors
AliDehghantanha Kim-KwangRaymondChoo
CyberScienceLab DepartmentofInformationSystems
SchoolofComputerScience andCyberSecurity
UniversityofGuelph TheUniversityofTexasatSanAntonio
Guelph,ON,Canada SanAntonio,TX,USA
ISBN978-3-030-10542-6 ISBN978-3-030-10543-3 (eBook)
https://doi.org/10.1007/978-3-030-10543-3
LibraryofCongressControlNumber:2019934371
©SpringerNatureSwitzerlandAG2019
Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartof
thematerialisconcerned,specificallytherightsoftranslation,reprinting,reuseofillustrations,recitation,
broadcasting,reproductiononmicrofilmsorinanyotherphysicalway,andtransmissionorinformation
storageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodology
nowknownorhereafterdeveloped.
Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication
doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant
protectivelawsandregulationsandthereforefreeforgeneraluse.
Thepublisher,theauthors,andtheeditorsaresafetoassumethattheadviceandinformationinthisbook
arebelievedtobetrueandaccurateatthedateofpublication.Neitherthepublishernortheauthorsor
theeditorsgiveawarranty,expressorimplied,withrespecttothematerialcontainedhereinorforany
errorsoromissionsthatmayhavebeenmade.Thepublisherremainsneutralwithregardtojurisdictional
claimsinpublishedmapsandinstitutionalaffiliations.
ThisSpringerimprintispublishedbytheregisteredcompanySpringerNatureSwitzerlandAG.
Theregisteredcompanyaddressis:Gewerbestrasse11,6330Cham,Switzerland
Contents
BigDataandInternetofThingsSecurityandForensics:Challenges
andOpportunities................................................................ 1
AminAzmoodeh,AliDehghantanha,andKim-KwangRaymondChoo
PrivacyofBigData:AReview.................................................. 5
S.SangeethaandG.SudhaSadasivam
A Bibliometric Analysis of Authentication and Access Control
inIoTDevices..................................................................... 25
SamuelGrooby,TooskaDargahi,andAliDehghantanha
TowardsIndeterminacy-TolerantAccessControlinIoT.................... 53
Mohammad Heydari, Alexios Mylonas, Vasileios Katos,
andDimitrisGritzalis
PrivateCloudStorageForensics:SeafileasaCaseStudy................... 73
Yee-YangTeing,SajadHomayoun,AliDehghantanha,
Kim-KwangRaymondChoo,RezaM.Parizi,MohammadHammoudeh,
andGregoryEpiphaniou
DistributedFilesystemForensics:CephasaCaseStudy.................... 129
Krzysztof Nagrabski, Michael Hopkins, Milda Petraityte,
Ali Dehghantanha, Reza M. Parizi, Gregory Epiphaniou,
andMohammadHammoudeh
ForensicInvestigationofCrossPlatformMassivelyMultiplayer
OnlineGames:MinecraftasaCaseStudy.................................... 153
Paul J. Taylor, Henry Mwiki, Ali Dehghantanha, Alex Akinbi,
Kim-Kwang Raymond Choo, Mohammad Hammoudeh,
andRezaM.Parizi
BigDataForensics:HadoopDistributedFileSystemsasaCaseStudy.... 179
Mohammed Asim, Dean Richard McKinnel, Ali Dehghantanha,
RezaM.Parizi,MohammadHammoudeh,andGregoryEpiphaniou
v
vi Contents
Internet of Things Camera Identification Algorithm Based on
SensorPatternNoiseUsingColorFilterArrayandWaveletTransform.. 211
Kimia Bolouri, Amin Azmoodeh, Ali Dehghantanha,
andMohammadFirouzmand
ProtectingIoTandICSPlatformsAgainstAdvancedPersistent
ThreatActors:AnalysisofAPT1,SilentChollimaandMolerats .......... 225
SamuelGrooby,TooskaDargahi,andAliDehghantanha
Analysis of APT Actors Targeting IoT and Big Data Systems:
Shell_Crew, NetTraveler, ProjectSauron, CopyKittens,Volatile
CedarandTransparentTribeasaCaseStudy ............................... 257
PaulJ.Taylor,TooskaDargahi,andAliDehghantanha
ACyberKillChainBasedAnalysisofRemoteAccessTrojans............. 273
ReyhanehHosseiniNejad,HamedHaddadPajouh,AliDehghantanha,
andRezaM.Parizi
Evaluation and Application of Two Fuzzing Approaches
forSecurityTestingofIoTApplications....................................... 301
OmarM.K.Alhawi,AlexAkinbi,andAliDehghantanha
BibliometricAnalysisontheRiseofCloudSecurity......................... 329
LimSzeThiam,TooskaDargahi,andAliDehghantanha
ABibliometricAnalysisofBotnetDetectionTechniques.................... 345
ShehuAmina,RaulVera,TooskaDargahi,andAliDehghantanha
SecurityinOnlineGames:CurrentImplementationsandChallenges .... 367
Reza M. Parizi, Ali Dehghantanha, Kim-Kwang Raymond Choo,
MohammadHammoudeh,andGregoryEpiphaniou
Contributors
AlexAkinbi School of Computer Science, Liverpool John Moores University,
Liverpool,UK
Omar M.K.Alhawi Department of Computer Science, University of Salford,
Manchester,UK
ShehuAmina School of Computing, Science and Engineering, University of
Salford,Manchester,UK
MohammedAsim Department of Computer Science, University of Salford,
Manchester,UK
AminAzmoodeh CyberScienceLab,SchoolofComputerScience,Universityof
Guelph,Guelph,ON,Canada
DepartmentofComputerScience&Engineering,ShirazUniversity,Shiraz,Iran
KimiaBolouri Cyber Science Lab, School of Computer Science, University of
Guelph,Guelph,ON,Canada
Kim-Kwang RaymondChoo Department of Information Systems and Cyber
Security,TheUniversityofTexasatSanAntonio,SanAntonio,TX,USA
TooskaDargahi DepartmentofComputerScience,SchoolofComputing,Science
andEngineering,UniversityofSalford,Manchester,UK
AliDehghantanha Cyber Science Lab, School of Computer Science, University
ofGuelph,Guelph,ON,Canada
GregoryEpiphaniou Wolverhampton Cyber Research Institute (WCRI), School
of Mathematics and Computer Science, University of Wolverhampton, Wolver-
hampton,UK
MohammadFirouzmand Iranian Research Organization for Science and Tech-
nology(IROST),Tehran,Iran
vii
viii Contributors
DimitrisGritzalis Department of Informatics, Athens University of Economics
andBusiness,Athens,Greece
SamuelGrooby DepartmentofComputerScience,SchoolofComputing,Science
andEngineering,UniversityofSalford,Manchester,UK
HamedHaddadPajouh CyberScienceLab,SchoolofComputerScience,Univer-
sityofGuelph,Guelph,ON,Canada
MohammadHammoudeh SchoolofComputing,MathematicsandDigitalTech-
nology,ManchesterMetropolitanUniversity,Manchester,UK
MohammadHeydari Department of Computing and Informatics, Bournemouth
University,Poole,UK
SajadHomayoun Department of Computer Engineering and Information Tech-
nology,ShirazUniversityofTechnology,Shiraz,Iran
MichaelHopkins SchoolofComputing,Science,andEngineering,Universityof
Salford,Manchester,UK
ReyhanehHosseiniNejad PishtazanHigherEducationInstitute,Shiraz,Iran
VasileiosKatos DepartmentofComputingandInformatics,BournemouthUniver-
sity,Poole,UK
Dean RichardMcKinnel Department of Computer Science, University of Sal-
ford,Manchester,UK
HenryMwiki School of Computing, Science and Engineering, University of
Salford,Manchester,UK
AlexiosMylonas Department of Computing and Informatics, Bournemouth Uni-
versity,Poole,UK
KrzysztofNagrabski SchoolofComputing,Science,andEngineering,University
ofSalford,Manchester,UK
Reza M.Parizi Department of Software Engineering and Game Development,
KennesawStateUniversity,Marietta,GA,USA
MildaPetraityte School of Computing, Science, and Engineering, University of
Salford,Manchester,UK
S.Sangeetha DepartmentofInformationTechnology,PSGCollegeofTechnology,
Coimbatore,TamilNadu,India
G.SudhaSadasivam Department of Computer Science and Engineering, PSG
CollegeofTechnology,Coimbatore,TamilNadu,India
Paul J.Taylor School of Computing, Science and Engineering, University of
Salford,Manchester,UK
Contributors ix
Yee-YangTeing Faculty of Computer Science and Information Technology, Uni-
versityPutraMalaysia,SeriKembangan,Malaysia
Lim SzeThiam School of Computing, Science and Engineering, University of
Salford,Manchester,UK
RaulVera SchoolofComputing,ScienceandEngineering,UniversityofSalford,
Manchester,UK
Big Data and Internet of Things Security
and Forensics: Challenges and
Opportunities
AminAzmoodeh,AliDehghantanha,andKim-KwangRaymondChoo
Abstract With millions to billions of connected Internet of Things (IoT) devices
and systems sending heterogeneous raw and processed data through the IoT
network, we need to be able to effectively utilize big data analytical techniques
and solutions and ensure the security and privacy of IoT data and services against
the broad range of attackers. Further complicating the challenge is the increasing
number of nodes and complexity of the IoT network and ecosystem, for example
the increasing number and size of audit and security logs and intrusion data to be
collectedandanalyzed.Thepurposeofthishandbookistoexplorecybersecurity,
forensics and threat intelligence challenges and solutions relating to IoT and big
data.
Keywords Bigdata · InternetofThings · IoT · Security · Forensic
1 Introduction
Internet of Things (IoT) refers to a wide pervasive network of (smart) Internet-
connected devices, such as smart vehicles, embedded systems, smart sensors, and
other devices or systems that autonomously sense, store, transfer and process
collected data [1, 2]. In recent years, IoT has played an increasingly integrated
A.Azmoodeh
CyberScienceLab,SchoolofComputerScience,UniversityofGuelph,Guelph,ON,Canada
DepartmentofComputerScience&Engineering,ShirazUniversity,Shiraz,Iran
e-mail:[email protected]
A.Dehghantanha((cid:2))
CyberScienceLab,SchoolofComputerScience,UniversityofGuelph,Guelph,ON,Canada
e-mail:[email protected]
K.-K.R.Choo
DepartmentofInformationSystemsandCyberSecurity,TheUniversityofTexasatSanAntonio,
SanAntonio,TX,USA
©SpringerNatureSwitzerlandAG2019 1
A.Dehghantanha,K.-K.R.Choo(eds.),HandbookofBigDataandIoTSecurity,
https://doi.org/10.1007/978-3-030-10543-3_1