DNS/IPv6 for IoT Security

In a few short years, the Internet of Things (IoT) has gone from a technology — or set of technologies — that were cutting edge to the situation today where connected household items, or automobiles, are common.

There are two main challenges associated with deployment of IoT devices in today’s Internet world. The first challenge is related to limited address space of IPv4 and upgradation to IPv6 addresses are relatively slow. The operation of IPv6-only networks is still a new concept that needs to be explored. The second challenge is related to security of IoT devices which are highly resource constrained and deployed typically in remote/difficult-to-access locations.

Most of the IoT devices come with factory installed firmware. The firmware of IoT devices is not generally updated during their lifetime. So, they are more prone to attacks which may lead to severe problems. Hence, there is a need for mechanism to securely update software or firmware of these IoT devices. This project investigates suitability of using DNS infrastructure with DoA record type for secure Over-The-Air (OTA) software/firmware updating of IPv6 based IoT devices.

It's in collaboration with ICANN (The Internet Corporation for Assigned Names and Numbers), NASSCOM (The National Association of Software and Services Companies) and ERNET India. This project is being funded by NASSCOM through Center of Excellence on IoT.

ICANN Principal Technologist Alain Durand discusses scope of research on Draft Durand Object Exchange with the IIT Hyderabad team.