19–20 Sept 2024
University POLITEHNICA of Bucharest
Europe/Bucharest timezone

Exposing IoT Platforms Securely and Anonymously Behind CGNAT

20 Sept 2024, 11:50
20m
EC102

EC102

Paper presentation Network Security Network Security

Speaker

Mr Daniel Hritcan (Universitatea "Stefan cel Marre" Suceava)

Description

Abstract— The swift expansion of Internet of Things (IoT) devices has resulted in considerable progress in connectivity and automation, yet it has simultaneously brought about notable security weaknesses. This paper presents a novel approach to securing IoT platforms through a comprehensive architecture that integrates a double reverse proxy setup, leveraging Oracle Cloud Virtual Private Servers (VPS), NGINX Proxy Manager, Cloudflare, and Tailscale encrypted peer-to-peer (P2P) tunneling. The proposed solution employs Oracle Cloud VPS to host and manage IoT applications, ensuring robust performance and scalability. NGINX Proxy Manager is utilized to facilitate efficient and secure load balancing and reverse proxy functions. Cloudflare provides additional security layers, including Distributed Denial of Service (DDoS) protection, SSL/TLS encryption, and traffic management. To further enhance security, the encryption of Tailscale P2P tunneling creates a secure mesh network between devices, ensuring data integrity and confidentiality. This architecture not only fortifies the security posture of IoT platforms but also improves the resilience and reliability of data transmission.

Authors

Mr Daniel Hritcan (Universitatea "Stefan cel Marre" Suceava) Dr Doru Balan (Universitatea "Stefan cel Mare" Suceava)

Presentation materials