Moving Target Defense and Trust management New Challenges for IoT and SIoT systems⋆ Souraya Hamida 0 1 Ammar Hamida 0 Okba Kazar 2 Department of Computer Science, Mohamed Khider University of Biskra University of Batna 2 , Mostefa Ben Boulaid , Algeria University of Kalba , Sharjah , United Arab Emirates

A transition from traditional networks to a new era of IoT and social IoT has occurred as a result of the widespread use of mobile devices and wireless technology. Notwithstanding the advancements made, the safety of IoT and SIoT systems still has to be enhanced. For this need, we give a general overview of how trust management and moving target defense are used in IoT and SIoT to assure security.

 eol>security Internet of Things Social Internet of Things moving target defense trust management 1. Introduction

With the widespread use of wireless technologies and mobile devices, traditional networks are giving way to the Internet of Things (IoT). From industry to home services, the Internet of Things has a significant impact on many diferent areas [1] [2]

The Social Internet of Things (SIoT) is a groundbreaking new paradigm that was created by applying social networking concepts to the Internet of Things. The latter Figure 1: Mapping between IoT and SIoT architecture[1] is a potent architectural substitute for Internet of Things solutions. Fig. 1. illustrates a mapping between IoT and SIoT architecture. the moving target defense paradigm. Section 5 gives the

IoT and SIoT systems are being used more and more conclusion and our future work. in the real world. However, they are less secure than modern non-IoT systems. In addition, to remove any obstacles to the general adoption of IoT and SIoT, security 2. Trust management problems related to them must be addressed in light of their potential capabilities. A crucial component of secu- One of the most important components of security is rity is managing trust and moving target defense [1] [3]. trust management. The purpose of trust management We must comprehend the existing technologies, frame- systems is to inform users about trust and assist them work for trust management, and moving target defense in making decisions. For trustworthy data fusion and in IoT and SIoT systems to integrate security into these mining, qualified services with contextual information, systems. In this paper, we provide an overview of the and improved user privacy and information security in study of trust management and moving target defense the IoT, trust management is crucial.[1] [4] [5]. for IoT and SIoT systems. Trust management has been utilized in the Internet of

The remainder of this work is structured as follows: Things to foster trustworthy information sharing among sections 2 and 3 present an overview of trust management physical items and to construct social relationships auand moving target defense in Iot and SIoT. Section 4 tonomously.[6]. illustrates the diference between trust management and

2.1. Trust management in IoT 2.1.1. Trust management technique

in IoT systems, trust management is essential to allay people’s worries about data integrity and privacy. The methodical process of eliminating and safeguarding a network from unreliable nodes, such as malicious nodes or attacking nodes, broken nodes or malfunctioning nodes, and selfish nodes, is known as trust management. Figure 2 is a summary of all trust management strategies found in the literature [7] [2].

 2.1.2. Trust management Framework

The significant limitations that come with IoT-based wireless sensor networks make it dificult to suggest trust management for these kinds of networks [2].

Numerous works have presented a framework for IoT trust management. To increase a node’s confidence, several of the themes took into account the security arrangements for each layer [8]. To provide a flexible secure framework that may enhance security based on trust evaluation in human-IoT interactions, other researchers employed a model-based security toolkit [9] . Authors [ 10 ] and [11] present a framework that enables developers to incorporate trust concerns in the network while accounting for the functional needs obtained from IoT scenarios. To distribute public keys at the edge of a fog network, the authors of [12] use trust tables at each node [13].

The selection of trust attributes in certain studies is based on the quantity of successful and unsuccessful transactions or positive and negative behaviours. Others have just taken into account social interactions or QoS characteristics [2] [14].

 2.2. Trust management in SIoT

A novel framework for the Social Internet of Things (SIoT) has surfaced in recent times. According to its owners’ established norms, every object in this paradigm can autonomously form relationships with other objects in the network. Establishing trustworthy links between items and observing their dependability before depending on their knowledge is crucial. Last but not least, trust management has been applied to promote reliable information sharing among physical objects and foster social interactions on their own [15] [16] [ 17 ].

2.2.1. TRUST MANAGEMENT FRAMEWORK IN SIoT

the use of blockchain, machine learning, and deep learning in trust management frameworks are some of the most recent developments in this area [ 18 ] [19] [20][ 18 ] [19] [20]. Specifically, blockchain ofers improved security, fault tolerance, immutability, and transparency [21].

Outlines a methodology for trust management in relation to node behaviour when Bad Mouthing Attack is introduced in [ 22 ] [ 22 ]. Overall trust is the product of expected and estimated trust, which is determined using a Bayes Model and Weighted Sum. The trust calculation makes use of past and anticipated behaviour to thwart malicious attacks [21].

3. Moving Target Defense

Moving Target Defense (MTD) is a cyberdefense paradigm. It can be used to address the security issues in Internet of Things networks. The fundamental idea behind MTD is to ward of attackers by constantly altering the attack surface (such as system and network configurations) to raise the complexity and cost of the attack and also refute any system intelligence that the attackers may have gathered [23] [24] [ 25 ].

3.1. MTD frameworks for IOT

In [26], authors presented an MTD framework appropriate for Internet of Things systems. The goal of the suggested framework is to support MTD strategy formulation and execution for Internet of Things systems. The authors developed two MTD techniques based on the framework: port-hopping, which targets UDP port numbers, and the Constrained Application Protocol (CoAP). Both strategies were implemented using actual Internet of Things hardware platforms. Kyi et al. presented a framework for IoT system security using an MTD approach as a place to start when combining diverse defense strategies at various IoT levels. The first component corresponds to a real IoT system. In addition, a virtual Internet of Things system relates to the second part of the framework. An assault detection system corresponds to the third component. There are not enough components in the framework to create MTD strategies for IoT systems [3].

 3.2. MTD techniques for IoT 5. Conclusion

Three basic design questions must be defined by an MTD technique: WHAT, HOW, and WHEN to move. This last can be defined as follows [24]:

An evolving, new technological idea called the MTD paradigm can safeguard an Internet of Things system despite obstacles [27]. Although network topology shuflfing can efectively halt attack actions utilizing compromised IoT devices as stepping stones, none of the MTDbased techniques applied to IoT considered this [28] [29] [30].

Decoys are deployed so that the network shuflingbased MTD can deflect the attacker from real IoT devices and give a false impression of the network while also confusing the attacker with changing connections among IoT devices. This can efectively raise the cost and efort of the attack while lowering the likelihood that real IoT devices would be afected [ 25 ].

4. The diference between MTD and trust management

There is a diference between the use of MTD and trust management in IoT and SIoT systems. In this section, we will mention the most important one. Table 1 illustrates the diference between Mtd and trust management for IoT and SIoT systems. The most important diference is the Moving target defense is a defense mechanism that dynamically changes the attack surface, but Trust management is a security mechanism that dynamically creates reliable social networking. In addition, the Moving target defense applies to lower layers of the network but Trust management is applied to the social layer (application) in the object. Furthermore, several research papers use trust management for IoT and SIoT but no research work uses moving target defense for SIoT. [2] [3] [4] [5]

Use it against social attacks by calculating the reliability of the services provided by the objects.

Increase the uncertainty, complexity and diversity of the network system.

Increase reliable relationships between objects in the social network [6] [7] [8] [9] [ 10 ] [11] [12] [13] [14] [15]

Available: http://ieeexplore.ieee.org/document/ 7528258/ (visited on 10/14/2023). [16] 1109/ACCESS.2022.3213699. [Online]. Available: https://ieeexplore.ieee.org/document/9917502/ (visited on 10/13/2023).

 R. K. Chahal , N. Kumar , and S. Batra , “ Trust management in social internet of things: A taxonomy, open issues, and challenges ,” Computer Communications , vol. 150 , pp. 13 - 46 , Jan. 2020 , issn: 01403664. doi: 10 . 1016 / j . comcom . 2019 . 10 . 034. com/retrieve/pii/S0140366419310953 (visited on 10/13/ 2023 ). H. Tyagi , R. Kumar , and S. K. Pandey , “ A detailed study on trust management techniques for security and privacy in IoT: Challenges, trends , and research directions,” High-Confidence Computing , vol. 3 , no. 2 , p. 100 127 , Jun. 2023 , issn: 26672952 . doi: 10 .1016/j.hcc. 2023 . 100127 . [Online]. Available: https://linkinghub.elsevier.com/retrieve/pii/ S2667295223000259 (visited on 10/13/ 2023 ). A. A. Mercado-Velazquez , P. J. EscamillaAmbrosio , and F. Ortiz-Rodriguez , “A moving target defense strategy for internet of things cybersecurity , ” IEEE Access , vol. 9 , pp. 118 406 - 118 418, 2021 , issn: 2169 - 3536 . doi: 10 . 1109 / ACCESS . 2021 . 3107403 . [Online]. Available: https://ieeexplore.ieee.org/document/9521488/ (visited on 10/13/ 2023 ). Y. Ruan , P. Zhang , L. Alfantoukh, and A. Durresi , “ Measurement theory-based trust management framework for online social communities , ” ACM Transactions on Internet Technology , vol. 17 , no. 2 , pp. 1 - 24 , May 31, 2017 , issn: 1533 - 5399 , 1557 - 6051 . doi: 10 .1145/3015771. [Online]. Available: https: / / dl . acm . org / doi / 10 . 1145 / 3015771 (visited on 10/13/ 2023 ). Z. Yan , P. Zhang , and A. V. Vasilakos , “ A survey on trust management for internet of things , ” Journal of Network and Computer Applications , vol. 42 , pp. 120 - 134 , Jun. 2014 , issn: 10848045. doi: 10 . 1016 / j . jnca . 2014 . 01 . 014. [Online]. Available: https : / / linkinghub . elsevier. com / retrieve / pii / S1084804514000575 (visited on 10/13/ 2023 ). Halasz , “ Trust management in social internet of things across domains , ” Internet of Things , vol. 23 , p. 100 833 , Oct. 2023 , issn: 25426605. doi: 10 . 1016 / j . iot . 2023 . 100833 . [Online]. Available: https : / / linkinghub . elsevier. com / retrieve / pii / S2542660523001567 (visited on 10/13/ 2023 ). R. Kumar and R. Sharma , “ Leveraging blockchain for ensuring trust in IoT: A survey , ” Journal of King Saud University - Computer and Information Sciences, vol. 34 , no. 10 , pp. 8599 - 8622 , Nov. 2022 , issn: 13191578. doi: 10 .1016/j.jksuci. 2021 . 09 .004. com/retrieve/pii/S131915782100255X (visited on 10/13/ 2023 ). D. Chen , G. Chang , L. Jin , X. Ren , J. Li , and F. Li , “ A novel secure architecture for the internet of things ,” in 2011 Fifth International Conference on Genetic and Evolutionary Computing , Kitakyushu, Japan: IEEE, Aug. 2011 , pp. 311 - 314 , isbn: 978 - 1- 4577 -0817-6. doi: 10 . 1109 / ICGEC . 2011 . 77 . [Online]. Available: http://ieeexplore.ieee.org/ document/6042788/ (visited on 10/14/ 2023 ). I. Kounelis , G. Baldini, R. Neisse , G. Steri, M. Tallacchini , and A. Guimaraes Pereira , “ Building trust in the human?internet of things relationship , ” IEEE Technology and Society Magazine , vol. 33 , no. 4 , pp. 73 - 80 , 2014 , issn: 0278 - 0097 . doi: 10 . 1109 / MTS . 2014 . 2364020 . [Online]. Available: https : //ieeexplore.ieee.org/document/6969184 (visited on 10/14/ 2023 ). S.-C. Arseni , M. Mitoi , and A. Vulpe , “ Pass-IoT: A platform for studying security, privacy and trust in IoT,” in 2016 International Conference on Communications (COMM) , Bucharest, Romania: IEEE, Jun. 2016 , pp. 261 - 266 , isbn: 978 -1- 4673 -8197-0. doi: 10 . 1109 / ICComm . 2016 . 7528258 . [Online]. C. Fernandez-Gago , F. Moyano , and J. Lopez , “ Modelling trust dynamics in the internet of things,” Information Sciences , vol. 396 , pp. 72 - 82 , Aug. 2017 , issn: 00200255. doi: 10 .1016/j.ins. 2017 . 02 . 039 . [Online]. Available: https: / /linkinghub. elsevier.com/retrieve/pii/S0020025517305364 (visited on 10/14/ 2023 ). M. S. Haghighi , M. Ebrahimi , S. Garg , and A. Jolfaei , “ Intelligent trust-based public-key management for IoT by linking edge devices in a fog architecture , ” IEEE Internet of Things Journal , vol. 8 , no. 16 , pp. 12 716 - 12 723, Aug. 15 , 2021 , issn: 2327 - 4662 , 2372 - 2541 . doi: 10 .1109/JIOT. 2020 . 3027536 . [Online]. Available: https://ieeexplore.ieee.org/ document/9209045/ (visited on 10/14/ 2023 ). M. Ebrahimi , M. H. Tadayon , M. S. Haghighi , and A. Jolfaei , “ A quantitative comparative study of data-oriented trust management schemes in internet of things,” ACM Transactions on Management Information Systems , vol. 13 , no. 3 , pp. 1 - 30 , Sep. 30 , 2022 , issn: 2158 - 656X , 2158 - 6578 . doi: 10 . 1145 / 3476248. [Online]. Available: https : / / dl . acm . org / doi / 10 . 1145 / 3476248 (visited on 10/13/ 2023 ). W. Alnumay , U. Ghosh , and P. Chatterjee , “ A trust-based predictive model for mobile ad hoc network in internet of things,” Sensors , vol. 19 , no. 6 , p. 1467 , Mar . 26 , 2019 , issn: 1424 - 8220 . doi: 10 . 3390 / s19061467. [Online]. Available: https : //www.mdpi.com/1424- 8220/19/6/1467 (visited on 10/14/ 2023 ). S. Sagar , A. Mahmood , Q. Z. Sheng , and S. A. Siddiqui , “SCaRT-SIoT: Towards a scalable and robust trust platform for social internet of things: Demo abstract ,” in Proceedings of the 18th Conference on Embedded Networked Sensor Systems, Virtual Event Japan: ACM, Nov. 16 , 2020 , pp. 635 - 636 , isbn: 978 -1- 4503 -7590-0. doi: 10 . 1145 / 3384419 . 3430434. [Online]. Available: https : / / dl . acm . org / doi / 10 . 1145 / 3384419 . 3430434 (visited on 10/13/ 2023 ). [17] J. An , X. Gui , W. Zhang , J. Jiang, and J . Yang , “ Research on social relations cognitive model of mobile nodes in internet of things , ” Journal of Network and Computer Applications , vol. 36 , no. 2 , pp. 799 - 810 , Mar. 2013 , issn: 10848045. doi: 10. 1016 / j . jnca . 2012 . 12 . 004. [Online]. Available: https : / / linkinghub . elsevier. com / retrieve / pii / [24] S1084804512002512 (visited on 10/14/ 2023 ). [22] A. Meena Kowshalya and M. Valarmathi , “ Trust management for reliable decision making among R. M.S ., S. Pattar , R. Buyya , V. K.R., S. Iyengar , and social objects in the social internet of things ,” IET L. Patnaik, “ Social internet of things (SIoT): Foun- Networks , vol. 6 , no. 4 , pp. 75 - 80 , Jul. 2017 , issn: dations, thrust areas, systematic review and future 2047 - 4954 , 2047 - 4962 . doi: 10 .1049/iet-net. 2017 . directions,” Computer Communications , vol. 139 , 0021 . [Online]. Available: https://onlinelibrary. pp. 32 - 57 , May 2019 , issn: 01403664. doi: 10 . wiley.com/doi/10.1049/iet-net. 2017 . 0021 (visited 1016 / j . comcom . 2019 . 03 . 009. [Online]. Avail- on 10/14/ 2023 ). able: https://linkinghub.elsevier.com/retrieve/pii/ [23] S. Wang , H. Shi , Q. Hu , B. Lin , and X. Cheng, “MovS0140366418307655 (visited on 10/14/ 2023 ). ing target defense for internet of things based on the zero-determinant theory , ” IEEE Internet of Things Journal , vol. 7 , no. 1 , pp. 661 - 668 , Jan. 2020, issn: 2327 - 4662 , 2372 - 2541 . doi: 10 . 1109 / JIOT . 2019 . 2943151 . [Online]. Available: https : //ieeexplore.ieee.org/document/8847365/ (visited on 10/13/ 2023 ). Toutain , and G. Z. Papadopoulos , “ MTD, where art thou? a systematic review of moving target defense techniques for IoT,” IEEE Internet of Things Journal , vol. 8 , no. 10 , pp. 7818 - 7832 , May 15, 2021 , issn: 2327 - 4662 , 2372 - 2541 . doi: 10 . 1109 / JIOT . 2020 . 3040358 . [Online]. Available: https : //ieeexplore.ieee.org/document/9270287/ (visited on 10/13/ 2023 ). M. Ge , J.-H. Cho , D. Kim , G. Dixit, and I.-R. Chen , “ Proactive defense for internet-of-things: Moving target defense with cyberdeception , ” ACM Transactions on Internet Technology , vol. 22 , no. 1 , pp. 1 - 31 , Feb. 28 , 2022 , issn: 1533 - 5399 , 1557 - 6051 . doi: 10 . 1145 / 3467021. [Online]. Available: https : / / dl . acm . org / doi / 10 . 1145 / 3467021 (visited on 10/13/ 2023 ). [18] [19] P. Kochovski , S. Gec , V. Stankovski , M. Bajec , and P. D. Drobintsev , “ Trust management in a blockchain based fog computing platform with trustless smart oracles,” Future Generation Computer Systems , vol. 101 , pp. 747 - 759 , Dec. 2019 , issn: 0167739X. doi: 10 .1016/j.future. 2019 . 07 .030. com/retrieve/pii/S0167739X19301281 (visited on 10/14/ 2023 ). [25] H. Taneja and S. Kaur , “ Fake feedback detection to enhance trust in cloud using supervised machine learning techniques ,” in Proceedings of Data Analytics and Management , D. Gupta , Z. Polkowski , A. Khanna , S. Bhattacharyya , and O. Castillo , Eds., vol. 91 , Series Title : Lecture Notes on Data Engineering and Communications Technologies , Sin- [26] gapore: Springer Singapore, 2022 , pp. 789 - 796 , isbn: 9789811662843 9789811662850 . doi: 10 .1007/ 978 -981-16-6285-0_ 61 . [Online]. Available: https: //link.springer.com/10.1007/ 978 - 981- 16- 6285- 0_61 (visited on 10/14/ 2023 ). R. E. Navas , H. Sandaker , F. Cuppens , N. Cuppens , L. Toutain , and G. Z. Papadopoulos , “ IANVS: A moving target defense framework for a resilient internet of things ,” in 2020 IEEE Symposium on Computers and Communications (ISCC) , Rennes, France: IEEE, Jul. 2020 , pp. 1 - 6 , isbn: 978 -1- 72818 - [20] S. Wang , Y. Hu , and G. Qi, “ Blockchain and deep 086-1 . doi: 10 . 1109 / ISCC50000 . 2020 . 9219728 . learning based trust management for internet of [Online] . Available: https://ieeexplore.ieee.org/ vehicles,” Simulation Modelling Practice and The- document/9219728/ (visited on 10/14/ 2023 ). ory , vol. 120 , p. 102 627 , Nov. 2022 , issn: 1569190X. [27] J.-H. Cho , D. P. Sharma , H. Alavizadeh , et al., doi: 10 .1016/j.simpat. 2022 . 102627 . [Online]. Avail- “ Toward proactive, adaptive defense: A survey able : https://linkinghub.elsevier.com/retrieve/pii/ on moving target defense, ” IEEE Communications S1569190X22001034 (visited on 10/14/ 2023 ). Surveys & Tutorials , vol. 22 , no. 1 , pp. 709 - 745 , [21] S. Alam , S. Zardari , S. Noor , S. Ahmed , and H. 2020 , issn: 1553 - 877X , 2373 - 745X . doi: 10 .1109/ Mouratidis, “ Trust management in social internet COMST . 2019 . 2963791 . [Online]. Available: https: of things (SIoT): A survey,” IEEE Access , vol. 10 , //ieeexplore.ieee.org/document/8949517/ (visited pp. 108 924 - 108 954, 2022 , issn: 2169 - 3536 . doi: 10. on 10/13/ 2023 ). K. Zeitz , M. Cantrell , R. Marchany , and J. Tront , “ Changing the game: A micro moving target IPv6 defense for the internet of things,” IEEE Wireless Communications Letters , vol. 7 , no. 4 , pp. 578 - 581 , Aug. 2018 , issn: 2162 - 2337 , 2162 - 2345 . doi: 10 .1109/LWC. 2018 . 2797916 . [Online]. Available: https://ieeexplore.ieee.org/document/8269320/ (visited on 10/14/ 2023 ). A. Almohaimeed , S. Gampa , and G. Singh, “ Privacy-preserving IoT devices,” in 2019 IEEE Long Island Systems , Applications and Technology Conference (LISAT), Farmingdale, NY , USA: IEEE, May 2019 , pp. 1 - 5 , isbn: 978 -1- 72812 -100-0. doi: 10 .1109/LISAT. 2019 . 8817349 . [Online]. Available: https://ieeexplore.ieee.org/document/8817349/ (visited on 10/14/ 2023 ). M. Kahla , M. Azab , and A. Mansour , “Secure, resilient, and self-configuring fog architecture for untrustworthy IoT environments ,” in 2018 17th IEEE International Conference On Trust, Security And Privacy In Computing And Communications/ 12th IEEE International Conference On Big Data Science And Engineering (TrustCom/BigDataSE), New York, NY, USA: IEEE, Aug. 2018 , pp. 49 - 54 , isbn: 978 -1- 5386 -4388-4. doi: 10 .1109/TrustCom/ BigDataSE. 2018 . 00018 . [Online]. Available: https: //ieeexplore.ieee.org/document/8455886/ (visited on 10/14/ 2023 ).