Building Management Systems (BMS) is a set of software and hardware tools that enables the monitoring and the control of building's mechanical and electrical equipment. These systems take advantage of Internet of Things (IoT) and Information Technology (IT) domains to efficiently enhance the buildings management. Blockchain technology is a new emerging technology that has attracted many researchers this last years. Basically, it has many applications in the field of cryptocur-rency, finance and insurances fields. However, these last years, blockchain has known other applications beyond cryptocurrency domain, such as the IoT. In this paper, we shed the light on one specific application of blockchain technology to assist the design of efficient BMS. We propose an hierarchical architecture composed of IoT, fog and cloud layers where the blockchain is integrated on the different layers to enhance the security of the whole BMS systems. We show the main advantages of applying blockchain technology in BMS systems and how our architecture outperforms the existing architectures in terms of low latency, security and privacy.

Secure communication is one of the main challenges that are slowing down the development of the Internet of Things (IoT). Key Management (KM) is particularly a difficult security issue, mainly because of the lack of resources of the IoT devices. Most of the existing solutions do not consider the heterogeneous and dynamic nature of the IoT. They do not regard the difference in capability of its components and impose equal loads on them. Moreover, they store keys in device memories before deployment, which makes adding devices difficult afterwards. We propose a novel decentralized blockchain-based KM protocol for the IoT. Our solution balances the loads between nodes according to their capabilities. We prove that this makes it efficient and scalable. Furthermore, our solution securely rekey the network upon a change. To decentralize the KM, we use the blockchain technology and smart contracts. We show that the system continues to operate when an entity fails and that the compromise of an entity does not jeopardize the whole network. We also prove that our solution fulfills the IoT requirements in terms of security and performance. Finally, we propose an implementation on IoT platforms to validate our theoretical analysis and simulation results.

Due to the rapid evolution of smart devices, recently, the smart home (SH) sector has attracted attention and faced a fast expansion. However, the current cloud-based SH architecture and the ever-growth of the smart-things number and applications have brought several challenges to SH like the user-dependent automation tasks, the user-dependent SH management system, and the relatively large delay response time. These challenges create a gap between the actual SH and the envisioned autonomous SH that can control the SH objects independently and automate the home intelligently. Reducing this gap became the main target of the current SH research works. This paper builds on the network softwarization and virtualization techniques along with the edge, fog, and cloud computing to propose a three-layer Edge-Fog-Cloud SH (EFC-SH) intelligence architecture that can enable the autonomous SH. Then, it derives the optimal trade-off between the workload and the latency at each layer. Simulation results show that the proposed EFC-SH architecture achieves lower latency compared to the cloud-only or fog-only architectures.

The Internet of Things (IoT) is a network that integrates a variety of heterogeneous nodes, such as connected devices (sensors, robots, and smart phones...), connected cars, smart homes, etc. These smart objects communicate and collaborate in distributed and dynamic environments that are facing several security challenges. Trust management is one of the most important challenges in IoT. Existing trust management solutions do not meet the new requirements of IoT such as heterogeneity, mobility, and scalability. In this article, we propose a hierarchical and scalable blockchain-based trust management protocol with mobility support in massively distributed IoT systems. In our protocol, mobile smart objects disseminate trust information on service providers to the blockchain. Thus, all the objects will have a global view on each service provider in the architecture, which speeds up the trust evaluation process. In addition, our protocol is resilient against the most known malicious attacks such as bad-mouthing, ballot-stuffing, and cooperative attacks. We confirm the efficiency of our proposal through theoretical analysis and extensive simulations. Finally, we show that it outperforms existing solutions, especially in terms of scalability, mobility support, communication, and computation costs.

Vehicular Ad Hoc networks (VANETs) is a new emerging technology that aims at connecting vehicles using wireless communication technologies. With the emergence of VANETs, new advanced applications have emerged away which aim at enhancing driving safety and traffic management. These applications exploit the huge amount of data, shared between vehicles and infrastructure, through advanced data analysis. Due to resources limitation of vehicles, this increasing volume of data is stored on powerful edge computing servers spread over the VANETs infrastructure. However, these edge servers are not fully trusted, which rise new serious security and privacy challenges regarding the shared data between vehicles. In this work, we propose a new data-sharing scheme that protects the privacy of vehicles and drivers. We base our construction on consortium blockchain, smart contracts and Zero-Knowledge Proofs (ZKP) to propose a decentralized and anonymous data-sharing scheme. In addition, we propose a fine-grained data storage scheme on the top of blockchain, based on publish-subscribe model to enhance the data management. We confirm the efficiency of our scheme through extensive simulations and experiments. The numerical results showed that our protocol achieves a reasonable efficiency while guaranteeing a high level of security.

The Internet of Things (IoT) is an emerging technology that aims to extend connectivity to all everyday devices. One of the main challenges that are slowing down its development is how to secure the Device-to-Device communication. Among all the security issues, the Key Management (KM) is one of the most challenging. The difficulty lies in the fact that most of the IoT devices suffer from a lack of resources. Although different protocols were proposed, most of them do not consider the dynamic nature of the IoT. Other solutions rely on a centralized entity to distribute the new keys upon a change in the network. However, this entity becomes a single point of failure and the main target of attacks. We propose a novel blockchain-based decentralized KM protocol. In addition to being resilient, scalable and dynamic, our solution uses the blockchain technology to securely distribute the KM on several entities.

Fog computing is a new paradigm which extends cloud computing services into the edge of the network. Indeed, it aims to pool edge resources in order to deal with cloud's shortcomings such as latency problems. However, this proposal does not ensure the honesty and the good behavior of edge devices. Thus, security places itself as an important challenge in front of this new proposal. Authentication is the entry point of any security system, which makes it an important security service. Traditional authentication schemes endure latency issues and some of them do not satisfy fog-computing requirements such as mutual authentication between end devices and fog servers. Thus, new authentication protocols need to be implemented. In this paper, we propose a new efficient authentication scheme for fog computing architecture. Our scheme ensures mutual authentication and remedies to fog servers' misbehaviors. Moreover, fog servers need to hold only a couple of information to verify the authenticity of every user in the system. Thus, it provides a low overhead in terms of storage capacity. Finally, we show through experimentation the efficiency of our scheme.

Internet of Every things (IoE) is a network that integrates a variety of heterogeneous nodes, such as connected portable devices, connected cars, smart home appliances, humans, etc. to Internet. The constituents of IoE are heterogeneous, distributed by nature and also autonomous in most of cases, which meet the criteria of what we call Systems of Systems (SoS). These smart objects communicate and collaborate between each other in dynamic environments which are subject to several security attacks. In this paper, we propose a hierarchical based blockchain trust management architecture with mobility support in highly distributed IoE based Systems of Systems. This architecture deals efficiently with scalability issues. It allows smart objects to disseminate the trustworthiness of the service providers they interact with them to the blockchain. This later makes the access to this information possible from anywhere and ensures a global view of trustworthiness information. Thanks to the blockchain technology, our architecture outperforms the existing trust management solutions especially in terms of scalability and mobility support.

Internet of Things (IoT) is one of the promising technologies that has attracted a lot of attention in both industrial and academic fields these years. It aims to integrate seamlessly both physical and digital worlds in one single ecosystem that makes up a new intelligent era of Internet. This technology offers a huge business value for organizations and provides opportunities for many existing applications such as energy, healthcare and other sectors. However, as new emergent technology, IoT suffers from several security issues which are most challenging than those from other fields regarding its complex environment and resources-constrained IoT devices. A lot of researches have been initiated in order to provide efficient security solutions in IoT, particularly to address resources constraints and scalability issues. Furthermore, some technologies related to networking and cryptocurrency fields such as Software Defined Networking (SDN) and Blockchain are revolutionizing the world of the Internet of Things thanks to their efficiency and scalability. In this paper, we provide a comprehensive top down survey of the most recent proposed security and privacy solutions in IoT. We discuss particularly the benefits that new approaches such as blockchain and Software Defined Networking can bring to the security and the privacy in IoT in terms of flexibility and scalability. Finally, we give a general classification of existing solutions and comparison based on important parameters.

Global IP traffic is forecast to triple by 2020 to reach 2.3 ZB per year. Such an explosion will inevitably be the catalyst of Operator infrastructure transformation. In this context, SDN is the technology that is shaping the future of carriers' networks. It offers the opportunity to implement more powerful control algorithms. In this perspective, we put forward a SD-WAN architecture to enhance the network resources allocation and hence improve the QoS of distributed applications. The main idea is to take profit from the accurate network view provided by the controller to optimize the flows routing in WAN environments. To do so, we formulate the path computation problem as an Integer Linear Program by taking into consideration both network application requirements and the network occupation status. The problem is then resolved in a polynomial time leveraging the branch-and-cut algorithm. Results obtained based an experimental platform show that our ONOS SDN framework outperforms the most prominent related work solutions in terms of network consumption and applications satisfaction level.

The massive adoption of Cloud services has led to the explosion of traffic transiting over the Cloud infrastructure. Such an impressive evolution of data demand will inevitably be the catalyst of Operator infrastructure transformation. In this context, Software Defined Networking (SDN) is the technology that is shaping the future of carriers' networks. SDN considerably reduces the complexity of managing the network infrastructure while providing tremendous computational power compared to legacy devices. In this paper, we address the resource allocation issue in Wide Area Networks (WAN) while considering the requested QoS. To do so, we design an SD-WAN architecture to enhance the network resources allocation and hence improve the QoS of distributed applications. We formulate first the path computation problem as an Integer Linear Program while taking into consideration both network application requirements and the network occupation status. The problem is then resolved in a polynomial time leveraging the Branch-and-Cut algorithm. Results obtained with our experimental platform, show that the proposed SD-WAN framework outperforms the most prominent related solutions in terms of applications' satisfaction level and consumption of network's resources.

Internet of Things is a new emerging technology that promises a new era of Internet through encompassing seamlessly physical and digital worlds in one single intelligent ecosystem. This goal is achieved by interconnecting a large number of smart objects from the physical word such as smartphones, sensors, robots, connected cars, etc., to Internet. Nowadays, with the advent of Internet of Things, we need efficient mechanisms to remotely control IoT smart actuators by users and controllers using smartphones and IoT devices. This arises particularly in industrial Cyber-Physical Systems to supervise industrial processes. However, the complex environment of IoT systems makes this task very difficult to achieve regarding the number of connected objects and their resource limitation. In this paper, we tackle the problem of remote secure control of IoT actuators. We propose a distributed lightweight fine-grained access control based on Attribute Based Encryption mechanism and one way hash chain. We conducted security analysis and formal verification using AVISPA. The results demonstrated that our scheme is secure against various attacks. Moreover, the simulation results demonstrated the scalability and the efficiency of our solution, which saves substantially energy consumption and computation costs.