{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T01:52:52Z","timestamp":1760233972206,"version":"build-2065373602"},"reference-count":29,"publisher":"MDPI AG","issue":"6","license":[{"start":{"date-parts":[[2021,3,15]],"date-time":"2021-03-15T00:00:00Z","timestamp":1615766400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100010418","name":"Institute for Information and Communications Technology Promotion","doi-asserted-by":"publisher","award":["2019-0-00426"],"award-info":[{"award-number":["2019-0-00426"]}],"id":[{"id":"10.13039\/501100010418","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003725","name":"National Research Foundation of Korea","doi-asserted-by":"publisher","award":["NRF-2020R1A2C4002737"],"award-info":[{"award-number":["NRF-2020R1A2C4002737"]}],"id":[{"id":"10.13039\/501100003725","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>In an internet of things (IoT) platform with a copious number of IoT devices and active variation of operational purpose, IoT devices should be able to dynamically change their system images to play various roles. However, the employment of such features in an IoT platform is hindered by several factors. Firstly, the trivial file transfer protocol (TFTP), which is generally used for network boot, has major security vulnerabilities. Secondly, there is an excessive demand for the server during the network boot, since there are numerous IoT devices requesting system images according to the variation of their roles, which exerts a heavy network overhead on the server. To tackle these challenges, we propose a system termed FLEX-IoT. The proposed system maintains a FLEX-IoT orchestrater which uses an IoT platform operation schedule to flexibly operate the IoT devices in the platform. The IoT platform operation schedule contains the schedules of all the IoT devices on the platform, and the FLEX-IoT orchestrater employs this schedule to flexibly change the mode of system image transfer at each moment. FLEX-IoT consists of a secure TFTP service, which is fully compatible with the conventional TFTP, and a resource-efficient file transfer method (adaptive transfer) to streamline the system performance of the server. The proposed secure TFTP service comprises of a file access control and attacker deception technique. The file access control verifies the identity of the legitimate IoT devices based on the hash chain shared between the IoT device and the server. FLEX-IoT provides security to the TFTP for a flexible IoT platform and minimizes the response time for network boot requests based on adaptive transfer. The proposed system was found to significantly increase the attack-resistance of TFTP with little additional overhead. In addition, the simulation results show that the volume of transferred system images on the server decreased by 27% on average, when using the proposed system.<\/jats:p>","DOI":"10.3390\/s21062060","type":"journal-article","created":{"date-parts":[[2021,3,15]],"date-time":"2021-03-15T22:16:54Z","timestamp":1615846614000},"page":"2060","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["FLEX-IoT: Secure and Resource-Efficient Network Boot System for Flexible-IoT Platform"],"prefix":"10.3390","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3264-3601","authenticated-orcid":false,"given":"Keon-Ho","family":"Park","sequence":"first","affiliation":[{"name":"Department of Computer and Information Security, and Convergence Engineering for Intelligent Drone, Sejong University, Seoul 05006, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9660-2708","authenticated-orcid":false,"given":"Seong-Jin","family":"Kim","sequence":"additional","affiliation":[{"name":"Department of Computer and Information Security, and Convergence Engineering for Intelligent Drone, Sejong University, Seoul 05006, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7264-2446","authenticated-orcid":false,"given":"Joobeom","family":"Yun","sequence":"additional","affiliation":[{"name":"Department of Computer and Information Security, and Convergence Engineering for Intelligent Drone, Sejong University, Seoul 05006, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3096-0785","authenticated-orcid":false,"given":"Seung-Ho","family":"Lim","sequence":"additional","affiliation":[{"name":"Division of Computer Engineering, Hankuk University of Foreign Studies, Yongin 17035, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3377-223X","authenticated-orcid":false,"given":"Ki-Woong","family":"Park","sequence":"additional","affiliation":[{"name":"Department of Computer and Information Security, and Convergence Engineering for Intelligent Drone, Sejong University, Seoul 05006, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2021,3,15]]},"reference":[{"key":"ref_1","unstructured":"Hung, M. (2021, March 10). Leading the IoT. Technical Report, Gartner. Available online: https:\/\/www.gartner.com\/en\/documents\/3664326\/iot-s-challenges-and-opportunities-in-2017-a-gartner-tre."},{"key":"ref_2","unstructured":"Statista Research Department (2021, March 10). Internet of Things(IoT) Connected Devices Installed as Worldwide from 2015 to 2025. Available online: https:\/\/www.statista.com\/statistics\/471264\/iot-number-of-connected-devices-worldwide\/."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Mahmoud, R., Yousuf, T., Aloul, F., and Zualkernan, I. (2015, January 14\u201316). Internet of things (IoT) security: Current status, challenges and prospective measures. Proceedings of the 2015 10th International Conference for Internet Technology and Secured Transactions (ICITST), London, UK.","DOI":"10.1109\/ICITST.2015.7412116"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Patti, E., and Acquaviva, A. (2016, January 7\u20139). IoT platform for Smart Cities: Requirements and implementation case studies. Proceedings of the 2016 IEEE 2nd International Forum on Research and Technologies for Society and Industry Leveraging a Better Tomorrow (RTSI), Bologna, Italy.","DOI":"10.1109\/RTSI.2016.7740618"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Fortino, G., Savaglio, C., Palau, C.E., de Puga, J.S., Ganzha, M., Paprzycki, M., Montesinos, M., Liotta, A., and Llop, M. (2018). Towards multilayer interoperability of heterogeneous IoT platforms: The INTER-IoT approach. Integration, Interconnection, and Interoperability of IoT Systems, Springer.","DOI":"10.1007\/978-3-319-61300-0_10"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"89","DOI":"10.1016\/j.jnca.2019.01.013","article-title":"In-network context inference in IoT sensory environment for efficient network resource utilization","volume":"130","author":"Verma","year":"2019","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Ogawa, K., Sekine, H., Kanai, K., Nakamura, K., Kanemitsu, H., Katto, J., and Nakazato, H. (2019, January 17\u201321). Performance evaluations of iot device virtualization for efficient resource utilization. Proceedings of the 2019 Global IoT Summit (GIoTS), Aarhus, Denmark.","DOI":"10.1109\/GIOTS.2019.8766410"},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"82721","DOI":"10.1109\/ACCESS.2019.2924045","article-title":"A survey on IoT security: Application areas, security threats, and solution architectures","volume":"7","author":"Hassija","year":"2019","journal-title":"IEEE Access"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Zhang, Z.K., Cho, M.C.Y., Wang, C.W., Hsu, C.W., Chen, C.K., and Shieh, S. (2014, January 17\u201319). IoT security: Ongoing challenges and research opportunities. Proceedings of the 2014 IEEE 7th International Conference on Service-Oriented Computing and Applications, Matsue, Japan.","DOI":"10.1109\/SOCA.2014.58"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"48","DOI":"10.1016\/J.ENG.2016.01.014","article-title":"Insecurity by design: Today\u2019s IoT device security problem","volume":"2","year":"2016","journal-title":"Engineering"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Sollins, K. (1992). The TFTP Protocol (Revision 2), MIT. Technical Report, STD 33, RFC 1350.","DOI":"10.17487\/rfc1350"},{"key":"ref_12","unstructured":"Lear, E. (2021, March 10). Uniform Resource Identifier (URI) Scheme and Applicability Statement for the Trivial File Transfer Protocol (TFTP). Technical Report, RFC 3617. Available online: https:\/\/tools.ietf.org\/html\/rfc3617."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Isa, M.A.M., Mohamed, N.N., Hashim, H., Adnan, S.F.S., and Mahmod, R. (2012, January 3\u20134). A lightweight and secure TFTP protocol for smart environment. Proceedings of the 2012 International Symposium on Computer Applications and Industrial Electronics (ISCAIE), Kota Kinabalu, Malaysia.","DOI":"10.1109\/ISCAIE.2012.6482117"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"23","DOI":"10.4316\/AECE.2013.02004","article-title":"STFTP: Secure TFTP protocol for embedded multi-agent systems communication","volume":"13","author":"Horvat","year":"2013","journal-title":"Adv. Electr. Comput. Eng."},{"key":"ref_15","unstructured":"Park, K.H., and Park, K.W. (2019). RE-NetBoot: Resource-Efficient Network Boot for IoT Platform. Res. Briefs Inf. Commun. Technol. Evol. (ReBICTE)."},{"key":"ref_16","unstructured":"Isa, M.A.M., Hashim, H., Adnan, S.F.S., Manan, J.l.A., and Mahmod, R. (2014). A secure TFTP protocol with security proofs. arXiv."},{"key":"ref_17","unstructured":"Malkin, G., and Harkin, A. (2021, March 10). RFC2347: TFTP Option Extension. Available online: https:\/\/tools.ietf.org\/html\/rfc2347."},{"key":"ref_18","first-page":"98","article-title":"Symmetric encryption using pre-shared public parameters for a secure TFTP protocol","volume":"12","author":"Mohamed","year":"2017","journal-title":"J. Eng. Sci. Technol."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"511","DOI":"10.1007\/s11235-018-0522-5","article-title":"Extending hybrid approach to secure Trivial File Transfer Protocol in M2M communication: A comparative analysis","volume":"70","author":"Mohamed","year":"2019","journal-title":"Telecommun. Syst."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Shu, Z., and Yan, G. (2018, January 15). Ensuring deception consistency for ftp services hardened against advanced persistent threats. Proceedings of the 5th ACM Workshop on Moving Target Defense, Toronto, ON, USA.","DOI":"10.1145\/3268966.3268971"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Takada, S., Sato, A., Shinjo, Y., Nakai, H., Sugiki, A., and Itano, K. (2012, January 5\u20137). A p2p approach to scalable network-booting. Proceedings of the 2012 Third International Conference on Networking and Computing, Okinawa, Japan.","DOI":"10.1109\/ICNC.2012.38"},{"key":"ref_22","unstructured":"Hong, B., Plantenberg, D., Long, D.D., and Sivan-Zimet, M. (2021, March 10). Duplicate Data Elimination in a SAN File System. MSST. Available online: https:\/\/dblp.org\/rec\/conf\/mss\/HongPLS04."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"824","DOI":"10.1109\/TC.2010.263","article-title":"Efficient deduplication techniques for modern backup operation","volume":"60","author":"Min","year":"2010","journal-title":"IEEE Trans. Comput."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Muthitacharoen, A., Chen, B., and Mazieres, D. (2001, January 21\u201324). A low-bandwidth network file system. Proceedings of the Eighteenth ACM Symposium on Operating Systems Principles, Banff, AB, Canada.","DOI":"10.1145\/502034.502052"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Mandagere, N., Zhou, P., Smith, M.A., and Uttamchandani, S. (2008, January 1\u20135). Demystifying data deduplication. Proceedings of the ACM\/IFIP\/USENIX Middleware\u201908 Conference Companion, Leuven, Belgium.","DOI":"10.1145\/1462735.1462739"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"61","DOI":"10.1016\/j.jnca.2014.08.009","article-title":"Forwarder smart selection protocol for limitation of broadcast storm problem","volume":"47","author":"Vegni","year":"2015","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_27","unstructured":"OPC Foundation (2021, March 10). Unified Architecture. Available online: https:\/\/opcfoundation.org\/about\/opc-technologies\/opc-ua\/."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"39","DOI":"10.1145\/997150.997156","article-title":"A taxonomy of DDoS attack and DDoS defense mechanisms","volume":"34","author":"Mirkovic","year":"2004","journal-title":"ACM Sigcomm Comput. Commun. Rev."},{"key":"ref_29","unstructured":"Rescorla, E. (2021, March 10). Rfc2631: Diffie-Hellman Key Agreement Method. Available online: https:\/\/dl.acm.org\/doi\/10.17487\/RFC2631."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/6\/2060\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T05:36:03Z","timestamp":1760160963000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/21\/6\/2060"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,3,15]]},"references-count":29,"journal-issue":{"issue":"6","published-online":{"date-parts":[[2021,3]]}},"alternative-id":["s21062060"],"URL":"https:\/\/doi.org\/10.3390\/s21062060","relation":{},"ISSN":["1424-8220"],"issn-type":[{"type":"electronic","value":"1424-8220"}],"subject":[],"published":{"date-parts":[[2021,3,15]]}}}