{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T10:55:15Z","timestamp":1780052115580,"version":"3.53.1"},"reference-count":50,"publisher":"MDPI AG","issue":"17","license":[{"start":{"date-parts":[[2023,8,30]],"date-time":"2023-08-30T00:00:00Z","timestamp":1693353600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Ministry of Science and ICT","award":["IITP-2021-0-02051"],"award-info":[{"award-number":["IITP-2021-0-02051"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>The trustworthiness of a system is not just about proving the identity or integrity of the hardware but also extends to the data, control, and management planes of communication between devices and the software they are running. This trust in data and device integrity is desirable for Internet of Things (IoT) systems, especially in critical environments. In this study, we developed a security framework, IoTAttest, for building IoT systems that leverage the Trusted Platform Module 2.0 and remote attestation technologies to enable the establishment of IoT devices\u2019 collected data and control plan traffic integrity. After presenting the features and reference architecture of IoTAttest, we evaluated the privacy preservation and validity through the implementation of two proof-of-concept IoT applications that were designed by two teams of university students based on the reference architecture. After the development, the developers answered open questions regarding their experience and perceptions of the framework\u2019s usability, limitations, scalability, extensibility, potential, and security. The results indicate that IoTAttest can be used to develop IoT systems with effective attestation to achieve device and data integrity. The proof-of-concept solutions\u2019 outcomes illustrate the functionalities and performance of the IoT framework. The feedback from the proof-of-concept developers affirms that they perceived the framework as usable, scalable, extensible, and secure.<\/jats:p>","DOI":"10.3390\/s23177532","type":"journal-article","created":{"date-parts":[[2023,8,30]],"date-time":"2023-08-30T10:30:52Z","timestamp":1693391452000},"page":"7532","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":10,"title":["A Security Framework for Increasing Data and Device Integrity in Internet of Things Systems"],"prefix":"10.3390","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4851-5711","authenticated-orcid":false,"given":"Amir","family":"Dirin","sequence":"first","affiliation":[{"name":"Department of ICT, Metropolia University of Applied Sciences, 00920 Helsinki, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ian","family":"Oliver","sequence":"additional","affiliation":[{"name":"Nokia Bell Labs, 02610 Espoo, Finland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5966-992X","authenticated-orcid":false,"given":"Teemu H.","family":"Laine","sequence":"additional","affiliation":[{"name":"Department of Digital Media, Ajou University, Suwon 16499, Republic of Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2023,8,30]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.ceh.2020.02.001","article-title":"Prospect and Application of Internet of Things Technology for Prevention of SARIs","volume":"3","author":"Song","year":"2020","journal-title":"Clin. eHealth"},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Khan, N.R., Rabbi, M., Al Zabir, K., Dewri, K., Sultana, S.A., and Lippert, K.J. (2022, January 28\u201329). Internet of Things-Based Educational Paradigm for Best Learning Outcomes. Proceedings of the 2022 International Conference on Advances in Computing, Communication and Applied Informatics (ACCAI), Chennai, India.","DOI":"10.1109\/ACCAI53970.2022.9752569"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"66","DOI":"10.1109\/MCE.2017.2755219","article-title":"Internet of Things-Based Consumer Electronics: Reviewing Existing Consumer Electronic Devices Systems, Platforms Exploring New Research Paradigms","volume":"7","author":"Thapliyal","year":"2018","journal-title":"IEEE Consumer Electron. Mag."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"107174","DOI":"10.1016\/j.cie.2021.107174","article-title":"The Evolution of the Internet of Things (IoT) over the Past 20 Years","volume":"155","author":"Wang","year":"2021","journal-title":"Comput. Ind. Eng."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Reilly, E., Maloney, M., Siegel, M., and Falco, G. (2019, January 27). An IoT Integrity-First Communication Protocol via an Ethereum Blockchain Light Client. Proceedings of the 2019 IEEE\/ACM 1st International Workshop on Software Engineering Research & Practices for the Internet of Things (SERP4IoT), Montreal, QC, Canada.","DOI":"10.1109\/SERP4IoT.2019.00016"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"283","DOI":"10.1016\/j.comnet.2018.11.025","article-title":"Current Research on Internet of Things (IoT) Security: A Survey","volume":"148","author":"Hassan","year":"2019","journal-title":"Comput. Netw."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Bertino, E. (2016, January 5\u20138). Data Privacy for IoT Systems: Concepts, Approaches, and Research Directions. Proceedings of the 2016 IEEE International Conference on Big Data (Big Data), Washington, DC, USA.","DOI":"10.1109\/BigData.2016.7841030"},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"163","DOI":"10.3390\/iot2010009","article-title":"Cyber Threats to Industrial IoT: A Survey on Attacks and Countermeasures","volume":"2","author":"Tsiknas","year":"2021","journal-title":"IoT"},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Nebbione, G., and Calzarossa, M.C. (2020). Security of IoT Application Layer Protocols: Challenges and Findings. Future Internet, 12.","DOI":"10.3390\/fi12030055"},{"key":"ref_10","unstructured":"(2023, July 14). ISO Information Technology\u2014Trusted Platform Module Library\u2014Part 1: Architecture. Available online: https:\/\/trustedcomputinggroup.org\/wp-content\/uploads\/TPM-Rev-2.0-Part-1-Architecture-01.16.pdf."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"32","DOI":"10.1145\/3457175.3457181","article-title":"What Do Information Centric Networks, Trusted Execution Environments, and Digital Watermarking Have to Do with Privacy, the Data Economy, and Their Future?","volume":"51","author":"Laoutaris","year":"2021","journal-title":"SIGCOMM Comput. Commun. Rev."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Anderson, R. (2020). Security Engineering: A Guide to Building Dependable Distributed Systems, John Wiley and Sons. [3rd ed.].","DOI":"10.1002\/9781119644682"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"80","DOI":"10.1109\/MSECP.2004.1281254","article-title":"Software Security","volume":"2","author":"Mcgraw","year":"2004","journal-title":"IEEE Secur. Privacy Mag."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Xu, T., Wendt, J.B., and Potkonjak, M. (2014, January 2\u20136). Security of IoT Systems: Design Challenges and Opportunities. Proceedings of the 2014 IEEE\/ACM International Conference on Computer-Aided Design (ICCAD), San Jose, CA, USA.","DOI":"10.1109\/ICCAD.2014.7001385"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Hiromoto, R.E., Haney, M., and Vakanski, A. (2017, January 21\u201323). A Secure Architecture for IoT with Supply Chain Risk Management. Proceedings of the 2017 9th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS), Bucharest, Romania.","DOI":"10.1109\/IDAACS.2017.8095118"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"27","DOI":"10.1109\/MITP.2017.3680960","article-title":"Authentication and Authorization for the Internet of Things","volume":"19","author":"Kim","year":"2017","journal-title":"IT Prof."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Mehmood, M.S., Shahid, M.R., Jamil, A., Ashraf, R., Mahmood, T., and Mehmood, A. (2019, January 16\u201317). A Comprehensive Literature Review of Data Encryption Techniques in Cloud Computing and IoT Environment. Proceedings of the 2019 8th International Conference on Information and Communication Technologies (ICICT), Karachi, Pakistan.","DOI":"10.1109\/ICICT47744.2019.9001945"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Shahzad, K., Zia, T., and Qazi, E.-H. (2022). A Review of Functional Encryption in IoT Applications. Sensors, 22.","DOI":"10.3390\/s22197567"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"8269","DOI":"10.1109\/JIOT.2022.3154039","article-title":"A Survey on Attribute-Based Encryption Schemes Suitable for the Internet of Things","volume":"9","author":"Rasori","year":"2022","journal-title":"IEEE Internet Things J."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Siddiqui, S.T., Ahmad, M.O., Khamruddin, M., Gupta, A.K., and Singha, A.K. (2022, January 25\u201327). Blockchain and IoT for Educational Certificates Generation and Verification. Proceedings of the 2022 2nd International Conference on Computing and Information Technology (ICCIT), Tabuk, Saudi Arabia.","DOI":"10.1109\/ICCIT52419.2022.9711656"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Singh, A.K., and Kushwaha, N. (2021, January 21\u201324). Software and Hardware Security of IoT. Proceedings of the 2021 IEEE International IOT, Electronics and Mechatronics Conference (IEMTRONICS), Toronto, ON, Canada.","DOI":"10.1109\/IEMTRONICS52119.2021.9422651"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"395","DOI":"10.1007\/978-981-15-5566-4_34","article-title":"Blockchain Technology: Consensus Protocol Proof of Work and Proof of Stake","volume":"Volume 1172","author":"Dash","year":"2021","journal-title":"Intelligent Computing and Applications"},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"840","DOI":"10.1016\/j.promfg.2019.02.292","article-title":"A Real-Time Intrusion Detection System for Wormhole Attack in the RPL Based Internet of Things","volume":"32","author":"Sonavane","year":"2019","journal-title":"Procedia Manuf."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"25","DOI":"10.1016\/j.jnca.2017.02.009","article-title":"A Survey of Intrusion Detection in Internet of Things","volume":"84","author":"Miani","year":"2017","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Zahra, A., and Shah, M.A. (2017, January 7\u20138). IoT Based Ransomware Growth Rate Evaluation and Detection Using Command and Control Blacklisting. Proceedings of the 2017 23rd International Conference on Automation and Computing (ICAC), Huddersfield, UK.","DOI":"10.23919\/IConAC.2017.8082013"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Duangphasuk, S., Duangphasuk, P., and Thammarat, C. (2020, January 24\u201327). Review of Internet of Things (IoT): Security Issue and Solution. Proceedings of the 2020 17th International Conference on Electrical Engineering\/Electronics, Computer, Telecommunications and Information Technology (ECTI-CON), Phuket, Thailand.","DOI":"10.1109\/ECTI-CON49241.2020.9157904"},{"key":"ref_27","unstructured":"Piskozub, A. (2002, January 18\u201323). Denial of Service and Distributed Denial of Service Attacks. Proceedings of the Modern Problems of Radio Engineering, Telecommunications and Computer Science (IEEE Cat. No.02EX542), Lviv-Slavsko, Ukraine."},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"4319","DOI":"10.1109\/TII.2022.3141408","article-title":"Physical Security and Safety of IoT Equipment: A Survey of Recent Advances and Opportunities","volume":"18","author":"Yang","year":"2022","journal-title":"IEEE Trans. Ind. Inf."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"67809","DOI":"10.1109\/ACCESS.2018.2878995","article-title":"A Remote Attestation Security Model Based on Privacy-Preserving Blockchain for V2X","volume":"6","author":"Xu","year":"2018","journal-title":"IEEE Access"},{"key":"ref_30","unstructured":"Larsen, B., Giannetsos, T., Krontiris, I., and Goldman, K. (July, January 28). Direct Anonymous Attestation on the Road: Efficient and Privacy-Preserving Revocation in C-ITS. Proceedings of the 14th ACM Conference on Security and Privacy in Wireless and Mobile Networks, Abu Dhabi, United Arab Emirates."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"8317","DOI":"10.1109\/JSEN.2019.2919508","article-title":"Scalable and Forward Secure Network Attestation with Privacy-Preserving in Cloud-Assisted Internet of Things","volume":"19","author":"Xiong","year":"2019","journal-title":"IEEE Sensors J."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"2103","DOI":"10.1109\/JIOT.2018.2869847","article-title":"Internet of Things (IoT) Cybersecurity Research: A Review of Current Research Topics","volume":"6","author":"Lu","year":"2019","journal-title":"IEEE Internet Things J."},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Loi, F., Sivanathan, A., Gharakheili, H.H., Radford, A., and Sivaraman, V. (2017, January 3). Systematically Evaluating Security and Privacy for Consumer IoT Devices. Proceedings of the 2017 Workshop on Internet of Things Security and Privacy, Dallas, TX, USA.","DOI":"10.1145\/3139937.3139938"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"T\u00e4rneberg, W., Chandrasekaran, V., and Humphrey, M. (2016, January 6\u20139). Experiences Creating a Framework for Smart Traffic Control Using AWS IOT. Proceedings of the 9th International Conference on Utility and Cloud Computing, Shanghai, China.","DOI":"10.1145\/2996890.2996911"},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Jukic, O., Speh, I., and Hedi, I. (2018, January 21\u201325). Cloud-Based Services for the Internet of Things. Proceedings of the 2018 41st International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO), Opatija, Croatia.","DOI":"10.23919\/MIPRO.2018.8400071"},{"key":"ref_36","unstructured":"Arm Limited (2023, August 25). Mbed\u2014Free Open Source IoT OS and Development Tools for Arm. Available online: https:\/\/os.mbed.com\/."},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"361","DOI":"10.1108\/IJLSS-12-2013-0057","article-title":"Validity and Reliability of Lean Manufacturing Frameworks: An Empirical Study in Indian Manufacturing Industries","volume":"5","author":"Jasti","year":"2014","journal-title":"Int. J. Lean Six Sigma"},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"1419","DOI":"10.1109\/TNSM.2019.2948764","article-title":"An NFV-Based Service Framework for IoT Applications in Edge Computing Environments","volume":"16","author":"Shih","year":"2019","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"518","DOI":"10.1109\/JIOT.2019.2951106","article-title":"An IoT-Based Thermal Model Learning Framework for Smart Buildings","volume":"7","author":"Zhang","year":"2020","journal-title":"IEEE Internet Things J."},{"key":"ref_40","unstructured":"Jobin, C., Le Masson, P., and Hooge, S. (2020, January 3\u20135). What Does the Proof-of-Concept (POC) Really Prove? A Historical Perspective and a Cross-Domain Analytical Study. Proceedings of the XXIXe Conf\u00e9rence Internationale de Management Strat\u00e9gique, Online."},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"7185827","DOI":"10.1155\/2021\/7185827","article-title":"PoC Design: A Methodology for Proof-of-Concept (PoC) Development on Internet of Things Connected Dynamic Environments","volume":"2021","author":"Prasanna","year":"2021","journal-title":"Secur. Commun. Netw."},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"64","DOI":"10.1016\/j.mfglet.2018.02.006","article-title":"Digital Twin\u2014Proof of Concept","volume":"15","author":"Haag","year":"2018","journal-title":"Manuf. Lett."},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Akbar, S.R., Amron, K., Mulya, H., and Hanifah, S. (2017, January 24\u201325). Message Queue Telemetry Transport Protocols Implementation for Wireless Sensor Networks Communication\u2014A Performance Review. Proceedings of the 2017 International Conference on Sustainable Information Engineering and Technology (SIET), Malang, Indonesia.","DOI":"10.1109\/SIET.2017.8304118"},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Abera, T., Asokan, N., Davi, L., Koushanfar, F., Paverd, A., Sadeghi, A.-R., and Tsudik, G. (2016, January 5\u20139). Invited\u2014Things, Trouble, Trust: On Building Trust in IoT Systems. Proceedings of the 53rd Annual Design Automation Conference, Austin, TX, USA.","DOI":"10.1145\/2897937.2905020"},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Brown, S., and Sreenan, C.J. (2007, January 8\u201311). A Study on Data Aggregation and Reliability in Managing Wireless Sensor Networks. Proceedings of the 2007 IEEE Internatonal Conference on Mobile Adhoc and Sensor Systems, Pisa, Italy.","DOI":"10.1109\/MOBHOC.2007.4428743"},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"1276","DOI":"10.1109\/TLA.2018.8362168","article-title":"SOSFul: Sensor Observation Service (SOS) for Internet of Things (IoT)","volume":"16","author":"Pradilla","year":"2018","journal-title":"IEEE Latin Am. Trans."},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"352","DOI":"10.1007\/978-3-030-58923-3_23","article-title":"A Comparison of MQTT Brokers for Distributed IoT Edge Computing","volume":"Volume 12292","author":"Jansen","year":"2020","journal-title":"Software Architecture"},{"key":"ref_48","doi-asserted-by":"crossref","unstructured":"Abera, T., Bahmani, R., Brasser, F., Ibrahim, A., Sadeghi, A.-R., and Schunter, M. (2019, January 24\u201327). DIAT: Data Integrity Attestation for Resilient Collaboration of Autonomous Systems. Proceedings of the 2019 Network and Distributed System Security Symposium, San Diego, CA, USA.","DOI":"10.14722\/ndss.2019.23420"},{"key":"ref_49","doi-asserted-by":"crossref","first-page":"46430","DOI":"10.1109\/ACCESS.2021.3067697","article-title":"CRAFT: A Continuous Remote Attestation Framework for IoT","volume":"9","author":"Moreau","year":"2021","journal-title":"IEEE Access"},{"key":"ref_50","doi-asserted-by":"crossref","unstructured":"Ibrahim, A., Sadeghi, A.-R., and Tsudik, G. (2018, January 2\u20135). US-AID: Unattended Scalable Attestation of IoT Devices. Proceedings of the 2018 IEEE 37th Symposium on Reliable Distributed Systems (SRDS), Salvador, Brazil.","DOI":"10.1109\/SRDS.2018.00013"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/17\/7532\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T20:43:01Z","timestamp":1760128981000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/17\/7532"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,8,30]]},"references-count":50,"journal-issue":{"issue":"17","published-online":{"date-parts":[[2023,9]]}},"alternative-id":["s23177532"],"URL":"https:\/\/doi.org\/10.3390\/s23177532","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,8,30]]}}}