Searcharxiv⌕ Search

arXiv subjects

Gürkan Gür

Publications and source records attributed to Gürkan Gür.

7 recordsLinked to original sources

Trust in Edge-Enabled IoT Security: Features, Challenges and Research Directions

Providing autonomous intelligence, pervasive connectivity and usability to human life and industry has led to the emergence of the Internet of Things (IoT). To support time-sensitive and resource-constrained applications, IoT systems nowadays increasingly rely on edge computing. This brings computation and decision-making closer to end devices. In edge-enabled IoT architecture, latency and communication overhead are reduced, but interactions among a larger and more diverse set of devices, edge nodes, services, and data sources are introduced as well. In such environments, security and privacy mechanisms provide the foundation for protection, while trust management can assess the reliability of interacting entities and adapting secure decisions. In this paper, we systematically review the current state of trust management in edge-enabled IoT. To this end, we propose a comprehensive taxonomy that maps physical, network, and application architectural IoT layers against the consumer, commercial, industrial, and infrastructure IoT domains. We further investigate state-of-art research based on their trust design, how trust integrated into secure IoT operations, the attacks that effect trust management process. Based on these findings, we identify key gaps in current research and outline future directions for context-aware and adaptive trust management in edge-enabled IoT.

cs.CR↗

Privacy-Preserving and Secure Spectrum Sharing for Database-Driven Cognitive Radio Networks

Database-driven cognitive radio networks (DB-CRNs) enable dynamic spectrum sharing through geolocation databases but introduce critical security and privacy challenges, including mandatory location disclosure, susceptibility to location spoofing, and denial-of-service (DoS) attacks on centralized services. Existing approaches address these issues in isolation and lack a unified, regulation-compliant solution under realistic adversarial conditions. In this work, we present a unified security framework for DB-CRNs that simultaneously provides location privacy, user anonymity, verifiable location, and DoS resilience. Our framework, denoted as SLAPX, enables privacy-preserving spectrum queries using delegatable anonymous credentials, supports adaptive location verification without revealing precise user location, and mitigates DoS attacks through verifiable delay functions (VDFs) combined with RLRS-based rate limiting. Extensive cryptographic benchmarking and network simulations demonstrate that SLAPX achieves significantly lower latency and communication overhead than existing solutions while effectively resisting location spoofing and DoS attacks. These results show that SLAPX is practical and well-suited for secure next-generation DB-CRN deployments.

cs.CR↗

Securing Satellite Link Segment: A Secure-by-Component Design

The rapid evolution of communication technologies, compounded by recent geopolitical events such as the Viasat cyberattack in February 2022, has highlighted the urgent need for fast and reliable satellite missions for military and civil security operations. Consequently, this paper examines two Earth observation (EO) missions: one utilizing a single low Earth orbit (LEO) satellite and another through a network of LEO satellites, employing a secure-by-component design strategy. This approach begins by defining the scope of technical security engineering, decomposing the system into components and data flows, and enumerating attack surfaces. Then it proceeds by identifying threats to low-level components, applying secure-by-design principles, redesigning components into secure blocks in alignment with the Space Attack Research & Tactic Analysis (SPARTA) framework, and crafting shall statements to refactor the system design, with a particular focus on improving the security of the link segment.

cs.CR↗

Energy Prioritized Caching for Cellular D2D Networks

Multimedia content transmission heavily taxes network resources and puts a significant burden on wireless systems in terms of capacity and energy consumption. In this context, device-to-device (D2D) paradigm has a utilitarian value to alleviate the network burden by utilizing short-range transmissions with less energy cost. For the realization of proper D2D networking, caching in devices is essential. Additionally, caching needs to operate efficiently with the aim of realizing network-wide energy improvements. To this end, we study multimedia caching in cellular D2D networks and propose an energy prioritized D2D caching (EPDC) algorithm in this work. We also investigate the optimal caching policy in that system setting. The impact of device capacity and D2D transmission range on energy consumption is studied by focusing on different operation modes such as D2D and base station transmissions. According to the simulation results, EPDC algorithm has substantial energy-efficiency gains over the commonly utilized Least Recently Used (LRU) algorithm and content-based caching algorithms PDC and SXO. For larger D2D transmission ranges, this improvement becomes more evident.

cs.NI↗

Analysis of Content-Oriented Heterogeneous Networks with D2D and Cognitive Communications

Content-oriented operation with D2D communications and spectrum sharing in the form of cognitive communications are expected to be enablers for cost-efficient nextgeneration wireless systems with bandwidth-hungry services. To this end, caching is an important building block of these systems. In this work, we model such a heterogeneous network and model a popularity-aware caching algorithm where we try to keep more popular contents in caches of system units with a higher probability compared to less popular contents. Moreover, for improving the usage of the channel capacity, overlaying for device-to-device (D2D) transmissions (unless these transmission interfere with each other) is enabled. We model our system with an analytical continuous time Markov chain (CTMC). We have a heterogeneous network architecture consisting of a LEO satellite, base station (BS) and a set of devices within the boundary of BS coverage that can get service from the satellite, from the BS or in D2D mode. Our devices operate in primary mode when they get service from the satellite but in secondary mode when they get service from the BS or some device in D2D mode over the terrestrial link. We evaluate our system for energy efficiency (EE) and goodput metrics. We looked how popularity-aware caching, integration of universal source concept and overlaying in D2D mode affect the network performance. Besides, we investigate how resource allocation (RA) and performance metrics are tangled.

cs.NI↗

The Future is Unlicensed: Coexistence in the Unlicensed Spectrum for 5G

5G has to fulfill the requirements of ultra-dense, scalable, and customizable networks such as IoT while increasing spectrum and energy efficiency. Given the diversity of envisaged applications and scenarios, one crucial property for 5G New Radio (NR) is flexibility: flexible UL/DL allocation, bandwidths, or scalable transmission time interval, and most importantly operation at different frequency bands. In particular, 5G should exploit the spectral opportunities in the unlicensed spectrum for expanding network capacity when and where needed. However, unlicensed bands pose the challenge of "coexisting networks", which mostly lack the means of communication for negotiation and coordination. This deficiency is further exacerbated by the heterogeneity, massive connectivity, and ubiquity of IoT systems and applications. Therefore, 5G needs to provide mechanisms to coexist and even converge in the unlicensed bands. In that regard, WiFi, as the most prominent wireless technology in the unlicensed bands, is both a key enabler for boosting 5G capacity and competitor of 5G cellular networks for the shared unlicensed spectrum. In this work, we describe spectrum sharing in 5G and present key coexistence solutions, mostly in the context of WiFi. We also highlight the role of machine learning which is envisaged to be critical for reaching coexistence and convergence goals by providing the necessary intelligence and adaptation mechanisms.

cs.NI↗

Proceedings 2014 International Workshop on Advanced Intrusion Detection and Prevention

This volume contains the proceedings of the 2014 International Advanced Intrusion Detection and Prevention (AIDP'14) Workshop, held in Marrakesh, Morocco, on the 5th of June 2014, in conjunction with the 29th IFIP TC-11 SEC 2014 International Conference. It includes a revised version of the papers selected for presentation at the work- shop.

cs.CR↗