IoTMAAC: Multiple Attribute Access Control for IoT environments Access Control is an important security service that should be considered in IoT environments in order to offer reliable IoT services. Access control in IoT environments concerns not only the access of IoT users to IoT services and objects, but also the access of IoT objects to IoT gateways. In this paper, we specify an access control mechanism that considers the access of IoT objects to IoT gateways in order to enhance the reliability of IoT data provided by the IoT objects. Our proposed access control mechanism, called IoTMAAC (Multi Attribute Access Control), allows retrieving requested data from the most reliable and secured IoT objects among the available objects in the IoT environments.

RRAC: Role based reputed access control method for mitigating malicious impact in intelligent IoT platforms Abstract   IoT Environment is a recent development in communication networks that supports a wide range of individual and cooperative user applications. Due to the openness of the service providing network, communication services are exposed to malicious risks. In this manuscript, a rolebased reputed access control (RRAC) method is designed to mitigate malicious attacks in IoT environments. The RRAC operates in two categories: providing an adaptive certificate authentication internally and trusted user communication externally. The internal security method is responsible for authenticating communication between users and resources. The external security feature aids secure service discovery and user selection for discovering services. The integrated security methods mitigate the influence of malicious users and forged resources in the network, improving communication reliability. The access control decides the availability and usability of the devices to participate in service communications either as a neighbor or as a resource. Experimental results show that the proposed RRAC improves the performance of IoT device communication by achieving higher detection and minimizing detection time, service overhead and loss, false positive rate and misdetection.