American Journal of Agricultural Science, Engineering and Technology ISSN: 2158-8104 (Online), 2164-0920 (Print), 2017, Volume 1 Issue 1 30 TRAFFIC CONTROL PATCHING AND SECURITY SOLUTION IN IOT Afridi Shahid1, Md. Alam Hossain1*, Nazmul Hossain1 ABSTRACT After connecting multiple devices to a network and possessing data analysis and excerpting, the IoT is awaited to contribute to the formation of new customer value. Critical infrastructure that gets into people’s lives and economic deeds will also become an area, in which way the IoT is used, so security measures for IoT systems are very important. On the other hand, a dramatic increase in the number of connected devices will create technical problems such as attacks with a broader scope of influence and attacks that last longer. So, a shortage of security operations administrators will also be a problem. The internet of things refers to a way of connecting objects to the Internet for the purpose of intelligent control and management. The objects are sensed through RFID (Radio-frequency identification) or sensors achieving the integration of human society and the information system. RFID is the core technology to implement the internet of things. So the security issue of RFID is becoming more and more important, in the past decade, a large number of research papers dealing with security issues of RFID technology have appeared. This paper deals with the security of data of RFID as IoT devices and defence against malware attacks, and DDoS attacks in IoT systems. Keywords: Security, Privacy, Cryptographic Hardware, IoT, System on Chip, Embedded Systems, RFID 1 Department of Computer Science and Engineering, Jashore University of Science and Technology (JUST), Bangladesh * Corresponding Author: E-mail: alam@just.edu.bd INTRODUCTION Internet Technology (IT) is very pervasive today. The number of digital devices connected to the Internet, those with a digital identity, is rapidly increasing day by day. With the developments in the technology, Internet of Things (IoT) become important part of human life. However, it is not well defined and secure. Now, various security issues are considered as major problem for a full-fledged IoT environment. There exists a lot of security challenges with the proposed architectures and the technologies which make the backbone of the Internet of Things. Some efficient and promising security mechanisms have been developed to secure the IoT environment, however, there is a lot to do. The challenges are ever rising and the solutions have to be ever elevating Literature summarized the security issues in the internet of things based on RFID, literature paid attention to the privacy models for RFID, literature explained mobile RFID network based on EPC and analyzed threats of the mobile RFID system, this is important to create a secure IOT architecture, literature analyzed RFID technology and its Applications in Internet of Things (IOT) from different layers, In this paper, we will first introduce the IOT based on RFID http://journals.e-palli.com/ mailto:alam@just.edu.bd American Journal of Agricultural Science, Engineering and Technology ISSN: 2158-8104 (Online), 2164-0920 (Print), 2017, Volume 1 Issue 1 31 then we analyze the security issues in the IOT based on RFID , and on the basis of these, we will give the current countermeasures for the security of RFID data and malware attacks.. RFID SYSTEM WORKING PRINCIPLES a. System Composition As per various applications, RFID frameworks maybe vary from one another on creation components. However, fundamentally, RFID framework is formed by tag, peruser and information trade and the executives framework. Electronic tag is created by coupling part and chip containing security rationale. b. Working Principle As a serious programmed recognizable proof innovation, RFID actualizes non-contact full duplex information interchanges through RF to get target things distinguished. RFID label comprises of chip and radio wire and each label highlights exceptional item code. RFID framework can communicate information among transponder and sensor handset. The accompanying figure shows working guideline of RFID framework. Figure 1: RFID working principle When RFID framework is working, RF signals with a specific recurrence are initial communicated by peruser through recieving wire. As RFID label enters peruser's working field, the recieving wire will communicate actuated current so that RFID label will catch vitality that will be enacted to send their own code data to peruser. With regards to inactive frameworks, peruser will communicate RF signals at a specific recurrence through coupling segments. When RFID enters this field, vitality will be gotten through coupling segments to drive chips and peruser for correspondences. After peruser peruses self-coded data, it'll send it to information trade and the board framework. With regards to dynamic framework, after label enters peruser working region, installed battery will flexibly control so as to finish correspondences with peruser. http://journals.e-palli.com/ American Journal of Agricultural Science, Engineering and Technology ISSN: 2158-8104 (Online), 2164-0920 (Print), 2017, Volume 1 Issue 1 32 THE INTERNET OF THINGS BASED ON RFID Figure 2: Structure of IOT In the web of things dependent on RFID, RFID peruser is liable for gathering through this EPC code the middleware framework can discover relating IP address from the ONS foundation on the web, consequently the important data of the article can be gotten from this location. At that point the middleware framework (Savant framework) can measure and deal with the data. In this cycle there are neighborhood ONS worker, nearby PML worker and far off PML worker which are responsible for information stockpiling, as appeared in the Figure 2. SECURITY ISSUES Correspondence security treats a) Wireless correspondence chances In RFID framework remote correspondence is received between the RFID perusers and RFID labels. Because of the receptiveness of the remote signs, it is simple for an assailant to look, capture, screen, and jam remote correspondence signals. So encryption and confirmation are expected to secure the remote transmission between the RFID perusers and RFID labels. b) Wired correspondence hazards Between the RFID perusers and the middleware framework, information transmission is through the web. Much the same as customary organization association, a sequential of safety efforts will be received for guaranteeing the information classification and honesty, and the typical organization association. c) Denial of Service (DOS) In both of remote and wired correspondence, there are Denial of Service (DOS) . When assailants control countless phony perusers and labels, they can make the information d) Network Evasdropping Organization listening in is an organization layer assault that centers around catching little bundles from the organization communicated by different PCs and perusing the information content looking for a data. This sort of organization assault is commonly one of the best as an absence of encryption administrations are utilized http://journals.e-palli.com/ American Journal of Agricultural Science, Engineering and Technology ISSN: 2158-8104 (Online), 2164-0920 (Print), 2017, Volume 1 Issue 1 33 Decryption Encryption Text Read the data Card Table 1: Security target and Solution Security target Security Solution IoT devices Privacy protection Blocking Anti-interference Data coding Data coding and data integrity Communication process Wireless communication risks(search, intercept, monitor, and jam wireless communication signals) the openness of the wireless signals wired communication risks The openness of the internet Denial of Service (DOS) Malicious attackers Network Eavesdropping Encryption EXISTING SYSTEM System 1: The card was read by the reader. The read information was encrypted by our encrypted software and this information will save to the cloud memory. When the raw information was needed, then only the administrator, who knew the decrypted private key could get the original information. As a result, the information of the card could not be theft through an unauthenticated person. Beside no one could duplicate the card and the authenticated card holder remains save from social engineering attack. It also helped the administrator that the information will save in the cloud memory with instant time. So administrator calculates the number of the uses of the card with exact time. DES algorithm is used in this system. The procedere of methodology are depicted as follows. Figure 3: DES algorithm This previous methodology could give the new technology some important security related in IOT. But it was unable to give the strong security that today’s life need, because of the popularities of IOT. Besides this technology left the discussion of traffic control of data which has a major impact in encryption and decryption system. In this paper, those problems are tried to solve through acceptable performances. System 2: There are some iot data transfer algorithm was introduced in past such as RST-IoT HCT-IoT .These algorithms are based on spanning tree theory. http://journals.e-palli.com/ American Journal of Agricultural Science, Engineering and Technology ISSN: 2158-8104 (Online), 2164-0920 (Print), 2017, Volume 1 Issue 1 34 Number of devices Avrg. Data Size (KB) RST-IoT HCT-IoT DES-IoT 20 512 5.6 5.53 1.6 40 1024 8.1 7.9 3.2 60 2048 10.9 9.9 5.2 100 3072 13.1 12.8 6.7 Figure 4: spanning tree theory HCT- IoT RST-IoT Comparison all IoT DES-IoT http://journals.e-palli.com/ American Journal of Agricultural Science, Engineering and Technology ISSN: 2158-8104 (Online), 2164-0920 (Print), 2017, Volume 1 Issue 1 35 METHODOLOGY When data transfer from RFID tag to destination, at first data will be encrypted for defending data cloning and eavesdropping attack. Secondly, different malicious attacks will took place at data passing time are generated by intermediate nodes could be blocked by TCP algorithm. It also control the data traffic or jam to reach the destination TRAFFIC CONTROL PATCH Algorithm Here Tpr= packet pass runtime, t= present time, AP= Access point, If Tpr>t Then select malware, generated by intermediate node in descending order based on its power by patched intermediate node (Pin) And blocked them in run time Else if Tpr