ISC2 CISSP (Certified Information Systems Security Professional)Communication and Network SecurityMedium
A security architect is designing the network for a new Internet of Things (IoT) deployment in a smart city project. The IoT devices have limited processing power and memory, and battery life is a critical concern. Secure communication is essential, but traditional TLS/SSL protocols are too resource-intensive. Which of the following secure communication protocols is BEST suited for these constrained IoT devices?
- ADTLS
- BIPsec
- CHTTPS
- DSSH
Show answer & explanationAnswer & explanation
Correct answer: A. DTLS
Datagram Transport Layer Security (DTLS) is a version of TLS specifically adapted for unreliable datagram protocols like UDP. It provides similar security guarantees as TLS but is designed to handle packet loss and reordering, making it more suitable for constrained IoT devices where UDP is often used due to its lower overhead compared to TCP.
Why the other options are wrong
- B. IPsec operates at Layer 3 and can be resource-intensive for very constrained devices, also designed for IP rather than UDP-specific transport.
- C. HTTPS uses TCP-based TLS, which is often too heavy for resource-constrained IoT devices due to TCP's overhead and retransmission mechanisms.
- D. SSH is for secure remote access and command execution, not a general-purpose secure communication protocol for IoT data streams.
Datagram Transport Layer Security (DTLS)
A communication protocol that provides security for datagram-based applications by allowing them to communicate in a way that prevents eavesdropping, tampering, or message forgery. It is based on TLS but adapted for unreliable transport protocols like UDP.
- Provides security similar to TLS but over UDP.
- Designed for applications sensitive to latency and packet loss (e.g., VoIP, gaming, IoT).
- Handles packet reordering and loss inherent in UDP.
- Lower overhead than TCP-based TLS for certain use cases.
Memory trick: DTLS Delivers Tiny Links Securely.