Smart objects are small devices with limited system resources, typically made to fulfill a single simple task. By connecting smart objects and thus forming an Internet of Things, the devices can interact with each other and their users and support a new range of applications. Due to the limitations of smart objects, common security mechanisms are not easily applicable. Small message sizes and the lack of processing power severely limit the devices' ability to perform cryptographic operations. This paper introduces a protocol for delegating client authentication and authorization in a constrained environment. The protocol describes how to establish a secure channel based on symmetric cryptography between resource-constrained nodes in a cross-domain setting. A resource-constrained node can use this protocol to delegate authentication of communication peers and management of authorization information to a trusted host with less severe limitations regarding processing power and memory.

Recently, the IETF has generated a number of standards that are intended to be foundational for large networks of constrained devices, also known as the Internet of Things. Among these are a Web transfer protocol realizing the REST (Representational State Transfer) principles, the Constrained Application Protocol (CoAP), and the Concise Binary Object Representation (CBOR). As with the existing Internet, the Internet of Things will need network management. Management of networks has long been governed by the Structure of Management Information V2 (SMIv2), encoded in ASN.1 Basic Encoding Rules (BER) and the Simple Network Management Protocol (SNMP). Supporting multiple protocols and data encoding formats on a very constrained device is wasteful of its capabilities. We examine how CoAP and CBOR could be used for providing REST-based access to SMIv2-structured information on constrained devices in a way that facilitates interoperation with implementations of the existing protocols.

Asset information obtained via infrastructure analysis is essential for developing and establishing risk management. However, information about assets acquired by existing infrastructure analysis processes is often incomplete or lacking in detail, especially concerning their interconnected topology. In this paper, we present the Interconnected-asset Ontology, IO, as a step towards a standardized representation of detailed asset information. The utilization of an asset ontology as a machine-readable representation supports the automation of risk management processes and the standardization of asset information reduces redundant acquisition processes that are often found in practice.

Internet access for highly mobile users in high-speed trains or cars, underground walkways and tunnels is often challenged by intermittent connectivity with short and unpredictable connectivity opportunities. In such opportunistic communication scenarios, utilizing these connectivity opportunities to the best potential for the mobile user can be crucial to achieve an acceptable overall perceived service quality. When wireless access networks are shared between mobile and non-mobile TCP users, this objective can be difficult to achieve especially considering the long-term throughput balance. In this paper, we analyze the performance issues with current TCP implementations and propose a new rate control mechanism called RACING (Rate Control for Intermittent Networking) for increasing long-term TCP throughput for Intermittent Connectivity Nodes (ICNs) in such challenged networks. In the proposed algorithm, the sending rate is adjusted based on the expected traffic during the outage to, in a sense, compensate the ICN for the disruption. The algorithm also considers the fairness with other flows by gradually changing its algorithm closer to the original TCP according to the compensated amount. Computer simulation results show that RACING reasonably improves the performance of the ICN.