Enterprise IoT Security and Scalability: How Unikernels can Improve the Status Quo
📜 Abstract
Cloud computing has been a great enabler for both the Internet of Things and Big Data. However, as with all new computing developments, development of the technology is usually much faster than consideration for, and development of, solutions for security and privacy. In a previous paper, we proposed that a unikernel solution could be used to improve security and privacy in a cloud scenario. In this paper, we outline how we might apply this approach to the Internet of Things, which can demonstrate an improvement over existing approaches.
✨ Summary
Summary
The paper examines security, privacy, scalability, and manageability problems created by large-scale Internet of Things deployments connected to cloud, fog, and edge-computing infrastructure. It argues that conventional enterprise security models, particularly perimeter-oriented firewall architectures, are poorly suited to geographically distributed, resource-constrained, and heterogeneous IoT environments.
The proposed approach is to use unikernels across the IoT processing chain, including devices, intermediate processing nodes, cloudlets, and central cloud servers. The authors identify several expected benefits: reduced attack surface through minimal software images, lower memory and processing requirements, reuse of application code across hardware platforms, improved isolation, simplified deployment, atomic or rollback-capable updates, event-driven execution, energy efficiency, and dynamic scale-out. Stateless unikernels are also presented as suitable for rapidly starting and discarding processing instances and for moving workloads between central clouds and edge locations.
The paper emphasizes that unikernels are not a complete solution. Large deployments still require substantial infrastructure for provisioning, monitoring, logging, lifecycle management, and secure debugging. Hardware virtualization support is also uneven across IoT devices, and the single-process, stateless model limits compatibility with existing software. The authors additionally identify verifiable computing and cryptographic techniques as necessary for protecting the integrity and confidentiality of sensitive data.
Evidence of subsequent use and influence
The paper has continued to be cited in later unikernel, IoT, edge-computing, and systems research. The University of Aberdeen research record reports 19 Scopus citations and identifies the work as a published UCC 2016 conference contribution. (abdn.elsevierpure.com) Later publications cite it in discussions of embedded-IoT unikernel deployment, edge offloading, unikernel isolation, and lightweight unikernel systems. (repositum.tuwien.at) A systematic literature review of software-defined networking for IoT also includes the paper as part of its discussion of IoT research. (open-access.bcu.ac.uk) These records establish continued scholarly reuse of the paper’s topic and proposal, but do not by themselves demonstrate that specific systems or industry products were directly derived from it.