Leveraging P2P- and Edge-Based Processing for Compliance Management of IoT-Devices

The Internet of Things (IoT) has connected billions of devices to the Internet. From small "smart lightbulbs" to entire aircraft, more and more items become a connected device. With that comes the challenge of keeping this new class of devices in line with configuration and security standards. As it is explored in this paper, this challenge is oftentimes not properly met. Existing approaches to compliance either do not fit into the constraints of IoT environments or struggle to cope with their scale. This paper explores the shifting workloads to the IoT nodes, leveraging peer-to-peer based approaches for verification and compliance through a proof-of-concept implementation and simulation. This paper demonstrates how a significant verification workload can effectively be shifted into the peer network and compliance verification of peers can be delegated without requiring special knowledge or software on the nodes under audit.