Preserving context security in AWS IoT Core

Cloud computing platforms are widely used as enabling frameworks for the Internet of Things. Within this context, a number of peripheral devices are connected to the middleware and constantly communicate raw data in order for them to be processed. Although several countermeasures were designed (and often adopted) in order to secure the communication channel and to ensure device and back-end authentication, several deployed IoT solution are subject to context security threats, where authenticated devices act in an allowed yet unexpected way and trigger undesired processing tasks in the back-end. As AWS IoT Core is currently the most adopted middleware in this context, this paper proposes a practical solution to achieve context security in such a scenario.