Attack and System Modeling Applied to IoT, Cloud, and Mobile Ecosystems

Abstract

Over the years, pervasive computing and communication technologies have enabled the emergence of new computing paradigms that have gained importance across a wide spectrum of domains. The three most notable that have witnessed significant advancements and have a solid track record of exponential growth in diverse applications are the Internet of Things (IoT), Cloud, and Mobile Computing. The ubiquity of these paradigms, their expandability, and applicability in different problem spaces have made them invaluable in modern computing solutions. Security becomes a real concern, especially when it comes to the development of applications in these environments, as numerous security issues may arise from potential design flaws. Secure application development across these three technologies can only be achieved when applications and systems are designed and developed with security in mind. This will improve the quality of the solutions and ensure that vulnerabilities are identified. It will also help in defining countermeasures against cyberattacks or mitigate the effects of potential threats to the systems. This article surveys existing approaches, tools, and techniques for attack and system modeling applicable to IoT, Cloud computing, and Mobile Computing. It also evaluates the strengths and limitations of the reviewed approaches and tools, from which it highlights the main existing challenges and open issues in the area.

Recent Advances in Wearable Sensing Technologies

“…In addition, wearables connected to the Internet could be hacked and used to attack other systems. This creates the issue of developing wearables with a security-by-design paradigm [232,233] to identify security risks and vulnerabilities during the design and development phases of a system rather than mitigating them after cyberattacks. The Mirai botnet illustrates this issue.…”

A Survey on Resilience in the IoT

“…The authors first analyze the state-of-the-art of techniques for different cloud components and subsequently discuss current limitations and challenges. Further, Sequeiros et al survey existing attack and system modeling techniques that are applicable to IoT and cloud computing [120].…”

A Threat Modelling Approach to Analyze and Mitigate Botnet Attacks in Smart Home Use Case

“…Threat mitigation is a process of reducing all the possible threats in a system. In order to propose the mitigation techniques for the identified threats, we analyzed some existing threat mitigation studies [25], [26], [27], [28], [29]. After performing the analysis on these studies, we adopt the best possible remedies in order to protect the smart home use case from the potential threats.…”