Attitudes and Perceptions of IoT Security in Critical Societal Services

Abstract

A quiet revolution that impacts several sectors, ranging over transport, home automation, energy, industrial control, and health services is undergoing with addition of new networked devices leading to enhanced services. In this paper, we aim to identify information security requirements that are common over several (vertical) sectors, and in particular, ones that impact critical societal services, namely, the energy, water, and health management systems. We present the results of an interview-based study where actors in these sectors were asked about their perceptions and attitudes on the security of Internet of Things (IoT). We set these perceptions and attitudes in context through a literature review of IoT security, and relate to current challenges in this area. This paper demonstrates that despite an overall optimistic view on IoT in critical societal services, there is a lack of consensus on risks related to IoT security.<p>Funding Agencies|Vinnova; Formas; Swedish Energy Agency under IoT Strategy Program; RICS:The Research Centre on Resilient Information and Control Systems - Swedish Civil Contingencies Agency; CENIIT Project [14.04]</p

Feature-Driven Mediator Synthesis

“…With the prevalence of the Internet of Things (IoT), secure systems are expected to make the best use of the resources and devices in the environment as their availability and capabilities change in order to meet their requirements [2]. However, most existing solutions focus on the security threats associated with the IoT rather than the opportunities brought by the IoT to support security [44].…”

TTEthernet Transmission in Software‐Defined Distributed Robot Intelligent Control System

“…The performance requirements of the system are also constantly increasing [2]. Especially in critical security areas, real-time performance and determinism are very important [3][4][5]. In terms of "real-time", real-time performance means that the control instruction can reach the control execution node at a specified time delay.…”

Internet of Things Security: Ongoing Threats and Proposed Solutions

“…The Fiat-Chrysler hack of 2014 resulted in 1.4 million vehicle recalls when cybersecurity researchers discovered a wireless network interface vulnerability that a potential hacker could use to disable an Internet-connected Jeep Cherokee while driving [1] . Similarly, a 2015 reports discovered inadequate security in the ConnectedDrive functionality of BMW cars [1] .…”

“…The Fiat-Chrysler hack of 2014 resulted in 1.4 million vehicle recalls when cybersecurity researchers discovered a wireless network interface vulnerability that a potential hacker could use to disable an Internet-connected Jeep Cherokee while driving [1] . Similarly, a 2015 reports discovered inadequate security in the ConnectedDrive functionality of BMW cars [1] . The US Federal Drugs Administration (FDA) stopped an infusion pump in 2015 due to a security breach, because they discovered that the pumps could potentially be remotely accessed through a hospital's network, although they didn't find any cases of hackers hijacking the pumps [1] .…”

“…Similarly, a 2015 reports discovered inadequate security in the ConnectedDrive functionality of BMW cars [1] . The US Federal Drugs Administration (FDA) stopped an infusion pump in 2015 due to a security breach, because they discovered that the pumps could potentially be remotely accessed through a hospital's network, although they didn't find any cases of hackers hijacking the pumps [1] . A case study on the August Smart Lock revealed vulnerabilities hackers could exploit to open the lock [16] .…”