Epistemological Equation for Analysing Uncontrollable States in Complex Systems: Quantifying Cyber Risks from the Internet of Things

Abstract

The Internet-of-Things (IoT) triggers data protection questions and new types of cyber risks. Cyber risk regulations for the IoT, however, are still in their infancy. This is concerning, because companies integrating IoT devices and services need to perform a self-assessment of its IoT cyber security posture. At present, there are no self-assessment methods for quantifying IoT cyber risk posture. It is considered that IoT represent a complex system with too many uncontrollable risk states for quantitative risk assessment. To enable quantitative risk assessment of uncontrollable risk states in complex and coupled IoT systems, a new epistemological equation is designed and tested though comparative and empirical analysis. The comparative analysis is conducted on national digital strategies, followed by an empirical analysis of cyber risk assessment approaches. The results from the analysis present the current and a target state for IoT systems, followed by a transformation roadmap, describing how IoT systems can achieve the target state with a new epistemological analysis model. The new epistemological analysis approach enables the assessment of uncontrollable risk states in complex IoT systems—which begin to resemble artificial intelligence—and can be used for a quantitative self-assessment of IoT cyber risk posture.

A Quality Aware Multiunit Double Auction Framework for IoT-Based Mobile Crowdsensing in Strategic Setting

“…TA-BLE 1 depicts the various application areas of IoT. Apart from this, security in IoT devices is of major concern and increasing on a daily basis, as discussed in [82]. In [82], a new epistemological equation is presented that contains a set of new epistemological formulas that will help the cyber risk researchers to conduct epistemological analysis of various cyber risk assessment approaches.…”

“…Apart from this, security in IoT devices is of major concern and increasing on a daily basis, as discussed in [82]. In [82], a new epistemological equation is presented that contains a set of new epistemological formulas that will help the cyber risk researchers to conduct epistemological analysis of various cyber risk assessment approaches. In our work, security and privacy of the IoT devices are not taken into consideration and can be considered in our future works.…”

Efficient Middleware for the Portability of PaaS Services Consuming Applications among Heterogeneous Clouds

“…A specific vendor provides proprietary services for developing applications, making them dependent upon the provider [13,14]. Moreover, one platform could supply some assistance that is not offered by another platform [10,[43][44][45][46][47][48][49]. So, application portability among different clouds or from legacy enterprises to the cloud becomes essential to preclude users from vendor lock-in [50][51][52][53][54][55].…”

“…We defined the structure of our configuration file so that the middleware layer handles and implements the cloud services even with the different designs of the configuration variables. The configuration is not hardcoded in the middleware code [48][49][50][51]. Instead, it is provided in a JSON file that can be changed to alter the design even if the application runs.…”

Formal Modeling of IoT and Drone-Based Forest Fire Detection and Counteraction System

“…The process of failure detection is reactive for sensors, alarms, gateways, and drones. In addition, the formal modeling and validation of cyber risk to prevent someone from hacking these devices and sending many fake alarms just to mess up the system is also considered in the proposed algorithm [46,47]. The Algorithm 1 is explained further in detail below.…”