Ontology-based automation of security guidelines for smart homes

Khan, Yasir Imtiaz; Ndubuaku, Maryleen U.

doi:10.1109/wf-iot.2018.8355214

Cited by 8 publications

(5 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…This study proposes a security guideline methodology that can be applied to all general products. Studies [23][24][25] have been conducted on the establishment of various security guidelines in addition to those for evaluation and certification. A study [23] determined that the key causes of data security breaches in the medical industry include human error and malicious result reporting.…”

Section: Studies On the Formulation Of Security Guidelinesmentioning

confidence: 99%

“…In that study, the advantages and disadvantages of existing information security guidelines were compared, and an effective information security awareness program for organizations was developed to provide efficient security education. Another study [24] developed a context-based ontology to establish security guidelines to increase the interoperability and mutual interests between smart-home providers, users, and smart devices. Here, the cases were divided as follows: one wherein security management is performed automatically without the user's involvement, and another wherein the user manages security according to the guidelines.…”

Section: Studies On the Formulation Of Security Guidelinesmentioning

confidence: 99%

See 1 more Smart Citation

Systematic Security Guideline Framework through Intelligently Automated Vulnerability Analysis

Kim,

Ahn

2024

CMC

View full text Add to dashboard Cite

This research aims to propose a practical framework designed for the automatic analysis of a product's comprehensive functionality and security vulnerabilities, generating applicable guidelines based on real-world software. The existing analysis of software security vulnerabilities often focuses on specific features or modules. This partial and arbitrary analysis of the security vulnerabilities makes it challenging to comprehend the overall security vulnerabilities of the software. The key novelty lies in overcoming the constraints of partial approaches. The proposed framework utilizes data from various sources to create a comprehensive functionality profile, facilitating the derivation of real-world security guidelines. Security guidelines are dynamically generated by associating functional security vulnerabilities with the latest Common Vulnerabilities and Exposure (CVE) and Common Vulnerability Scoring System (CVSS) scores, resulting in automated guidelines tailored to each product. These guidelines are not only practical but also applicable in real-world software, allowing for prioritized security responses. The proposed framework is applied to virtual private network (VPN) software, wherein a validated Level 2 data flow diagram is generated using the Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of privilege (STRIDE) technique with references to various papers and examples from related software. The analysis resulted in the identification of a total of 121 vulnerabilities. The successful implementation and validation demonstrate the framework's efficacy in generating customized guidelines for entire systems, subsystems, and selected modules.

show abstract

Section: Studies On the Formulation Of Security Guidelinesmentioning

confidence: 99%

Section: Studies On the Formulation Of Security Guidelinesmentioning

confidence: 99%

Systematic Security Guideline Framework through Intelligently Automated Vulnerability Analysis

Kim,

Ahn

2024

CMC

View full text Add to dashboard Cite

show abstract

“…Moreover, the results of using ontology in speech-based user interfaces have been very promising. According to studies in the field of smart homes, the ontology has been mostly used in the field of energy management (Saba et al 2018;Saba et al 2021) and in designing smart home models (Khan and Ndubuaku 2018;Reedoy et al 2021). In (Milward and Beveridge 2003), the speech recognition complexity in breast cancer detection tools has been decreased by exploiting the ontology as a question/answer system.…”

Section: Related Workmentioning

confidence: 99%

Detecting Persian speaker-independent voice commands based on LSTM and ontology in communicating with the smart home appliances

2022

View full text Add to dashboard Cite

Nowadays, various interfaces are used to control smart home appliances. The human and smart home appliances interaction may be based on input devices such as a mouse, keyboard, microphone, or webcam. The interaction between humans and machines can be established via speech using a microphone as one of the input modes. The Speech-based human and machine interaction is a more natural way of communication in comparison to other types of interfaces. Existing speech-based interfaces in the smart home domain suffer from some problems such as limiting the users to use a fixed set of pre-defined commands, not supporting indirect commands, requiring a large training set, or depending on some specific speakers. To solve these challenges, we proposed several approaches in this paper. We exploited ontology as a knowledge base to support indirect commands and remove user restrictions on expressing a specific set of commands. Moreover, Long Short-Term Memory (LSTM) has been exploited for detecting spoken commands more accurately. Additionally, due to the lack of Persian voice commands for interacting with smart home appliances, a dataset of speakerindependent Persian voice commands for communicating with TV, media player, and lighting system has been designed, recorded, and evaluated in this research. The experimental results show that the LSTM-based voice command detection system performed almost 1.5% and 13% more accurately than the Hidden Markov Model (HMM)-based one, in scenarios 'with' and 'without ontology', respectively. Furthermore, using ontology in the LSTM-based method has improved the system performance by about 40%.

show abstract

“…Khan et al [25] proposes an ontology that allows establishing security guidelines for interoperability and understanding between smart home actors. The authors indicate the security guidelines to be performed to exchange knowledge.…”

Section: Businessmentioning

confidence: 99%

Cybersecurity Model Based on Hardening for Secure Internet of Things Implementation

et al. 2021

View full text Add to dashboard Cite

The inclusion of Internet of Things (IoT) for building smart cities, smart health, smart grids, and other smart concepts has driven data-driven decision making by managers and automation in each domain. However, the hyper-connectivity generated by IoT networks coupled with limited default security in IoT devices increases security risks that can jeopardize the operations of cities, hospitals, and organizations. Strengthening the security aspects of IoT devices prior to their use in different systems can contribute to minimize the attack surface. This study aimed to model a sequence of seven steps to minimize the attack surface by executing hardening processes. Conducted a systematic literature review using Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) techniques. In this way, we were able to define a proposed methodology to evaluate the security level of an IoT solution by means of a checklist that considers the security aspects in the three layers of the IoT architecture. A risk matrix adapted to IoT is established to evaluate the attack surface. Finally, a process of hardening and vulnerability analysis is proposed to reduce the attack surface and improve the security level of the IoT solution.

show abstract

Ontology-based automation of security guidelines for smart homes

Cited by 8 publications

References 9 publications

Systematic Security Guideline Framework through Intelligently Automated Vulnerability Analysis

Systematic Security Guideline Framework through Intelligently Automated Vulnerability Analysis

Detecting Persian speaker-independent voice commands based on LSTM and ontology in communicating with the smart home appliances

Cybersecurity Model Based on Hardening for Secure Internet of Things Implementation

Contact Info

Product

Resources

About