Raising trust in security products and systems through standardisation and certification: The crisp approach

Defence Against Dark Artefacts: An Analysis of the Assumptions Underpinning Smart Home Cybersecurity Standards

“…The buyers of smart home devices could be influenced by certification schemes such as the recently published Kitemark for IoT devices [4] and some of them might think that in the presence of this Kitemark, they do not have to worry about security or safety risks. Indeed, "Standards and certificates can be a synonym of reliability and assurance to the end user and citizen" [40]. However, we argue in this paper that due to assumptions about the widely adopted cloud architecture model, the nature of the current standards does not guarantee the security and safety of smart home environments, although they are a step in the right direction.…”

“…Concerning evaluative standards which demonstrate that particular levels of security or quality have been achieved, certification procedures include an objective evaluation of compliance by third parties [36]. These procedures increase trust among smart home devices buyers as it proves to them that the product respects certain standards [40]. This is another reason why adopting effective standards is crucial.…”

Putting Data Protection by Design on the Blockchain

“…It is truism to repeat how the creation of standards is challenging in a fast-paced technological environment. This has already been highlighted especially in the security technological field, where the rapid technological advancements means that "changes to standardisation are too slow to keep up" 68 . The end-less game of whack-a-mole between standards and innovation is not a new criticism to standardisation efforts, nor to the overall co-regulatory approach towards new technologies.…”