Security assessment framework for IoT service

Abstract

What are the critical requirements to be considered for the security measures in Internet of Things (IoT) services? Further, how should those security resources be allocated? To provide valuable insight into these questions, this paper introduces a security assessment framework for the IoT service environment from an architectural perspective. Our proposed framework integrates fuzzy DEMATEL and fuzzy ANP to reflect dependence and feedback interrelations among security criteria and, ultimately, to weigh and prioritize them. The results, gleaned from the judgments of 38 security experts, revealed that security design should put more importance on the service layer, especially to ensure availability and trust. We believe that these results will contribute to the provision of more secure and reliable IoT services.Keywords Internet of Things · Security requirement · Security assessment · Fuzzy set theory The information age, created by the rapid advancement of information and communications technology (ICT) and the widespread adoption of wireless technologies, has presented an exciting new capability for both humans and diverse applications to extend the interconnectivity through the new dimension of "things" communication and integration [21]. Cisco predicts that by 2020, 50 billion things will be connected to the Internet via Internet of Things (IoT) technologies, generating revenues in excess of $19 trillion for industries worldwide [32].

RETRACTED: Internet of Things (IoT) and its impact on supply chain: A framework for building smart, secure and efficient systems

“…Also a fuzzy MCDM model for selecting suppliers presented in [58] via combining DEMATEL with TOPSIS technique. It also integrated with ANP in fuzzy environment to provide framework for assessing security criteria [59]. It also integrated with analytic hierarchy process (AHP) to evaluate criteria of auto spare parts industry [60], and to evaluate intertwined effects in e-learning programs [61].…”

Current Research Trends in IoT Security: A Systematic Mapping Study

“…Topic 5 is related to risk assessment and prioritization of IoT security threats. For a secure IoT environment, various Mobile Information Systems studies have prioritized security threats by applying approaches such as product-development life cycle, decisionmaking trial-and-evaluation laboratory, analytic network processing, and graph theory to develop risk assessment and management frameworks [200][201][202][203][204][205][206][207].…”

Security Requirements for the Internet of Things: A Systematic Approach

“…Several other proposals also outline the importance of IoT security and discuss various security requirements. For instance, Hossain et al [ 157 ], and Park and Shin [ 158 ] listed IoT security requirements that include data integrity, information protection, anonymity, non-repudiation and data freshness (i.e., real-time data). Alqassem [ 140 ] discusses IoT security requirements from a heterogeneous network’s perspective, here the author focuses on secure and private connections and transactions.…”