Security Requirements for the Internet of Things: A Systematic Approach

Abstract

There has been a tremendous growth in the number of smart devices and their applications (e.g., smart sensors, wearable devices, smart phones, smart cars, etc.) in use in our everyday lives. This is accompanied by a new form of interconnection between the physical and digital worlds, commonly known as the Internet of Things (IoT). This is a paradigm shift, where anything and everything can be interconnected via a communication medium. In such systems, security is a prime concern and protecting the resources (e.g., applications and services) from unauthorized access needs appropriately designed security and privacy solutions. Building secure systems for the IoT can only be achieved through a thorough understanding of the particular needs of such systems. The state of the art is lacking a systematic analysis of the security requirements for the IoT. Motivated by this, in this paper, we present a systematic approach to understand the security requirements for the IoT, which will help designing secure IoT systems for the future. In developing these requirements, we provide different scenarios and outline potential threats and attacks within the IoT. Based on the characteristics of the IoT, we group the possible threats and attacks into five areas, namely communications, device/services, users, mobility and integration of resources. We then examine the existing security requirements for IoT presented in the literature and detail our approach for security requirements for the IoT. We argue that by adhering to the proposed requirements, an IoT system can be designed securely by achieving much of the promised benefits of scalability, usability, connectivity, and flexibility in a practical and comprehensive manner.

Postdigital-biodigital: An emerging configuration

“…Static though the hot water tank may seem just now, it could be invited like other material or organic items to become digitally intelligent. As part of the algorithmic internet of things (AIoT) it joins 'a paradigm shift where anything and everything can be interconnected via a communication medium' and 'security is a prime concern' (Pal et al, 2020). Therefore, I question what reforms are needed to inclusivity policies (that still centre around human-to-human discriminatory practices) to now be inclusive of a hybrid assemblage of devices and potential data bias, that humans now intimately interconnect with (Hayes, in press).…”

Development and Progress in Sensors and Technologies for Human Emotion Recognition

“…It is noted that the process of human emotion recognition deals with personal information including health, location, and other highly confidential information. It is even more significant when considering large-scale IoT systems and their association with different human emotion recognition systems for securing access control and the delegation of access rights at scale [ 157 , 158 , 159 ]. Therefore, the protection of a user’s privacy is another challenge [ 154 , 160 ].…”

A Survey on Cross-Architectural IoT Malware Threat Hunting

“…Therefore, an OS for IoT device should be lightweight to support the minimal hardware, yet following the security requirements, as suggested by Pal et al [26], which includes energy awareness, security by privacy, location privacy, storage, communication, scalability by incremental deployment, load balancing, robustness, fault tolerance, connectivity, and usability. Linux flavors and distributions such as Ubuntu Segment Type Description PT_NULL PT_NULL allows program header table to contain entries that can be ignored during execution PT_LOAD PT_LOAD is used to define a loadable segment using the values specified by p_memsz & p_filesz.…”