A Weighted Risk Score Model for IoT Devices.

作者: Shachar Siboni , Chanan Glezer , Asaf Shabtai , Yuval Elovici

DOI: 10.1007/978-3-030-24900-7_2

关键词:

摘要: The Internet of Things (IoT) defines a new era where ordinary physical objects are being transformed into smart connected devices. These advanced devices have the ability to sense, compute, and communicate with their surroundings via Internet. This may result in severe network security breaches, as these in-crease attack surface by exposing vulnerabilities infiltration points restricted networks. One major challenges such deployments is determining risks that IoT pose environment they operated in. paper proposes an device risk score model, denoted Weighted Risk Ranking (WRR) model. proposed approach focuses on quantifying static dynamic properties device, order define score. Our practical proof concept demonstrates use WRR scheme for several context enterprise network, showing feasibility suggested solution tool assessment modern networks widely deployed.

参考文章(15)
Andreas Jacobsson, Martin Boldt, Bengt Carlsson, A risk analysis of a smart home automation system Future Generation Computer Systems. ,vol. 56, pp. 719- 733 ,(2016) , 10.1016/J.FUTURE.2015.09.003
Rolf H. Weber, Internet of things - new security and privacy challenges the internet of things. ,vol. 26, pp. 23- 30 ,(2010) , 10.1016/J.CLSR.2009.11.008
Ilangko Balasingham, Habtamu Abie, Risk-based adaptive security for smart IoT in eHealth international conference on body area networks. pp. 269- 275 ,(2012) , 10.5555/2442691.2442752
Rodrigo Roman, Jianying Zhou, Javier Lopez, On the features and challenges of security and privacy in distributed internet of things Computer Networks. ,vol. 57, pp. 2266- 2279 ,(2013) , 10.1016/J.COMNET.2012.12.018
Z. Mohajerani, F. Farzan, M. Jafary, Y. Lu, D. Wei, N. Kalenchits, B. Boyer, M. Muller, P. Skare, Cyber-related risk assessment and critical asset identification within the power grid ieee/pes transmission and distribution conference and exposition. pp. 1- 4 ,(2010) , 10.1109/TDC.2010.5484417
Mohamed Abomhara, Geir M. Koien, Security and privacy in the Internet of Things: Current status and open issues 2014 International Conference on Privacy and Security in Mobile Systems (PRISMS). pp. 1- 8 ,(2014) , 10.1109/PRISMS.2014.6970594
S. Sicari, A. Rizzardi, L.A. Grieco, A. Coen-Porisini, Security, privacy and trust in Internet of Things Computer Networks. ,vol. 76, pp. 146- 164 ,(2015) , 10.1016/J.COMNET.2014.11.008
Luigi Atzori, Antonio Iera, Giacomo Morabito, The Internet of Things: A survey Computer Networks. ,vol. 54, pp. 2787- 2805 ,(2010) , 10.1016/J.COMNET.2010.05.010
Zhuming Bi, Li Da Xu, Chengen Wang, Internet of Things for Enterprise Systems of Modern Manufacturing IEEE Transactions on Industrial Informatics. ,vol. 10, pp. 1537- 1546 ,(2014) , 10.1109/TII.2014.2300338
Albert Huang, Jhan-Cyun Liao, Li-Min Chang, She-I Chang, RISK FACTORS OF ENTERPRISE INTERNAL CONTROL: GOVERNANCE REFERS TO INTERNET OF THINGS (IOT) ENVIRONMENT pacific asia conference on information systems. pp. 30- ,(2016)