nach oben

Erschienen in:

2021 | OriginalPaper | Buchkapitel

Threat Modelling and Risk Assessment in Internet of Things: A Review

verfasst von : Mahapara Mahak, Yashwant Singh

Erschienen in: Proceedings of Second International Conference on Computing, Communications, and Cyber-Security

Verlag: Springer Singapore

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config

KI-gestützte Suche

Aus

Abstract

The Internet of things (IoT) plays an important role in our daily lives. They have been used in our homes, hospitals and industries for so long. IoT has also been used to monitor and inform the changes in the environment. Furthermore, the data exchanged within and among IoT devices are increasing aggressively, and the permeative of such systems take them to come in the tenancy of very delicate information, as a result, there are huge risks of security and privacy. Many research works have been conducted to secure the Internet of things. In this paper, we provide an introduction to the Internet of things and reassess some threat models and risk assessment methodologies of IoT.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Vorheriges Kapitel Energy-Efficient Bonding Based Technique for Message Forwarding in Social Opportunistic Networks

Nächstes Kapitel Deep Learning-Based Attack Detection in the Internet of Things

Alaba FA, Othman M, Abaker I, Hashem T, Alotaibi F (2017) Internet of things security: a survey. J Netw Comput Appl 88:10–28. https://doi.org/10.1016/j.jnca.2017.04.002CrossRef

Albanese M, Probst CW, Workshop I, Goos G (2019) Graphical models for security. https://doi.org/10.1007/978-3-030-36537-0

Application Threat Modeling using DREAD and STRIDE (n.d.) Retrieved 26 Nov 2019 from https://haiderm.com/application-threat-modeling-using-dread-and-stride/

Atamli AW, Martin A (2014) Threat-based security analysis for the internet of things. In: Proceedings—2014 international workshop on secure internet of things, SIoT, pp 35–43. https://doi.org/10.1109/SIoT.2014.10

Attack trees expressed through extended influence diagrams. | Download Scientific Diagram (n.d.) Retrieved 14 Mar 2020 from https://www.researchgate.net/figure/Attack-trees-expressed-through-extended-influence-diagrams_fig3_224373064

Aufner P (2020) The IoT security gap: a look down into the valley between threat models and their implementation. Int J Inf Secur 19(1):3–14. https://doi.org/10.1007/s10207-019-00445-yCrossRef

Basics of IoT Security Threat Modelling—Cyber Security Blog (n.d.) Retrieved 24 Mar 2020 from https://www.valencynetworks.com/blogs/basics-of-iot-security-threat-modelling/

Cagnazzo M, Hertlein M, Holz T, Pohlmann N (2018) Threat modeling for mobile health systems. In: 2018 IEEE wireless communications and networking conference workshops, WCNCW 2018, pp 314–319. https://doi.org/10.1109/WCNCW.2018.8369033

Caldera C (2017) Towards an automated attack tree generator for the IoT

10.

Casola V, De Benedictis A, Rak M, Villano U (2019) Toward the automation of threat modeling and risk assessment in IoT systems. Internet of Things 7:100056. https://doi.org/10.1016/j.iot.2019.100056CrossRef

11.

Costa L, Barros JP, Tavares M (2019) Vulnerabilities in IoT devices for smart home environment. In: ICISSP 2019—Proceedings of the 5th International conference on information systems security and privacy, pp 615–622. https://doi.org/10.5220/0007583306150622

12.

den Braber F, Brændeland G, Dahl HEI, Engan I, Hogganvik I, Lund MS, Vraalsen F (2006) The CORAS model-based method for security risk analysis. SINTEF, Oslo, (September). Retrieved from https://scholar.google.com/scholar?hl=en&btnG=Search&q=intitle:The+CORAS+Model-based+Method+for+Security+Risk+Analysis#0

13.

Getting Started with IoT Security with Threat Modeling | Denim Group (n.d.) Retrieved 24 Mar 2020 from https://www.denimgroup.com/resources/blog/2017/11/getting-started-with-iot-security-with-threat-modeling/

14.

Hodo E, Bellekens X, Hamilton A, Dubouilh P-L, Iorkyase E, Tachtatzis C, Atkinson R (2016) Threat analysis of IoT networks using artificial neural network intrusion detection system keywords—internet of things, artificial neural network, denial of service, intrusion detection system and multi-level perceptron, pp 4–9

15.

Hussain S, Kamal A, Ahmad S, Rasool G, Iqbal S (2014) Threat modelling methodologies: a survey. Sci. Int. (Lahore) 26(4):1607–1609

16.

Kavallieratos G, Gkioulos V, Katsikas SK (2019) Threat analysis in dynamic environments: The case of the smart home. In: 2019 15th international conference on distributed computing in sensor systems (DCOSS), pp 234–240. https://doi.org/10.1109/DCOSS.2019.00060

17.

Liu C, Zhang Y, Zeng J, Peng L, Chen R (2012) Research on dynamical security risk assessment for the Internet of Things inspired by immunology. In: Proceedings—International conference on natural computation, (ICNC), pp 874–878. https://doi.org/10.1109/ICNC.2012.6234533

18.

Lund MS, Solhaug B, Stølen K (2010) Model-driven risk analysis: the CORAS approach. Springer

19.

Macher G, Sporer H, Berlach R, Armengaud E, Kreiner C (2015). SAHARA: a security-aware hazard and risk analysis method. In: Proceedings—Design, automation and test in Europe, DATE, pp 621–624. https://doi.org/10.7873/date.2015.0622

20.

Mathematics A (2017) ijpam.eu. 115(8):121–126.

21.

Nurse JRC, Creese S, De Roure D (2017) Security risk assessment in internet of things systems. IT Professional 19(5):20–26. https://doi.org/10.1109/MITP.2017.3680959CrossRef

22.

Omotosho A, Ayemlo Haruna B, Mikail Olaniyi O (2019) Threat modeling of internet of things health devices. J Appl Secur Res 1–16. https://doi.org/10.1080/19361610.2019.1545278

23.

OWASP Risk Rating Methodology—OWASP. (n.d.). Retrieved 23 Nov 2019 from https://www.owasp.org/index.php/OWASP_Risk_Rating_Methodology

24.

Rizvi S, Kurtz A, Pfeffer J, Rizvi M (2018) Securing the internet of things (IoT): a security taxonomy for IoT. In: Proceedings—17th IEEE international conference on trust, security and privacy in computing and communications and 12th IEEE international conference on big data science and engineering, Trustcom/BigDataSE 2018, (December), pp 163–168. https://doi.org/10.1109/TrustCom/BigDataSE.2018.00034

25.

Sethi P, Sarangi SR (2017) Internet of things: architectures, protocols, and applications. J Electr Comput Eng 2017. https://doi.org/10.1155/2017/9324035

26.

Shakdhe A, Agrawal S, Yang B (2019) Security vulnerabilities in consumer IoT applications. In: Proceedings—5th IEEE international conference on big data security on cloud, BigDataSecurity 2019, 5th IEEE international conference on high performance and smart computing, HPSC 2019 and 4th IEEE international conference on intelligent data and security, pp 1–6. https://doi.org/10.1109/BigDataSecurity-HPSC-IDS.2019.00012

27.

Shivraj VL, Rajan MA, Balamuralidhar P (2018) A graph theory based generic risk assessment framework for internet of things (IoT). In: 11th IEEE international conference on advanced networks and telecommunications systems, ANTS 2017, pp 1–6. https://doi.org/10.1109/ANTS.2017.8384121

28.

Threat Modeling: 12 Available Methods (n.d.) Retrieved 14 Mar 2020 from https://insights.sei.cmu.edu/sei_blog/2018/12/threat-modeling-12-available-methods.html

29.

Threat Modeling | IoT ONE (n.d.) Retrieved 24 Mar 2020 from https://www.iotone.com/term/threat-modeling/t686

30.

Tiwary A, Mahato M, Chandrol MK (2018) Internet of Things (IoT): research, architectures and applications. Int J Future Revol Comput Sci Commun Eng. ISSN: 2454-4248. Retrieved from https://www.ijfrcsce.org

Titel: Threat Modelling and Risk Assessment in Internet of Things: A Review
verfasst von: Mahapara Mahak
Yashwant Singh
Verlag: Springer Singapore
Buch: Proceedings of Second International Conference on Computing, Communications, and Cyber-Security
Print ISBN: 978-981-16-0732-5

Electronic ISBN: 978-981-16-0733-2

Copyright-Jahr: 2021
DOI: https://doi.org/10.1007/978-981-16-0733-2_21

Neuer Inhalt

Bildnachweise

VDI-Icon, Profil Icon, inhalt2, Springer Professional Modul/© Springer Fachmedien Wiesbaden GmbH, Nachhaltigkeitsaward Key Visual/© Cometis AG/Global ESG Monitor | Daniel Rupp | Generiert mit KI, Search Icon, Banner Hanser, Kryptowährungen/© gopixa / Getty Images / iStock, MG4 aus China auf dem Prüfstand im ADAC-Technik-Zentrum in Landsberg am Lech/© ADAC e.V., Chassis eines Elektrofahrzeugs/© chesky / stock.adobe.com, Zeitschrift Wissensmanagement Cover, PatentFit-Logo/© Springer Fachmedien Wiesbaden GmbH, Sustainibility Finance/© Robert Kneschke / stock.adobe.com / Springer Fachmedien Wiesbaden GmbH, Zukunftswerkstatt Sales Excellence 2024/© AndreyPopov / Getty Images / iStock, 2023_Antrieb/© supervisuell

Springer Professional

Abstract

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"

Neuer Inhalt

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.