A guiding famework for vetting the Internet of things - Institut Polytechnique de Paris Accéder directement au contenu
Article Dans Une Revue Journal of information security and applications Année : 2020

A guiding famework for vetting the Internet of things

Résumé

Like any emerging and disruptive technology, multiple obstacles are slowing down the Internet of Things (IoT) expansion for instance, multiplicity of things’ standards, users’ reluctance and sometimes rejection due to privacy invasion, and limited IoT platform interoperability. IoT expansion is also accompanied by the widespread use of mobile apps supporting anywhere, anytime service provisioning to users. By analogy to vetting mobile apps, this paper addresses the lack of principles and techniques for vetting IoT devices (things) in preparation for their integration into mission-critical systems. Things have got vulnerabilities that should be discovered and assessed through proper device vetting. Unfortunately, this is not happening. Rather than sensing a nuclear turbines steam level, a thing could collect some sensitive data about the turbine without the knowledge of users and leak these data to third parties. This paper presents a guiding framework that defines the concepts of, principles of, and techniques for thing vetting as a pro-active response to potential things vulnerabilities.
Fichier principal
Vignette du fichier
S2214212620308048.pdf (773.4 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-02984706 , version 1 (24-10-2022)

Licence

Paternité - Pas d'utilisation commerciale

Identifiants

Citer

Fatma Masmoudi, Zakaria Maamar, Mohamed Sellami, Ali Ismail Awad, Vanilson Burégio. A guiding famework for vetting the Internet of things. Journal of information security and applications, 2020, 55, pp.102644:1-102644:11. ⟨10.1016/j.jisa.2020.102644⟩. ⟨hal-02984706⟩
48 Consultations
41 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More