Security models of the Internet of Things.
DOI:
https://doi.org/10.34121/1028-9763-2023-4-43-50Keywords:
Internet of Things, cyber-convergent system, security model, інтернет речей, кіберконвергентна система, модель безпекиAbstract
The IoT is a cyber-convergent system that includes things, means of communication, target applications, and data analysis tools that support the unique identification of each object. IoT technologies play a vital role in the creation of cyber-convergent systems due to their wide usage in various spheres of life such as industry, social sphere, health care, and creating a comfortable environment. The IoT security model method ensures the confidentiality, integrity, and availability of data that is transferred between devices and also guarantees the privacy and security of end users. The creation and use of IoT systems directly affect the security and privacy of the involved and connected components. The presented study introduces an analysis of IoT architecture models with end-to-end security support. The conducted literature review reveals the challenges of various aspects of security faced by the IoT environment. Some models implementing different security strategies at different layers of the IoT are described. These include the perception layer which provides the authentication process for identifying IoT entities, the network layer which focuses on the security processes of cloud platforms, and the application layer which provides authentication and authorization for end users. The results of the analysis show that building secure IoT systems is based on three main strategies: proper configuring and ensuring the protection of all IoT devices; using secure wireless networks to connect IoT devices to corporate or global networks; constant situational awareness of security threats to IoT devices; and implementing appropriate security solutions to protect them from attacks. The maturity model of the IoT security system based on the ISA/IEC 62443 document package is also described.References
1. The European Union Agency for Cybersecurity (ENISA). Baseline security recommendations for IoT. 2017. November 20. URL: https://www.enisa.europa.eu/publications/baseline-security-recommendations-for-iot.
2. ISO/IEC 20924:2021. Information technology – Internet of Things (IoT) – Vocabulary. 2021. URL: https://www.iso.org/standard/82771.html.
3. ITU-T, Y.2060: Overview of the internet of things, Technical report, International Telecommunication Union. 2012. URL: https://www.itu.int/rec/T-REC-Y.2060-201206-I.
4. Kovalenko O. Knowledge Driven Cyber-Convergent Systems Based on Situational Agents. IEEE 17th International Conference on Computer Sciences and Information Technologies (CSIT). 2022. P. 243–246. DOI: 10.1109/CSIT56902.2022.10000762.
5. Kovalenko O. Systems Convergence for Situational Control and Decision Making in Distributed Environments. IEEE 16th International Conference on Advanced Trends in Radioelectronics, Telecommunications and Computer Engineering (TCSET). 2022. P. 344–347. DOI: 10.1109/TCSET55632.2022.9767006.
6. Ma J., Ning H., Huang R., Liu H., Yang L.T., Chen J., Min G. Cybermatics: A holistic field for systematic study of cyber-enabled new worlds. IEEE Access. 2015. Vol. 3. P. 2270–2280.
7. Madakam S., Ramaswamy R., Tripathi S. Internet of Things (IoT): A Literature Review. Journal of Computer and Communications. 2015. Vol. 3. P. 164–173. DOI: 10.4236/jcc.2015.35021.
8. Mullet V., Sondi P., Ramat E. A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0. IEEE Access. 2021. Vol. 9. P. 23235–23263. DOI: 10.1109/ACCESS.2021.3056650.
9. Williams P., Dutta I.K., Daoud H., Bayoumi M. A survey on security in internet of things with a focus on the impact of emerging technologies. Internet of Things. 2022. Vol. 19. P. 100564. DOI: 10.1016/j.iot.2022.100564.
10. Ogunniye G., Kökciyan N. A Survey on Understanding and Representing Privacy Requirements in the Internet-of-Things. Journal of Artificial Intelligence Research. 2023. Vol. 76. P. 163–192. URL: https://jair.org/index.php/jair/article/view/14000.
11. Souag A., Mazo R., Salinesi C., Comyn-Wattiau I. Using the AMAN-DA method to generate security requirements: a case study in the maritime domain. Requirements Eng. 2018. Vol. 23, Issue 4. P. 557–580. DOI: 10.1007/s00766-017-0279-5.
12. Rueda-Rueda J.S., Jesus M.T., Portocarrero J.M.T. Framework-based security measures for Internet of Thing: A literature review. Open Computer Science. 2021. Vol. 11, N 1. P. 346–354. DOI: 10.1515/comp-2020-0220.
13. Kovalenko O., Kovalenko T. Knowledge Model and Ontology for Security Services. 2018 IEEE First International Conference on System Analysis & Intelligent Computing (SAIC). Kyiv, Ukraine, 2018. P. 1–4. DOI: 10.1109/SAIC.2018.8516875.
14. Mozzaquatro B.A., Melo R., Agostinho C., Jardim-Goncalves R. An ontology-based security framework for decision-making in industrial systems. 2016 4th International Conf. on Model-Driven Engineering and Software Development (MODELSWARD). Rome, Italy, 2016. P. 779–788.
15. Souag A., Salinesi C., Mazo R., Comyn-Wattiau I. A Security Ontology for Security Requirements Elicitation / F. Piessens, J. Caballero, N. Bielova (eds.). Engineering Secure Software and Systems (ESSoS 2015). Springer, Cham, 2015. Vol. 8978. P. 157–177. DOI: 10.1007/978-3-319-15618-7_13.
16. Zhang S., Bai G., Li H., Liu P., Zhang M., Li S. Multi-Source Knowledge Reasoning for Data-Driven IoT Security. Sensors. 2021. Vol. 21. P. 7579. DOI: 10.3390/s21227579.
17. Damor D. IoT Security Threats and Solutions. URL: https://www.einfochips.com/blog/iot-security-threats-and-solutions/.
18. Banu N.M., Sujatha C. IoT Architecture a Comparative Study. International Journal of Pure and Applied Mathematics. 2017. Vol. 117, N 8. P. 45–49. DOI: 10.12732/ijpam.v117i8.10.
19. Cosman E., Gilsinn J., Hirsch F., Kobes P., Rudina E., Zahavi R. Industry IoT Consortium (IIC) and ISA. IoT Security Maturity Model: ISA/IEC 62443 Mappings for Asset Owners. Product Suppliers and System Integrators. 2023/08/09. URL: https://www.isagca.org/hubfs/2023%20ISA%20Website%20Redesigns/ISAGCA/PDFs/SMM-62443-Asset-Owner-Product-Supplier-Service_20230809.pdf.
Published
Issue
Section
License
Copyright (c) 2023 Mathematical Machines and Systems

This work is licensed under a Creative Commons Attribution 4.0 International License.
