IoT context-sharing platforms are an essential component of today's interconnected IoT deployments with their security affecting the entire deployment and the critical infrastructure adopting IoT. We report on a lack of systematic approach to the security of IoT context-sharing platforms and propose the need for a methodological and systematic alternative to evaluate the existing solutions and develop `secure-by-design' solutions. We have identified the key components of a generic IoT context-sharing platform and propose using MITRE ATT&CK for threat modelling of such platforms.
@article{arxiv.2407.05290,
title = {Lack of Systematic Approach to Security of IoT Context Sharing Platforms},
author = {Mohammad Goudarzi and Arash Shaghaghi and Simon Finn and Sanjay Jha},
journal= {arXiv preprint arXiv:2407.05290},
year = {2024}
}
Comments
Accepted to 21st Annual International Conference on Privacy, Security, and Trust (PST2024)