A Framework Addressing Challenges in Cybersecurity Testing of IoT Ecosystems and Components

Steve Taylor, Martin Gilje Jaatun, Alan Mc Gibney, Robert Seidl, Pavlo Hrynchenko, Dmytro Prosvirin, Rosella Mancilla

2024

Abstract

This paper describes challenges within IoT ecosystems from the perspective of cybersecurity testing along with a proposed approach to address them that will be investigated in a recently started Horizon Europe project named TELEMETRY. The key observations regarding the design of the framework are summarised as follows. There is a need to consider the full lifecycle of IoT components – at their design time, their integration into systems, and operation of those systems. Threats and risks can propagate when components are connected together in systems - vulnerabilities in one component can affect other components in a system. IoT devices present limitations to current testing and management due to geographical distribution, opacity and limited processing power. Risk assessment fulfils an important requirement because it enables assessment of what elements are important to the system’s stakeholders, how these elements may be compromised, and how the compromises may be controlled. Feedback from operational monitoring of IoT devices can inform firmware updates / patches to the devices but there is a significant challenge in rolling out these patches to multiple low-power devices geographically distributed.

Paper Citation

in Harvard Style

Taylor S., Gilje Jaatun M., Mc Gibney A., Seidl R., Hrynchenko P., Prosvirin D. and Mancilla R. (2024). A Framework Addressing Challenges in Cybersecurity Testing of IoT Ecosystems and Components. In Proceedings of the 9th International Conference on Internet of Things, Big Data and Security - Volume 1: IoTBDS; ISBN 978-989-758-699-6, SciTePress, pages 226-234. DOI: 10.5220/0012676300003705

in Bibtex Style

@conference{iotbds24,
author={Steve Taylor and Martin Gilje Jaatun and Alan Mc Gibney and Robert Seidl and Pavlo Hrynchenko and Dmytro Prosvirin and Rosella Mancilla},
title={A Framework Addressing Challenges in Cybersecurity Testing of IoT Ecosystems and Components},
booktitle={Proceedings of the 9th International Conference on Internet of Things, Big Data and Security - Volume 1: IoTBDS},
year={2024},
pages={226-234},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0012676300003705},
isbn={978-989-758-699-6},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 9th International Conference on Internet of Things, Big Data and Security - Volume 1: IoTBDS
TI - A Framework Addressing Challenges in Cybersecurity Testing of IoT Ecosystems and Components
SN - 978-989-758-699-6
AU - Taylor S.
AU - Gilje Jaatun M.
AU - Mc Gibney A.
AU - Seidl R.
AU - Hrynchenko P.
AU - Prosvirin D.
AU - Mancilla R.
PY - 2024
SP - 226
EP - 234
DO - 10.5220/0012676300003705
PB - SciTePress