Do You Trust Your Device? Open Challenges in IoT Security Analysis

Lorenzo Binosi, Pietro Mazzini, Alessandro Sanna, Michele Carminati, Giorgio Giacinto, Riccardo Lazzeretti, Stefano Zanero, Mario Polino, Emilio Coppa, Davide Maiorca

2024

Abstract

Several critical contexts, such as healthcare, smart cities, drones, transportation, and agriculture, nowadays rely on IoT, or more in general embedded, devices that require comprehensive security analysis to ensure their integrity before deployment. Security concerns are often related to vulnerabilities that result from inadequate coding or undocumented features that may create significant privacy issues for users and companies. Current analysis methods, albeit dependent on complex tools, may lead to superficial assessments due to compatibility issues, while authoritative entities struggle with specifying feasible firmware analysis requests for manufacturers within operational contexts. This paper urges the scientific community to collaborate with stakeholders—manufacturers, vendors, security analysts, and experts—to forge a cooperative model that clarifies manufacturer contributions and aligns analysis demands with operational constraints. Aiming at a modular approach, this paper highlights the crucial need to refine security analysis, ensuring more precise requirements, balanced expectations, and stronger partnerships between vendors and analysts. To achieve this, we propose a threat model based on the feasible interactions of actors involved in the security evaluation of a device, with a particular emphasis on the responsibilities and necessities of all entities involved.

Paper Citation

in Harvard Style

Binosi L., Mazzini P., Sanna A., Carminati M., Giacinto G., Lazzeretti R., Zanero S., Polino M., Coppa E. and Maiorca D. (2024). Do You Trust Your Device? Open Challenges in IoT Security Analysis. In Proceedings of the 21st International Conference on Security and Cryptography - Volume 1: SECRYPT; ISBN 978-989-758-709-2, SciTePress, pages 568-575. DOI: 10.5220/0012856200003767

in Bibtex Style

@conference{secrypt24,
author={Lorenzo Binosi and Pietro Mazzini and Alessandro Sanna and Michele Carminati and Giorgio Giacinto and Riccardo Lazzeretti and Stefano Zanero and Mario Polino and Emilio Coppa and Davide Maiorca},
title={Do You Trust Your Device? Open Challenges in IoT Security Analysis},
booktitle={Proceedings of the 21st International Conference on Security and Cryptography - Volume 1: SECRYPT},
year={2024},
pages={568-575},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0012856200003767},
isbn={978-989-758-709-2},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 21st International Conference on Security and Cryptography - Volume 1: SECRYPT
TI - Do You Trust Your Device? Open Challenges in IoT Security Analysis
SN - 978-989-758-709-2
AU - Binosi L.
AU - Mazzini P.
AU - Sanna A.
AU - Carminati M.
AU - Giacinto G.
AU - Lazzeretti R.
AU - Zanero S.
AU - Polino M.
AU - Coppa E.
AU - Maiorca D.
PY - 2024
SP - 568
EP - 575
DO - 10.5220/0012856200003767
PB - SciTePress