Addressing the Security Gap in IoT: Towards an IoT Cyber Range

被引:12
|
作者
Nock, Oliver [1 ]
Starkey, Jonathan [1 ]
Angelopoulos, Constantinos Marios [1 ]
机构
[1] Bournemouth Univ, Fac Sci & Technol, Dept Comp & Informat, Poole BH12 5BB, Dorset, England
基金
欧盟地平线“2020”;
关键词
cyber-range; IoT; testbed; cyber-security;
D O I
10.3390/s20185439
中图分类号
O65 [分析化学];
学科分类号
070302 ; 081704 ;
摘要
The paradigm of Internet of Things has now reached a maturity level where the pertinent research goal is the successful application of IoT technologies in systems of high technological readiness level. However, while basic aspects of IoT connectivity and networking have been well studied and adequately addressed, this has not been the case for cyber security aspects of IoT. This is nicely demonstrated by the number of IoT testbeds focusing on networking aspects and the lack of IoT testbeds focusing on security aspects. Towards addressing the existing and growing skills-shortage in IoT cyber security, we present an IoT Cyber Range (IoT-CR); an IoT testbed designed for research and training in IoT security. The IoT-CR allows the user to specify and work on customisable IoT networks, both virtual and physical, and supports the concurrent execution of multiple scenarios in a scalable way following a modular architecture. We first provide an overview of existing, state of the art IoT testbeds and cyber security related initiatives. We then present the design and architecture of the IoT Cyber Range, also detailing the corresponding RESTful APIs that help de-associate the IoT-CR tiers and obfuscate underlying complexities. The design is focused around the end-user and is based on the four design principles for Cyber Range development discussed in the introduction. Finally, we demonstrate the use of the facility via a red/blue team scenario involving a variant of man-in-the-middle attack using IoT devices. Future work includes the use of the IoT-CR by cohorts of trainees in order to evaluate the effectiveness of specific scenarios in acquiring IoT-related cyber-security knowledge and skills, as well as the IoT-CR integration with a pan-European cyber-security competence network.
引用
收藏
页码:1 / 19
页数:19
相关论文
共 50 条
  • [31] IoT Security
    Jamali M.A.J.
    Heidari A.
    Allahverdizadeh P.
    Norouzi F.
    Bahrami B.
    EAI/Springer Innovations in Communication and Computing, 2020, : 33 - 83
  • [32] Addressing IoT: Towards Material-Centered Interaction Design
    Wiberg, Mikael
    HUMAN-COMPUTER INTERACTION: THEORIES, METHODS, AND HUMAN ISSUES, HCI INTERNATIONAL 2018, PT I, 2018, 10901 : 198 - 207
  • [33] Towards a Framework for Testing the Security of IoT Devices Consistently
    Lally, Gurjan
    Sgandurra, Daniele
    EMERGING TECHNOLOGIES FOR AUTHORIZATION AND AUTHENTICATION, ETAA 2018, 2018, 11263 : 88 - 102
  • [34] Towards the Open Ontology for IoT Ecosystem's Security
    Tomicic, Igor
    Grd, Petra
    2020 43RD INTERNATIONAL CONVENTION ON INFORMATION, COMMUNICATION AND ELECTRONIC TECHNOLOGY (MIPRO 2020), 2020, : 1064 - 1069
  • [35] Towards Model-Centric Security for IoT Systems
    Guo, Yunqi
    Tan, Zhaowei
    Lu, Songwu
    2020 29TH INTERNATIONAL CONFERENCE ON COMPUTER COMMUNICATIONS AND NETWORKS (ICCCN 2020), 2020,
  • [36] Towards decentralized IoT security enhancement: A blockchain approach
    Qian, Yongfeng
    Jiang, Yingying
    Chen, Jing
    Zhang, Yu
    Song, Jeungeun
    Zhou, Ming
    Pustisek, Matevz
    COMPUTERS & ELECTRICAL ENGINEERING, 2018, 72 : 266 - 273
  • [37] Complexity of Cyber Security Architecture for IoT Healthcare Industry: A Comparative Study
    Alharam, Aysha K.
    El-madany, Wael
    2017 5TH INTERNATIONAL CONFERENCE ON FUTURE INTERNET OF THINGS AND CLOUD WORKSHOPS (FICLOUDW) 2017, 2017, : 246 - 250
  • [38] The baseline of global consumer cyber security standards for IoT: quality evaluation
    Olga Greuter, Kes
    Sarmah, Dipti Kapoor
    Journal of Cyber Security Technology, 2022, 6 (04) : 175 - 200
  • [39] Resource Allocation for Threat Defense in Cyber-security IoT system
    Wang, Manxi
    Liu, Bingjie
    Xu, Haitao
    2019 28TH WIRELESS AND OPTICAL COMMUNICATIONS CONFERENCE (WOCC), 2019, : 1 - 3
  • [40] Cyber Security Challenges of Deploying IoT in Smart Cities for Healthcare Applications
    Alromaihi, Sara
    Elmedany, Wael
    Balakrishna, Chitra
    2018 IEEE 6TH INTERNATIONAL CONFERENCE ON FUTURE INTERNET OF THINGS AND CLOUD WORKSHOPS (W-FICLOUD 2018), 2018, : 140 - 145