Cyber-Assurance for the Internet of Things

Tyson T. Brooks is an Adjunct Professor in the School of Information Studies at Syracuse University; he also works with the Center for Information and Systems Assurance and Trust (CISAT) at Syracuse University, and is an information security technologist and science-practitioner. Dr. Brooks is the founder/Editor-in-Chief of the International Journal of Internet of Things and Cyber-Assurance, an associate editor for the Journal of Enterprise Architecture, the International Journal of Cloud Computing and Services Science, and the International Journal of Information and Network Security.

• List of Figures xiiiList of Tables xviiForeword xixPreface xxixAcknowledgments xxxiiiContributors xxxvAcronyms xliIntroduction xlviiPart I Embedded Design Security 11 Certified Security by Design for the Internet of Things 3Shiu-Kai Chin1.1 Introduction 31.2 Lessons from the Microelectronics Revolution 31.3 Certified Security by Design 51.4 Chapter Outline 91.5 An Access-Control Logic 91.6 An Introduction to HOL 171.7 The Access-Control Logic in HOL 251.8 Cryptographic Components and Their Models in Higher-Order Logic 301.9 Cryptographic Hash Functions 331.10 Asymmetric-Key Cryptography 331.11 Digital Signatures 361.12 Adding Security to State Machines 381.13 A Networked Thermostat Certified Secure by Design 491.14 Thermostat Use Cases 521.15 Security Contexts for the Server and Thermostat 561.16 Top-Level Thermostat Secure-State Machine 581.17 Refined Thermostat Secure-State Machine 671.18 Equivalence of Top-Level and Refined Secure-State Machines 811.19 Conclusions 84Appendix 86References 992 Cyber-assurance Through Embedded Security for The Internet of Things 101Tyson T. Brooks and Joon Park2.1 Introduction 1012.2 Cyber-Security and Cyber-Assurance 1062.3 Recognition, Fortification, Re-Establishment, Survivability 1082.4 Conclusion 120References 1223 A Secure Update Mechanism for Internet of Things Devices 129Martin Goldberg3.1 Introduction 1293.2 Importance of IOT Security 1303.3 Applying the Defense In-Depth Strategy for Updating 1313.4 A Standards Approach 1323.5 Conclusion 134References 135Part II Trust Impact 1374 Security and Trust Management for the Internet of Things: An Rfid and Sensor Network Perspective 139M. Bala Krishna4.1 Introduction 1394.2 Security and Trust in the Internet of Things 1424.3 Radio Frequency Identification: Evolution and Approaches 1474.4 Security and Trust in Wireless Sensor Networks 1514.5 Applications of Internet of Things and RFID in Real-Time Environment 1564.6 Future Research Directions and Conclusion 158References 1595 THE IMPACT OF IoT DEVICES ON NETWORK TRUST Boundaries 163Nicole Newmeyer5.1 Introduction 1635.2 Trust Boundaries 1645.3 Risk Decisions and Conclusion 173References 174Part III Wearable Automation Provenance 1756 WEARABLE IoT COMPUTING: INTERFACE, EMOTIONS, Wearer’s Culture, and Security/privacy Concerns 177Robert McCloud, Martha Lerski, Joon Park, and Tyson T. Brooks6.1 Introduction 1776.2 Data Accuracy in Wearable Computing 1786.3 Interface and Culture 1786.4 Emotion and Privacy 1796.5 Privacy Protection Policies for Wearable Devices 1816.6 Privacy/Security Concerns About Wearable Devices 1826.7 Expectations About Future Wearable Devices 183References 1847 ON VULNERABILITIES OF IoT-BASED Consumer-oriented Closed-loop Control Automation Systems 187Martin Murillo7.1 Introduction 1877.2 Industrial Control Systems and Home Automation Control 1897.3 Vulnerability Identification 1937.4 Modeling and Simulation of Basic Attacks to Control Loops and Service Providers 1987.5 Illustrating Various Attacks Through a Basic Home Heating System Model 2007.6 A Glimpse of Possible Economic Consequences of Addressed Attacks 2037.7 Discussion and Conclusion 205References 2068 Big Data Complex Event Processing for Internet Of Things Provenance: Benefits for Audit, Forensics, and Safety 209Mark Underwood8.1 Overview of Complex Event Processing 2098.2 The Need: IoT Security Challenges in Audit, Forensics, and Safety 2118.3 Challenges to CEP Adoption in IoT Settings 2138.4 CEP and IoT Security Visualization 2158.5 Summary 2178.6 Conclusion 219References 220Part IV Cloud Artificial Intelligence Cyber-physical Systems 2259 a Steady-state Framework for Assessing Security Mechanisms in a Cloud-of-things Architecture 227Tyson T. Brooks and Lee McKnightVariable Nomenclature 2279.1 Introduction 2289.2 Background 2299.3 Establishing a Framework for CoT Analysis 2329.4 The CoT Steady-State Framework 2389.5 Conclusion 244References 24510 An Artificial Intelligence Perspective on Ensuring Cyber-assurance for the Internet Of Things 249Utku Köse10.1 Introduction 24910.2 AI-Related Cyber-Assurance Research for the IoT 25010.3 Multidisciplinary Intelligence Enabling Opportunities with Ai 25210.4 Future Research on AI-Based Cyber-Assurance for IoT 25410.5 Conclusion 255References 25511 Perceived Threat Modeling for Cyber-physical Systems 257Christopher Leberknight11.1 Introduction 25711.2 Overview of Physical Security 25911.3 Relevance to Grounded Theory 26111.4 Theoretical Model Construction 26211.5 Experiment 26311.6 Results 26711.7 Discussion 27511.8 Future Research 27611.9 Conclusion 278References 279AppendicesA List of Ieee Internet of Things Standards 283B Glossary 319C Csbd Thermostat Report 333D Csbd Access-control Logic Report 415Bibliography 433Index 457