IoT security certifications: Challenges and potential approaches

• Tipo: Artigo em Revista Científica Internacional
• Data: 2022

Autores

Cirne, A (Autor) Outra; Sousa, PR (Autor) Outra; Resende, JS (Autor) FCUP; antunes, l (Autor) FCUP

Revista

Título: COMPUTERS & SECURITY

Vol. 116

ISSN: 0167-4048

Indexação

ISI Web of Knowledge - 17 Citações

Scopus - 36 Citações

Outras Informações

ID Authenticus: P-00W-5HB

DOI: 10.1016/j.cose.2022.102669

Abstract (EN): The Internet of Things (IoT) has changed how we interact with the world around us. Many devices are moving from offline to online mode, connecting between them and the Internet, offering more functionality to users. Despite the increase in the quality of life for users provided by IoT devices, it is also necessary to establish trust in the privacy and security of end-users. With this level of connectivity, the amount of data exchanged between devices also increases, inducing malicious activities. One of the main problems is the lack of regulation in the IoT industry, especially between different manufacturers. There are no formal security rules, and manufacturers may not choose to install security mechanisms. Therefore, it is necessary to promote the adoption of security measures. One way to do this is by using IoT devices and systems certification. In recent years, IoT certifications have emerged. Meanwhile, the European Union has passed the Cyber Security Act to unify and regulate security certifications in member states. Our work collects the requirements that different IoT environments and application scenarios impose on certifications and discusses the current certifications' status according to those requirements. In addition, we also explored how EU measures apply to IoT and, where applicable, how certifications implement them, highlighting future research challenges.

Idioma: Inglês

Tipo (Avaliação Docente): Científica

Nº de páginas: 15