Optimal security design in the Internet of Things
Hunor Sándor, Gheorghe Sebestyén-Pál · 2017
Internet of Things (IoT) is a rapidly developing technology that provides comfort, safety, and economy in humans' everyday life. Due to its close relation with humans' living environment, this technology may submit the private life to increased threats. Therefore, security is a key factor in IoT. In this work, we propose a mechanism that, by applying threat and risk modeling, provides a tool for the security experts that assists them in the design phase of the IoT systems. The proposed methodology considers different security profiles for the different components of the system and takes into account the installation costs and the associated risks of them. We define a risk aggregation scheme that can express the overall security level of the entire system in the form of a unified risk score. Furthermore, we define an optimization problem, that aims to determine the proper security configuration, i.e., security profile, for the required security level by decreasing the total costs.