A model-based security toolkit for the internet of things

Proceedings - 9th International Conference on Availability, Reliability and Security, ARES 2014

Volumn , Issue , 2014, Pages 78-87

  Neisse, Ricardo ^a   Fovino, Igor Nai ^a   Baldini, Gianmarco ^a   Stavroulaki, Vera ^b   Vlacheas, Panagiotis ^b   Giaffreda, Raffaele ^c  

^a JOINT RESEARCH CENTRE   (Italy)

^b UNIVERSITY OF PIRAEUS   (Greece)

^c CREATE NET   (Italy)

Author keywords

Internet of things; Management; Security

Indexed keywords

MANAGEMENT;

CONTROL AND PROTECTION; DEVICES AND SYSTEMS; INTERNET OF THING (IOT); MANAGEMENT FRAMEWORKS; MODEL-BASED OPC; SECURITY; SECURITY POLICY; USER DATA;

INTERNET OF THINGS;

EID: 84920575454     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2014.17     Document Type: Conference Paper

References (27)

1. P. F. Harald Sundmaeker, Patrick Guillemin and S. Woelffle, "Cerp-iot cluster, visions and challenges for realising the internet of things," 2010.
2. R. Neisse, A. Pretschner, and V. D. Giacomo, "A trustworthy usage control enforcement framework," Proceedings 6th International Conference on Availability, Reliability and Security (ARES), 2011.
3. R. Neisse, A. Pretschner, and V. D. Giacomo, "A trustworthy usage control enforcement framework," International Journal of Mobile Computing and Multimedia Communications, 2013.
4. R. Neisse and J. Doerr, "Model-based specification and refinement of usage control policies," 11th International Conference on Privacy, Security and Trust (PST), 2013.
5. R. Neisse, D. Holling, and A. Pretschner, "Implementing trust in cloud infrastructures," 11th IEEE/ACM International Symposium on Cluster, Cloud and Grid Computing, 2011.
6. R. Neisse, P. D. Costa, M. Wegdam, and M. van Sinderen, "An information model and architecture for context-aware management domains," in POLICY. IEEE Computer Society, 2008, pp. 162-169.
7. G. Baldini, I. Kounelis, I. N. Fovino, and R. Neisse, "A framework for privacy protection and usage control of personal data in a smart city scenario," Critical Information Infrastructures Security, vol. 8328, pp. 212-217, 2013.
8. F. Schafrik, "A practical guide to developing enterprise architecture," Available at: http://www. ibm. com/ developerworks/rational/library/enterprise-architecturemaximum-value/, 2011.
9. P. Vlacheas, R. Giaffreda, V. Stavroulaki, D. Kelaidonis, V. Foteinos, G. Poulios, P. Demestichas, A. Somov, A. Biswas, and K. Moessner, "Enabling smart cities through a cognitive management framework for the internet of things," Communications Magazine, IEEE, vol. 51, no. 6, pp.-, 2013.
10. D. Miorandi, S. Sicari, F. D. Pellegrini, and I. Chlamtac, "Internet of things: Vision, applications and research challenges," Ad Hoc Networks, vol. 10, no. 7, pp. 1497-1516, 2012.
11. R. Roman, J. Zhou, and J. Lopez, "On the features and challenges of security and privacy in distributed internet of things," Computer Networks, vol. 57, no. 10, pp. 2266-2279, 2013.
12. W3C, "Sparql 1. 1 overview-w3c recommendation," Available at: http://www. w3. org/TR/sparql11-overview, 2013.
13. P. D. Costa, I. T. Mielke, I. Pereira, and J. P. A. Almeida, "A model-driven approach to situations: Situation modeling and rule-based situation detection," in EDOC. IEEE, 2012, pp. 154-163.
14. D. Quartel, "Action relations-basic design concepts for behaviour modelling and refinement," PhD Thesis University of Twente, 1998.
15. D. Quartel, M. Steen, S. Pokraev, and M. Sinderen, "Cosmo: A conceptual framework for service modelling and refinement," Information Systems Frontiers, vol. 9, no. 2-3, pp. 225-244, 2007.
16. E. Bertino, E. Ferrari, and A. C. Squicciarini, "Trust-x: A peer-to-peer framework for trust establishment," IEEE Trans. Knowl. Data Eng., vol. 16, no. 7, pp. 827-842, 2004.
17. S. Braghin, I. Fovino, and A. Trombetta, "Advanced trust negotiation in critical infrastructures," in 1st Int. Conf. on Infrastructure Systems and Services: Building Networks for a Brighter Future (INFRA), 2008, pp. 1-6.
18. Mosquitto, "An open source mqtt v3. 1/v3. 1. 1 broker," Available at: http://mosquitto. org, 2014.
19. P. O. Meredith, D. Jin, D. Griffith, F. Chen, and G. Rosu, "An overview of the mop runtime verification framework," Int. J. Softw. Tools for Technol. Transf., 2011, available at: http://fsl. cs. uiuc. edu.
20. D. Jin, "Making runtime monitoring of parametric properties practical," Ph. D. dissertation, University of Illinois at Urbana-Champaign, August 2012.
21. E. Rissanen, "extensible access control markup language v3. 0," Available at: http://docs. oasis-open. org, 2010.
22. S. Paul, J. Pan, and R. Jain, "Architectures for the future networks and the next generation internet: A survey," Computer Communications, vol. 34, no. 1, pp. 2-42, 2011.
23. S. Gusmeroli, S. Piccione, and D. Rotondi, "A capabilitybased security approach to manage access control in the internet of things," Mathematical and Computer Modelling, vol. 58, no. 5, pp. 1189-1205, 2013.
24. E. TS, "102 690 machine-to-machine communications m2m functional architecture," ETSI, 2011.
25. E. TS, "102 921 machine-to-machine communications m2m mia dia and mid interfaces," ETSI, 2012.
26. OMA, "Lightweight machine to machine technical specification oma ts lightweightm2m id 20130717, draft version 1. 0," OMA, 2013.
27. J. Irwin, "Digital rights management: The open mobile alliance {DRM} specifications," Information Security Technical Report, vol. 9, no. 4, pp. 22-31, 2004.