Internet of Things Security and Data Protection

Description

Intro About this Book Contents List of Figures List of Tables Chapter 1: Internet of Things Cybersecurity Paradigm Shift, Threat Matrix and Practical Taxonomy 1.1 Cybersecurity Threats Taxonomy for the Internet of Things 1.2 Traditional Cybersecurity Threat Matrix 1.3 Internet of Things Cybersecurity Paradigm Shift 1.3.1 Internet of Things Proxy Attacks 1.3.2 Internet of Things Target Attacks 1.4 New Cybersecurity Threat Matrix 1.5 Conclusion Chapter 2: Privacy and Security Threats on the Internet of Things 2.1 New Perspective on Protection of IoT Systems 2.2 Related Work 2.3 New Security and Privacy Threats in IoT2.4 Cyberthreat Analysis 2.4.1 Life Cycle of Cyberattacks 2.4.2 Security Objectives for IoT/CPS 2.4.3 Threat Actors 2.4.4 Attack Patterns 2.4.5 Major Security Vulnerabilities 2.4.6 Main Threats in IoT/CPS 2.4.7 Security Threats on Physical Layer 2.4.8 Security Threats of Network Layer 2.4.9 Security Threats of Application Layer 2.5 Common Countermeasures to Mitigate Threats in IoT/ CPS 2.6 Major Privacy Threats in IoT 2.7 Related Security Frameworks 2.7.1 OWASP IoT 2.7.2 oneM2M 2.7.3 GSMA IoT Security Guidelines 2.7.4 ANASTACIA Project Security Framework2.7.5 ARMOUR Project Framework 2.8 Conclusion References Chapter 3: End-Node Security 3.1 Introduction 3.2 Security Bootstrapping and Commissioning 3.2.1 What is Bootstrapping 3.2.2 IoT Device Life Cycle 3.2.3 Generic Bootstrapping Framework 3.3 Setting the Bases for Secure Communications 3.3.1 Authentication, Authorisation and Accounting (AAA) 3.3.2 Extensible Authentication Protocol (EAP) 3.3.3 Transporting EAP in IoT Protocol for Carrying Authentication for Network Access (PANA) CoAP-EAP 3.4 Instantiating Bootstrapping in IoT 3.4.1 After the Bootstrapping: The Operational Phase of the IoT Device3.4.2 Enabling Security Association Protocols (SAPs) 3.4.3 Communication Between IoT Devices 3.4.4 Evaluation of EAP Lower Layers PANA and CoAP-EAP Overhead as EAP Lower Layer Time, Success Ratio and Energy Consumption 3.4.5 Conclusions About Security Bootstrapping and Commissioning 3.5 Intrusion Detection Systems for the Internet of Things 3.5.1 Introduction of the Challenge 3.5.2 IoT Environment and the Need for IDS Shortcomings of Prevention Systems in the IoT World IoT-Induced Challenges for the Development of IoT-Specific IDSsLimitations of the Existing Art Synthesis 3.5.3 Architectural Solution Probes Location Security Enforcement Detection Methods Signature-Based Detection Behavioural Analysis Detection 3.5.4 Reaction Systems Passive Reaction Subsystems Active Reaction Subsystems 3.5.5 Deployment Scenario and Validation 3.5.6 Conclusion References Chapter 4: IoT and Cloud Computing: Specific Security and Data Protection Issues 4.1 Introduction 4.2 Cloud Computing 4.2.1 Subjects of the Cloud Computing