Premium
Open challenges in vetting the internet‐of‐things
Author(s) -
Maamar Zakaria,
Kajan Ejub,
Asim Muhammad,
Baker Shamsa Thar
Publication year - 2019
Publication title -
internet technology letters
Language(s) - English
Resource type - Journals
ISSN - 2476-1508
DOI - 10.1002/itl2.129
Subject(s) - vetting , exploit , computer security , internet of things , the internet , internet privacy , computer science , process (computing) , focus (optics) , world wide web , physics , optics , operating system
Internet‐of‐Thing (IoT) is a rapid‐emerging technology that exploits the concept of internetwork to connect things such as physical devices and objects together. A huge number of things (6.4 billion are in use in 2016) are already acting without direct human control raising a lot of concerns about the readiness and appropriateness of existing security practices, techniques, and tools to secure the data collected and protect people's private lives. As a first step, this paper presses the importance of having a dedicated process for vetting IoT (by analogy to vetting mobile apps) with focus on exposing things' vulnerabilities that could be the primary source of attacks. These vulnerabilities are identified according to things' duties decomposed into sensing, actuating, and communicating. A set of questions shed light on things' vulnerabilities per type of duty.