Intro
About this Book
Contents
List of Figures
List of Tables
Chapter 1: Internet of Things Cybersecurity Paradigm Shift, Threat Matrix and Practical Taxonomy
1.1 Cybersecurity Threats Taxonomy for the Internet of Things
1.2 Traditional Cybersecurity Threat Matrix
1.3 Internet of Things Cybersecurity Paradigm Shift
1.3.1 Internet of Things Proxy Attacks
1.3.2 Internet of Things Target Attacks
1.4 New Cybersecurity Threat Matrix
1.5 Conclusion
Chapter 2: Privacy and Security Threats on the Internet of Things
2.1 New Perspective on Protection of IoT Systems
2.2 Related Work 2.3 New Security and Privacy Threats in IoT2.4 Cyberthreat Analysis
2.4.1 Life Cycle of Cyberattacks
2.4.2 Security Objectives for IoT/CPS
2.4.3 Threat Actors
2.4.4 Attack Patterns
2.4.5 Major Security Vulnerabilities
2.4.6 Main Threats in IoT/CPS
2.4.7 Security Threats on Physical Layer
2.4.8 Security Threats of Network Layer
2.4.9 Security Threats of Application Layer
2.5 Common Countermeasures to Mitigate Threats in IoT/ CPS
2.6 Major Privacy Threats in IoT
2.7 Related Security Frameworks
2.7.1 OWASP IoT
2.7.2 oneM2M
2.7.3 GSMA IoT Security Guidelines 2.7.4 ANASTACIA Project Security Framework2.7.5 ARMOUR Project Framework
2.8 Conclusion
References
Chapter 3: End-Node Security
3.1 Introduction
3.2 Security Bootstrapping and Commissioning
3.2.1 What is Bootstrapping
3.2.2 IoT Device Life Cycle
3.2.3 Generic Bootstrapping Framework
3.3 Setting the Bases for Secure Communications
3.3.1 Authentication, Authorisation and Accounting (AAA)
3.3.2 Extensible Authentication Protocol (EAP)
3.3.3 Transporting EAP in IoT
Protocol for Carrying Authentication for Network Access (PANA)
CoAP-EAP
3.4 Instantiating Bootstrapping in IoT 3.4.1 After the Bootstrapping: The Operational Phase of the IoT Device3.4.2 Enabling Security Association Protocols (SAPs)
3.4.3 Communication Between IoT Devices
3.4.4 Evaluation of EAP Lower Layers PANA and CoAP-EAP
Overhead as EAP Lower Layer
Time, Success Ratio and Energy Consumption
3.4.5 Conclusions About Security Bootstrapping and Commissioning
3.5 Intrusion Detection Systems for the Internet of Things
3.5.1 Introduction of the Challenge
3.5.2 IoT Environment and the Need for IDS
Shortcomings of Prevention Systems in the IoT World IoT-Induced Challenges for the Development of IoT-Specific IDSsLimitations of the Existing Art
Synthesis
3.5.3 Architectural Solution
Probes Location
Security Enforcement
Detection Methods
Signature-Based Detection
Behavioural Analysis Detection
3.5.4 Reaction Systems
Passive Reaction Subsystems
Active Reaction Subsystems
3.5.5 Deployment Scenario and Validation
3.5.6 Conclusion
References
Chapter 4: IoT and Cloud Computing: Specific Security and Data Protection Issues
4.1 Introduction
4.2 Cloud Computing
4.2.1 Subjects of the Cloud Computing