Application of a Human-Centric Approach in Security by Design for IoT Architecture Development

Abstract

The aim of this paper is to show the need for a comprehensive approach to studying cybersecurity in order to get a focus on both, technological factors and the human aspect in development a user level of IoT Reference Architecture. The author presents a methodology for researching the capacity of users to manage their digital identity and operate in a safe and secure cyber-physical environment. For this purpose, an approach is proposed, that is based on a defined survey research targeting personnel and individual users operating in cyber-physical environment. Based on the analysed survey results and formed observations, the paper suggests solutions for improving the competences of users in cyberspace and increase their cyber awareness. As a practical implementation of the proposed methodology, the author presents a developed Cyber Awareness platform. Its main purpose is to provide information and resources on cybersecurity and IoT security, and to be the main point of knowledge access. The portal also provides opportunities to test users’ cyber knowledge, participate in public survey related to cyber topics, share and exchange information, opinions and useful practices on cyber incidents and cyber knowledge.