Architecture and Knowledge-Driven Self-Adaptive Security in Smart Space

Evesti, Antti; Suomalainen, Jani; Ovaska, Eila

doi:10.3390/computers2010034

Cited by 20 publications

(12 citation statements)

References 45 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…While a great amount of data is sensed from an urban environment for risk management, employing a risk-adaptive security model that and allows collaboration in risk-management is critical [26]. Therefore, proper access control mechanisms must be in place for maintaining privacy and security to avoid unauthorized access to data, and to prevent users, processes or applications to misuse data in smart spaces [27].…”

Section: Related Workmentioning

confidence: 99%

A web-based cooperative tool for risk management with adaptive security

Fugini

Teimourikia

Hadjichristofi

2016

Future Generation Computer Systems

View full text Add to dashboard Cite

Risk management can benefit from Web-based tools fostering actions for treating risks in an environment, while having several individuals collaborating to face the endeavors related to risks. During the intervention, the security rules in place to preserve resources from unauthorized access, might need to be modified on the fly, e.g., increasing the privileges of risk managers or letting rescue teams view the exact position of the victims. Modifications should respect the overall security policies and avoid security conflicts. This paper presents a dynamic access control model for environmental risks involving physical resources. Data structures included in our Web application to represent both risk and security are given. To keep the dynamic security rules compliant with overall organization security objectives, we consider rules grouped in Access Control Domains so that changes do not create security conflicts during collaboration in risk management. Considering work environments as an example, risk and access control models are introduced. Security is built on the ABAC (Attribute Based Access Control) paradigm. A Risk Management System (RMS) is illustrated: it captures events, signals potential risks, and outputs strategies to prevent the risk. Dynamic authorization is included in the RMS to vary subjects' privileges on physical resources based on risk level, people position and so on. These concepts are implemented in a prototype Web application appearing as a Web Dashboard for risk management

show abstract

Section: Related Workmentioning

confidence: 99%

A web-based cooperative tool for risk management with adaptive security

Fugini

Teimourikia

Hadjichristofi

2016

Future Generation Computer Systems

View full text Add to dashboard Cite

show abstract

“…Antii et al [37] proposed a self-adaptive architecture for smart spaces, which utilizes an information security measurement ontology (ISMO) to carry out the adaptation process. The model is inspired from IBM's MAPE-K control loop [38].…”

Section: Related Workmentioning

confidence: 99%

EDAS: An Evaluation Prototype for Autonomic Event-Driven Adaptive Security in the Internet of Things

Aman

Snekkenes

2015

Future Internet

View full text Add to dashboard Cite

In Internet of Things (IoT), the main driving technologies are considered to be tiny sensory objects. These objects cannot host traditional preventive and detective technologies to provide protection against the increasing threat sophistication. Furthermore, these solutions are limited to analyzing particular contextual information, for instance network information or files, and do not provide holistic context for risk analysis and response. Analyzing a part of a situation may lead to false alarms and later to unnecessary and incorrect configurations. To overcome these concerns, we proposed an event-driven adaptive security (EDAS) model for IoT. EDAS aims to observe security events (changes) generated by various things in the monitored IoT environment, investigates any intentional or unintentional risks associated with the events and adapts to it autonomously. It correlates different events in time and space to reduce any false alarms and provides a mechanism to predict attacks before they are realized. Risks are responded to autonomically by utilizing a runtime adaptation ontology. The mitigation action is chosen after assessing essential information, such as the risk faced, user preferences, device capabilities and service requirements. Thus, it selects an optimal mitigation action in a particular adverse situation. The objective of this paper is to investigate EDAS feasibility and its aptitude as a real-world prototype in a remote patient monitoring context. It details how EDAS can be a practical choice for IoT-eHealth in terms of the security, design and implementation features it offers as compared to traditional security controls. We have explained the prototype's major components and have highlighted the key technical challenges.

show abstract

“…The vision was inspired by our experience with software product families, model-driven development, ontology-oriented design and our first steps in the development of smart spaces [1]. Recently, we have developed an adaptation framework for the run-time quality management of situation-based services [28], [29]. However, there are still some obstacles for dynamic and intelligent applications.…”

Section: B Our Earlier Work On Model and Knowledge Driven Software En...mentioning

confidence: 99%

“…Thus, the analysis rules are primarily static, i.e., they are predefined in the analysis models referred in the ontology. However, the link to the relevant analysis model can be changed at run-time, and therefore new analysis models can be added to the running systems [29].…”

Section: Pse: Development Phase a Behavior-driven Application Develop...mentioning

confidence: 99%

Piecemeal Development of Intelligent Applications for Smart Spaces

Ovaska

Kuusijärvi

2014

IEEE Access

Self Cite

View full text Add to dashboard Cite

Software development is facing new challenges as a result of evolution toward integration and collaboration-based service engineering, which embody high degrees of dynamism both at design time and run-time. Short times-to-market require cost reduction by maximizing software reuse. Openness for new innovations presumes a flexible development platform and fast software engineering practices. User satisfaction assumes situation-based applications of high quality. The main contribution of this paper is the piecemeal service engineering (PSE) approach developed for and tested in application development for smart spaces. The intent of PSE is to maximize the reuse of existing knowledge of business and design practices and existing technical assets in the development of new smart-space applications. Business knowledge is mostly informal and domain-dependent, but architectural knowledge is generic, at least semiformal, and represented in principles, ontologies, patterns, and rules that together form a reusable architectural knowledge base for fast smart-space application development. The PSE facilitates the incremental development of intelligent applications by supporting abstraction, aggregation, and adaptability in smart-space development.INDEX TERMS Service engineering, semantic, dynamic, architectural knowledge, reuse.

show abstract

Architecture and Knowledge-Driven Self-Adaptive Security in Smart Space

Cited by 20 publications

References 45 publications

A web-based cooperative tool for risk management with adaptive security

A web-based cooperative tool for risk management with adaptive security

EDAS: An Evaluation Prototype for Autonomic Event-Driven Adaptive Security in the Internet of Things

Piecemeal Development of Intelligent Applications for Smart Spaces

Contact Info

Product

Resources

About