IoT Security-Quality-Metrics Method and Its Conformity with Emerging Guidelines

Abstract

This study proposes a security-quality-metrics method tailored for the Internet of things (IoT) and evaluates conformity of the proposed approach with pertinent cybersecurity regulations and guidelines for IoT. Cybersecurity incidents involving IoT devices have recently come to light; consequently, IoT security correspondence has become a necessity. The ISO 25000 series is used for software; however, the concept of security as a quality factor has not been applied to IoT devices. Because software vulnerabilities were not the device vendors’ responsibility as product liability, most vendors did not consider the security capability of IoT devices as part of their quality control. Furthermore, an appropriate IoT security-quality metric for vendors does not exist; instead, vendors have to set their security standards, which lack consistency and are difficult to justify by themselves. To address this problem, the authors propose a universal method for specifying IoT security-quality metrics on a globally accepted scale, inspired by the goal/question/metric (GQM) method. The method enables vendors to verify their products to conform to the requirements of existing baselines and certification programs and to help vendors to tailor their quality requirements to meet the given security requirements. The IoT users would also be able to use these metrics to verify the security quality of IoT devices.

KMFA2 based QoS improvement for multi‐channel IoT networks

“…8,9 While some work has been done to support QoS in WSNs and the Internet, much further research is required in the field of QoS support in the IoT. [10][11][12] F I G U R E 1 A typical fuzzy logic processing system 13 Fuzzy logic has become a de-facto processing system while designing architectures that involve complex but non-quantifiable data. For instance, if one wants to know the current temperature of the room, then they will not be able to give an exact value.…”

“…It includes a level of service, space location, data accuracy, and other factors in addition to time delay, packet loss rate, and transmission power in transmission networks 8,9 . While some work has been done to support QoS in WSNs and the Internet, much further research is required in the field of QoS support in the IoT 10–12 …”