IVQF_IoT: An intelligent vulnerability quantification framework for scoring internet of things vulnerabilities

Abstract

With time smart services have become more domineering than ever before however, the pertinent security considerations fade to correspond with growing heterogeneity in the internet of things (IoT) devices and new technologies coupled with resource constraints, crafting IoT-based systems more susceptible to cyber-attacks. To ensure a secure IoT environment, pro-active security mechanisms, like scanning vulnerabilities and prioritizing to remediate them timely, should be embedded in the system.Motivated by the facts, we in this paper, highlight the state of the art of several works trading with a common vulnerability scoring system (CVSS), its limitations, and the emendations recommended to conclude its maturity. CVSS is an industry standard that has been adopted worldwide to quantify the vulnerabilities in organizations for IT and IoT-based systems. The vulnerabilities mathematical score coalesces with environmental knowledge for finding attack paths and apt score for prioritization.The specific functionality and exclusive dynamics of IoT and cyber-physical systems in comparison to traditional computer networks, make the legacy cyber-security exemplars unfit for these advanced networks. This paper studies the relevance of CVSS for smart systems and present an intelligent vulnerability quantification framework for IoT systems grounded on the CVSS v3.1 framework with threat intelligence and machine learning models. Further by applying blockchain technology in the proposed framework, the issues concerning security, lack of trust, and privacy possibly will resolve by hiring a smart contract.

S3: Security Score System

“…To manage vulnerabilities in the cybersecurity scenario, two tools are crucial to classify and track existing vulnerabilities in systems and devices: CVSS (Common Vulnerability Scoring System) [11,12] and CVE (Common Vulnerabilities and Exposures) [13,14]. CVSS is a standardized system that allows to assess the vulnerabilities' severity based on metrics such as impact, exploitation, and attack complexity [15].…”

Smart Painting Exhibitions: Utilizing Internet of Things Technology Creating Interactive Art Spaces

“…Firstly, in-depth research on the design and implementation of intelligent painting exhibitions can provide new ideas and methods for the innovation and improvement of art exhibitions. Secondly, evaluating and summarizing the effect of intelligent painting exhibitions can provide a reference for managing and operating art exhibitions (Anand et al, 2022). Finally, promoting the successful experiences and practices of intelligent painting exhibitions can promote the integration of art science and technology and the development of cultural and creative industries.…”

An Overview of Safety and Security Analysis Frameworks for the Internet of Things

“…The existing safety and security analysis methods and techniques in the literature have been categorised into informal manual frameworks and MBSE approaches. Some of the notable manual frameworks are the Failure Mode Effect Analysis (FMEA), Fault Trees Analysis (FTA), Dynamic Fault Trees, Petri nets, Attack Trees (AT), Attack-Fault Trees, Attack-Defence Trees, Quantitative Attack Defence Trees, and Bowties, among others [29][30][31][32]. On the other hand, to meet the continuous requirements of systems development, some of the safety-critical domains, such as the automobile [33] and aerospace industries [34], as well as industrial control systems [35], have begun to explore the option of MBSE approaches.…”