Shielding IoT against Cyber‐Attacks: An Event‐Based Approach Using SIEM

López, Daniel Díaz; Uribe, María Blanco; Cely, Claudia Santiago; Torres, A.; Guataquira, Nicolas Moreno; Castro, Stefany Morón; Nespoli, Pantaleone; Mármol, Félix Gómez

doi:10.1155/2018/3029638

Cited by 45 publications

(18 citation statements)

References 43 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This new paradigm aims at converting real-world objects into smart objects [2], i.e., objects that communicate via the internet to create a common infrastructure that connects human-to-human, things-to-things and human-to-things [3]. IoT has rapidly started to involve multiple fields, such as healthcare, industry, urbanism, home appliances and so forth [4], reaching not just electronic devices but also merchandising, furniture, culture, landmarks and even food and clothing [5].…”

Section: Introductionmentioning

confidence: 99%

A Comprehensive Survey about Thermal Comfort under the IoT Paradigm: Is Crowdsensing the New Horizon?

Tomat

Ramallo-González

Skarmeta-Gómez

2020

Sensors

View full text Add to dashboard Cite

This paper presents a review of technologies under the paradigm 4.0 applied to the study of the thermal comfort and, implicitly, energy efficiency. The research is based on the analysis of the Internet of Things (IoT) literature, presenting a comparison among several approaches adopted. The central objective of the research is to outline the path that has been taken throughout the last decade towards a people-centric approach, discussing how users switched from being passive receivers of IoT services to being an active part of it. Basing on existing studies, authors performed what was a necessary and unprecedented grouping of the IoT applications to the thermal comfort into three categories: the thermal comfort studies with IoT hardware, in which the approach focuses on physical devices, the mimicking of IoT sensors and comfort using Building Simulation Models, based on the dynamic modelling of the thermal comfort through IoT systems, and Crowdsensing, a new concept in which people can express their sensation proactively using IoT devices. Analysing the trends of the three categories, the results showed that Crowdsensing has a promising future in the investigation through the IoT, although some technical steps forward are needed to achieve a satisfactory application to the thermal comfort matter.

show abstract

Section: Introductionmentioning

confidence: 99%

A Comprehensive Survey about Thermal Comfort under the IoT Paradigm: Is Crowdsensing the New Horizon?

Tomat

Ramallo-González

Skarmeta-Gómez

2020

Sensors

View full text Add to dashboard Cite

show abstract

“…Several proposals have arisen in the last years aiming at protecting IoT ecosystems [24]. Thus, for instance, [40] proposes a security architecture that is based on the use of security events. Such architecture relies on a multi-relation between these attack-related elements: (i) security events categories, providing information about the impact of an attack over a given IoT device; (ii) vulnerabilities, to explain the causes of the attack; and (iii) attack surfaces, yielding information on how the attack was conducted.…”

Section: State Of the Artmentioning

confidence: 99%

“…These detection tasks may conclude with the generation of Indicators of Compromise (IoC) and Indicators of Attack (IoA) that are used by BlockSIEM in the detection of an ongoing attack or to investigate a past attack sharing some common features with a known attack. External Threat Intelligence can also provide useful countermeasures for organizations to apply in the implementation of its cyber defense strategies, like Yara rules ( ), correlation rules, security policies, and statistics model [ 40 , 41 , 42 ]. Intelligence information (security feeds) delivered by an external Threat Intelligence provider is useful for BlockSIEM, as it could use them to analyze security events that exist in the blockchain and, consequently, detect IoT attacks.…”

Section: Blocksiemmentioning

confidence: 99%

BlockSIEM: Protecting Smart City Services through a Blockchain-based and Distributed SIEM

Botello

Mesa

Rodríguez

et al. 2020

Sensors

Self Cite

View full text Add to dashboard Cite

The Internet of Things (IoT) paradigm has revolutionized several industries (e.g., manufacturing, health, transport, education, among others) by allowing objects to connect to the Internet and, thus, enabling a variety of novel applications. In this sense, IoT devices have become an essential component of smart cities, allowing many novel and useful services, but, at the same time, bringing numerous cybersecurity threats. The paper at hand proposes BlockSIEM, a blockchain-based and distributed Security Information and Event Management (SIEM) solution framework for the protection of the aforementioned smart city services. The proposed SIEM relies on blockchain technology to securely store and access security events. Such security events are generated by IoT sentinels that are in charge of shielding groups of IoT devices. The IoT sentinels may be deployed in smart city scenarios, such as smart hospitals, smart transport systems, smart airports, among others, ensuring a satisfactory level of protection. The blockchain guarantees the non-repudiation and traceability of the registry of security events due to its features. To demonstrate the feasibility of the proposed approach, our proposal is implemented using Ethereum and validated through different use cases and experiments.

show abstract

“…There is an increased level of vulnerability due to developers building backdoors into an IoT device and leaving them open [14]. In addition, default passwords provided with the device are seldom changed and become vulnerable to attacks when connected to the internet without appropriate security configurations [15].…”

Section: Introductionmentioning

confidence: 99%

Towards a Secure and Scalable IoT Infrastructure: A Pilot Deployment for a Smart Water Monitoring System

Overmars¹,

Venkatraman²

2020

Technologies

View full text Add to dashboard Cite

Recent growth in the Internet of Things (IoT) looks promising for realizing a smart environment of the future. However, concerns about the security of IoT devices are escalating as they are inherently constrained by limited resources, heterogeneity, and lack of standard security controls or protocols. Due to their inability to support state-of-the-art secure network protocols and defense mechanisms, standard security solutions are unsuitable for dynamic IoT environments that require large and smart IoT infrastructure deployments. At present, the IoT based smart environment deployments predominantly use cloud-centric approaches to enable continuous and on-demand data exchange that leads to further security and privacy risks. While standard security protocols, such as Virtual Private Networks (VPNs), have been explored for certain IoT environments recently, the implementation models reported have several variations and are not practically scalable for any dynamically scalable IoT deployment. This paper addresses current drawbacks in providing the required flexibility, interoperability, scalability, and low-cost practical viability of a secure IoT infrastructure. We propose an adaptive end-to-end security model that supports the defense requirements for a scalable IoT infrastructure. With low-cost embedded controllers, such as the Raspberry Pi, allowing for the convergence of more sophisticated networking protocols to be embedded at the IoT monitoring interface, we propose a scalable IoT security model integrating both the IoT devices and the controller as one embedded device. Our approach is unique, with a focus on the integration of a security protocol at the embedded interface. In addition, we demonstrate a prototype implementation of our IoT security model for a smart water monitoring system. We believe that our modest first step would instill future research interests in this direction.

show abstract

Shielding IoT against Cyber‐Attacks: An Event‐Based Approach Using SIEM

Cited by 45 publications

References 43 publications

A Comprehensive Survey about Thermal Comfort under the IoT Paradigm: Is Crowdsensing the New Horizon?

A Comprehensive Survey about Thermal Comfort under the IoT Paradigm: Is Crowdsensing the New Horizon?

BlockSIEM: Protecting Smart City Services through a Blockchain-based and Distributed SIEM

Towards a Secure and Scalable IoT Infrastructure: A Pilot Deployment for a Smart Water Monitoring System

Contact Info

Product

Resources

About