Using virtual environments for the assessment of cybersecurity issues in IoT scenarios

Smart Home Voice Assistants: A Literature Survey of User Privacy and Security Vulnerabilities

“…Some studies consider vulnerabilities stemming from the integration of IoT devices with the IVA device [26], [27]. Such integration typically surrounds smart home devices (e.g., Nest, or Ecobee 4), smart security devices (e.g., Scout, or Abode), smart lighting devices (e.g., Philip Hue, or LIFX), household appliances (e.g., GE+ Geneva), and surveillance cameras (e.g., Cloud Cam, Netgear Arlo Q).…”

“…A study by Furfaro et. al [27] presented three IoT scenarios in order to investigate vulnerabilities of smart objects. The scenarios were created using SmallWorld which is a software platform that has been arranged to support the assessment, teaching, and learning of security related issues in numerous domains.…”

“…Furfaro et. al [27] present an approach for securing a smart home environment where they identify the devices that need protection, group them into logical groups, identify critical and non-critical groups, and isolate each group in a separate subnetwork to better monitor the activities among them. In their proposed scenario, the video surveillance system was identified as a critical device and for this reason, it was determined as the device that should have the least interaction with other devices.…”

“…One provision which can be taken to secure the home network is to install a suitable configured firewall [27]. This would prevent external connection to connect to the network and as a result this would help contain the malware inside the network.…”

A COBIT5 Framework for IoT Risk Management

“…This paper describes an approach based on the exploitation of virtual environments and agent-based simulation for the evaluation of cybersecurity solutions for the next generation of IoT applications in realistic scenarios. The effectiveness of the approach is shown by considering a concrete case study involving the cooperation of real and virtual smart devices inside a virtualized scenario where security issues are first evaluated and then handled [22]. We look into the Smart Parking application domain and provide a solution that protects the privacy of the users by totally avoiding the exchange of confidential information [23].…”