Skip to main content

Addressing the Security Gap in IoT: Towards an IoT Cyber Range.

Nock, O., Starkey, J. and Angelopoulos, C.M., 2020. Addressing the Security Gap in IoT: Towards an IoT Cyber Range. Sensors, 20 (18), 5439.

Full text available as:

[img]
Preview
PDF (OPEN ACCESS ARTICLE)
sensors-20-05439-v2.pdf - Published Version
Available under License Creative Commons Attribution.

882kB

DOI: 10.3390/s20185439

Abstract

The paradigm of Internet of Things has now reached a maturity level where the pertinent research goal is the successful application of IoT technologies in systems of high technological readiness level. However, while basic aspects of IoT connectivity and networking have been well studied and adequately addressed, this has not been the case for cyber security aspects of IoT. This is nicely demonstrated by the number of IoT testbeds focusing on networking aspects and the lack of IoT testbeds focusing on security aspects. Towards addressing the existing and growing skills-shortage in IoT cyber security, we present an IoT Cyber Range (IoT-CR); an IoT testbed designed for research and training in IoT security. The IoT-CR allows the user to specify and work on customisable IoT networks, both virtual and physical, and supports the concurrent execution of multiple scenarios in a scalable way following a modular architecture. We first provide an overview of existing, state of the art IoT testbeds and cyber security related initiatives. We then present the design and architecture of the IoT Cyber Range, also detailing the corresponding RESTful APIs that help de-associate the IoT-CR tiers and obfuscate underlying complexities. The design is focused around the end-user and is based on the four design principles for Cyber Range development discussed in the introduction. Finally, we demonstrate the use of the facility via a red/blue team scenario involving a variant of man-in-the-middle attack using IoT devices. Future work includes the use of the IoT-CR by cohorts of trainees in order to evaluate the effectiveness of specific scenarios in acquiring IoT-related cyber-security knowledge and skills, as well as the IoT-CR integration with a pan-European cyber-security competence network.

Item Type:Article
ISSN:1424-8220
Uncontrolled Keywords:IoT ; cyber-range ; cyber-security ; testbed
Group:Faculty of Science & Technology
ID Code:34625
Deposited By: Unnamed user with email symplectic@symplectic
Deposited On:28 Sep 2020 11:51
Last Modified:28 Sep 2020 11:51

Downloads

Downloads per month over past year

More statistics for this item...
Repository Staff Only -