SIoT Framework: Towards an Approach for Early Identification of Security Requirements for Internet-of-things Applications
Background: Security has become more of a concern with the wide deployment of Internet-of-things (IoT) devices. The importance of addressing security risks early in the development lifecycle before pushing to market cannot be over emphasized. Aim: To this end, we propose a conceptual framework to he...
| Main Authors: | , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Wroclaw University of Science and Technology
2020-03-01
|
| Series: | e-Informatica Software Engineering Journal |
| Subjects: | |
| Online Access: | http://www.e-informatyka.pl/attach/e-Informatica_-_Volume_14/eInformatica2020Art03.pdf |
| _version_ | 1818758628831657984 |
|---|---|
| author | Ronald Jabangwe Anh Nguyen-Duc |
| author_facet | Ronald Jabangwe Anh Nguyen-Duc |
| author_sort | Ronald Jabangwe |
| collection | DOAJ |
| description | Background: Security has become more of a concern with the wide deployment of Internet-of-things (IoT) devices. The importance of addressing security risks early in the development lifecycle before pushing to market cannot be over emphasized. Aim: To this end, we propose a conceptual framework to help with identifying security concerns early in the product development lifecycle for Internet-of-things, that we refer to as SIoT (Security for Internet-of-Things). Method: The framework adopts well known security engineering approaches and best practices, and systematically builds on existing research work on IoT architecture. Results: Practitioners at a Norwegian start-up company evaluated the framework and found it useful as a foundation for addressing critical security concerns for IoT applications early in the development lifecycle. The output from using the framework can be a checklist that can be used as input during security requirements engineering activities for IoT applications. Conclusions: However, security is a multi-faced concept; therefore, users of the SIoT framework should not view the framework as a panacea to all security threats. The framework may need to be refined in the future, particularly to improve its completeness to cover various IoT contexts. |
| first_indexed | 2024-12-18T06:29:52Z |
| format | Article |
| id | doaj.art-867f3f05eb9d4b728365ee71cce1bd73 |
| institution | Directory Open Access Journal |
| issn | 1897-7979 2084-4840 |
| language | English |
| last_indexed | 2024-12-18T06:29:52Z |
| publishDate | 2020-03-01 |
| publisher | Wroclaw University of Science and Technology |
| record_format | Article |
| series | e-Informatica Software Engineering Journal |
| spelling | doaj.art-867f3f05eb9d4b728365ee71cce1bd732022-12-21T21:17:56ZengWroclaw University of Science and Technologye-Informatica Software Engineering Journal1897-79792084-48402020-03-01141779510.37190/e-Inf200103SIoT Framework: Towards an Approach for Early Identification of Security Requirements for Internet-of-things ApplicationsRonald JabangweAnh Nguyen-Duc Background: Security has become more of a concern with the wide deployment of Internet-of-things (IoT) devices. The importance of addressing security risks early in the development lifecycle before pushing to market cannot be over emphasized. Aim: To this end, we propose a conceptual framework to help with identifying security concerns early in the product development lifecycle for Internet-of-things, that we refer to as SIoT (Security for Internet-of-Things). Method: The framework adopts well known security engineering approaches and best practices, and systematically builds on existing research work on IoT architecture. Results: Practitioners at a Norwegian start-up company evaluated the framework and found it useful as a foundation for addressing critical security concerns for IoT applications early in the development lifecycle. The output from using the framework can be a checklist that can be used as input during security requirements engineering activities for IoT applications. Conclusions: However, security is a multi-faced concept; therefore, users of the SIoT framework should not view the framework as a panacea to all security threats. The framework may need to be refined in the future, particularly to improve its completeness to cover various IoT contexts.http://www.e-informatyka.pl/attach/e-Informatica_-_Volume_14/eInformatica2020Art03.pdfsecurity requirement; Internet-of-things; Software Engineering; Requirement Engineering; Security Framework |
| spellingShingle | Ronald Jabangwe Anh Nguyen-Duc SIoT Framework: Towards an Approach for Early Identification of Security Requirements for Internet-of-things Applications e-Informatica Software Engineering Journal security requirement; Internet-of-things; Software Engineering; Requirement Engineering; Security Framework |
| title | SIoT Framework: Towards an Approach for Early Identification of Security Requirements for Internet-of-things Applications |
| title_full | SIoT Framework: Towards an Approach for Early Identification of Security Requirements for Internet-of-things Applications |
| title_fullStr | SIoT Framework: Towards an Approach for Early Identification of Security Requirements for Internet-of-things Applications |
| title_full_unstemmed | SIoT Framework: Towards an Approach for Early Identification of Security Requirements for Internet-of-things Applications |
| title_short | SIoT Framework: Towards an Approach for Early Identification of Security Requirements for Internet-of-things Applications |
| title_sort | siot framework towards an approach for early identification of security requirements for internet of things applications |
| topic | security requirement; Internet-of-things; Software Engineering; Requirement Engineering; Security Framework |
| url | http://www.e-informatyka.pl/attach/e-Informatica_-_Volume_14/eInformatica2020Art03.pdf |
| work_keys_str_mv | AT ronaldjabangwe siotframeworktowardsanapproachforearlyidentificationofsecurityrequirementsforinternetofthingsapplications AT anhnguyenduc siotframeworktowardsanapproachforearlyidentificationofsecurityrequirementsforinternetofthingsapplications |