Automatic generation of threat paths in internet of things‐based systems
Abstract Today, ‘security challenge’ is considered a commonly‐used catchword when it comes to emerging technologies such as the internet of things (IoT). Turning a blind eye to this challenge can sometimes lead to irreparable human and financial damage in everyday life. Threat modelling, despite bei...
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Wiley
2022-12-01
|
| Series: | IET Communications |
| Online Access: | https://doi.org/10.1049/cmu2.12491 |
| _version_ | 1797901531640496128 |
|---|---|
| author | Mohammad Ali Ramazanzadeh Behnam Barzegar Homayun Motameni |
| author_facet | Mohammad Ali Ramazanzadeh Behnam Barzegar Homayun Motameni |
| author_sort | Mohammad Ali Ramazanzadeh |
| collection | DOAJ |
| description | Abstract Today, ‘security challenge’ is considered a commonly‐used catchword when it comes to emerging technologies such as the internet of things (IoT). Turning a blind eye to this challenge can sometimes lead to irreparable human and financial damage in everyday life. Threat modelling, despite being time consuming, complex, and error‐prone, is still recognized as a preventative solution in the design phase. The method proposed in this paper, called automatic generation of threat paths, is suggested as an automated solution to the problem of identifying and determining potential threats. The proposed method is the improved and robust development of automated modelling and the introduction of the integration of new features (such as conditional probability and security) with the techniques of previous generations (such as Petri Nets (PNs)). The proposed method is evaluated using different security scenarios, and the results show that the proposed method outperforms other manual methods in this domain in terms of both time and cost (99.9% and 98.05%, respectively). |
| first_indexed | 2024-04-10T09:02:18Z |
| format | Article |
| id | doaj.art-8ac1142152c2432a9e67e5f717efb4e7 |
| institution | Directory Open Access Journal |
| issn | 1751-8628 1751-8636 |
| language | English |
| last_indexed | 2024-04-10T09:02:18Z |
| publishDate | 2022-12-01 |
| publisher | Wiley |
| record_format | Article |
| series | IET Communications |
| spelling | doaj.art-8ac1142152c2432a9e67e5f717efb4e72023-02-21T10:36:02ZengWileyIET Communications1751-86281751-86362022-12-0116202394240510.1049/cmu2.12491Automatic generation of threat paths in internet of things‐based systemsMohammad Ali Ramazanzadeh0Behnam Barzegar1Homayun Motameni2Department of Computer Engineering, Sari Branch Islamic Azad University Sari IranDepartment of Computer Engineering, Babol Branch Islamic Azad University Babol IranDepartment of Computer Engineering, Sari Branch Islamic Azad University Sari IranAbstract Today, ‘security challenge’ is considered a commonly‐used catchword when it comes to emerging technologies such as the internet of things (IoT). Turning a blind eye to this challenge can sometimes lead to irreparable human and financial damage in everyday life. Threat modelling, despite being time consuming, complex, and error‐prone, is still recognized as a preventative solution in the design phase. The method proposed in this paper, called automatic generation of threat paths, is suggested as an automated solution to the problem of identifying and determining potential threats. The proposed method is the improved and robust development of automated modelling and the introduction of the integration of new features (such as conditional probability and security) with the techniques of previous generations (such as Petri Nets (PNs)). The proposed method is evaluated using different security scenarios, and the results show that the proposed method outperforms other manual methods in this domain in terms of both time and cost (99.9% and 98.05%, respectively).https://doi.org/10.1049/cmu2.12491 |
| spellingShingle | Mohammad Ali Ramazanzadeh Behnam Barzegar Homayun Motameni Automatic generation of threat paths in internet of things‐based systems IET Communications |
| title | Automatic generation of threat paths in internet of things‐based systems |
| title_full | Automatic generation of threat paths in internet of things‐based systems |
| title_fullStr | Automatic generation of threat paths in internet of things‐based systems |
| title_full_unstemmed | Automatic generation of threat paths in internet of things‐based systems |
| title_short | Automatic generation of threat paths in internet of things‐based systems |
| title_sort | automatic generation of threat paths in internet of things based systems |
| url | https://doi.org/10.1049/cmu2.12491 |
| work_keys_str_mv | AT mohammadaliramazanzadeh automaticgenerationofthreatpathsininternetofthingsbasedsystems AT behnambarzegar automaticgenerationofthreatpathsininternetofthingsbasedsystems AT homayunmotameni automaticgenerationofthreatpathsininternetofthingsbasedsystems |