Attack tree analysis for insider threats on the IoT using Isabelle
The Internet-of-Things (IoT) aims at integrating small devices around humans. The threat from human insiders in regular organisations is real; in a fully-connected world of the IoT, organisations face a substantially more severe security challenge due to unexpected access possibilities and informati...
| Hlavní autoři: | , , |
|---|---|
| Médium: | Conference item |
| Vydáno: |
Springer, Cham
2016
|
| Shrnutí: | The Internet-of-Things (IoT) aims at integrating small devices around humans. The threat from human insiders in regular organisations is real; in a fully-connected world of the IoT, organisations face a substantially more severe security challenge due to unexpected access possibilities and information ow. In this paper, we seek to illustrate and classify insider threats in relation to the IoT (by 'smart insiders'), exhibiting attack vectors for their characterisation. To model the attacks we apply a method of formal modelling of Insider Threats in the interactive theorem prover Isabelle. On the classified IoT attack examples, we show how this logical approach can be used to make the models more precise and to analyse the previously identi ed Insider IoT attacks using Isabelle attack trees. |
|---|