Internet of Things Security: Modelling Smart Industrial Thermostat for Threat Vectors and Common Vulnerabilities

Omer Ali; Mohamad Khairi Ishak; Muhammad Kamran Liaquat Bhatti

doi:10.1007/978-981-16-0866-7_14

Internet of Things Security: Modelling Smart Industrial Thermostat for Threat Vectors and Common Vulnerabilities

Omer Ali
, Mohamad Khairi Ishak
, Muhammad Kamran Liaquat Bhatti

Universiti Sains Malaysia
NFC Institute of Engineering and Technology

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

3 Scopus citations

Abstract

Internet of Things (IoT) made it possible to realize the vision of connected world, where devices ranging from wearables to industrial IoT solutions provide near real-time data insights. These IoT systems generates staggering amounts of data every single day which is prone to security risks. The threat surface for these IoT devices includes the entire hardware stack, processes, and associated applications, thus requires a systematic threat modeling approach to mitigate system vulnerabilities. In this paper, an industrial Smart Thermostat is threat modelled using the industry leading STRIDE framework to report system vulnerabilities, threat surface and its associated threat vectors. An attack tree is designed to investigate the threats on physical resources of the smart industrial thermostat under study identifying system wide vulnerabilities based on Common Vulnerability Scoring System (CVSS). Finally, the CVSS scores are calculated on the entire threat surface for an improved system design.

Original language	English
Title of host publication	Intelligent Manufacturing and Mechatronics - Proceedings of SympoSIMM 2020
Editors	Muhammad Syahril Bahari, Azmi Harun, Zailani Zainal Abidin, Roshaliza Hamidon, Sakinah Zakaria
Publisher	Springer Science and Business Media Deutschland GmbH
Pages	175-186
Number of pages	12
ISBN (Print)	9789811608650
DOIs	https://doi.org/10.1007/978-981-16-0866-7_14
State	Published - 2021
Externally published	Yes
Event	3rd Symposium on Intelligent Manufacturing and Mechatronics, SympoSIMM 2020 - Perlis, Malaysia Duration: 10 Aug 2020 → 10 Aug 2020

Publication series

Name	Lecture Notes in Mechanical Engineering
ISSN (Print)	2195-4356
ISSN (Electronic)	2195-4364

Conference

Conference	3rd Symposium on Intelligent Manufacturing and Mechatronics, SympoSIMM 2020
Country/Territory	Malaysia
City	Perlis
Period	10/08/20 → 10/08/20

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

SDG 9 Industry, Innovation, and Infrastructure

Keywords

CVSS
Internet of Things
Security modeling
Threat modeling

Access to Document

10.1007/978-981-16-0866-7_14

Cite this

Ali, O., Ishak, M. K., & Bhatti, M. K. L. (2021). Internet of Things Security: Modelling Smart Industrial Thermostat for Threat Vectors and Common Vulnerabilities. In M. S. Bahari, A. Harun, Z. Zainal Abidin, R. Hamidon, & S. Zakaria (Eds.), Intelligent Manufacturing and Mechatronics - Proceedings of SympoSIMM 2020 (pp. 175-186). (Lecture Notes in Mechanical Engineering). Springer Science and Business Media Deutschland GmbH. https://doi.org/10.1007/978-981-16-0866-7_14

Ali, Omer ; Ishak, Mohamad Khairi ; Bhatti, Muhammad Kamran Liaquat. / Internet of Things Security : Modelling Smart Industrial Thermostat for Threat Vectors and Common Vulnerabilities. Intelligent Manufacturing and Mechatronics - Proceedings of SympoSIMM 2020. editor / Muhammad Syahril Bahari ; Azmi Harun ; Zailani Zainal Abidin ; Roshaliza Hamidon ; Sakinah Zakaria. Springer Science and Business Media Deutschland GmbH, 2021. pp. 175-186 (Lecture Notes in Mechanical Engineering).

@inproceedings{d7a70863cd384535891ffe63d2ba8cef,

title = "Internet of Things Security: Modelling Smart Industrial Thermostat for Threat Vectors and Common Vulnerabilities",

abstract = "Internet of Things (IoT) made it possible to realize the vision of connected world, where devices ranging from wearables to industrial IoT solutions provide near real-time data insights. These IoT systems generates staggering amounts of data every single day which is prone to security risks. The threat surface for these IoT devices includes the entire hardware stack, processes, and associated applications, thus requires a systematic threat modeling approach to mitigate system vulnerabilities. In this paper, an industrial Smart Thermostat is threat modelled using the industry leading STRIDE framework to report system vulnerabilities, threat surface and its associated threat vectors. An attack tree is designed to investigate the threats on physical resources of the smart industrial thermostat under study identifying system wide vulnerabilities based on Common Vulnerability Scoring System (CVSS). Finally, the CVSS scores are calculated on the entire threat surface for an improved system design.",

keywords = "CVSS, Internet of Things, Security modeling, Threat modeling",

author = "Omer Ali and Ishak, \{Mohamad Khairi\} and Bhatti, \{Muhammad Kamran Liaquat\}",

note = "Publisher Copyright: {\textcopyright} 2021, The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd.; 3rd Symposium on Intelligent Manufacturing and Mechatronics, SympoSIMM 2020 ; Conference date: 10-08-2020 Through 10-08-2020",

year = "2021",

doi = "10.1007/978-981-16-0866-7\_14",

language = "English",

isbn = "9789811608650",

series = "Lecture Notes in Mechanical Engineering",

publisher = "Springer Science and Business Media Deutschland GmbH",

pages = "175--186",

editor = "Bahari, \{Muhammad Syahril\} and Azmi Harun and \{Zainal Abidin\}, Zailani and Roshaliza Hamidon and Sakinah Zakaria",

booktitle = "Intelligent Manufacturing and Mechatronics - Proceedings of SympoSIMM 2020",

address = "Germany",

}

Ali, O, Ishak, MK & Bhatti, MKL 2021, Internet of Things Security: Modelling Smart Industrial Thermostat for Threat Vectors and Common Vulnerabilities. in MS Bahari, A Harun, Z Zainal Abidin, R Hamidon & S Zakaria (eds), Intelligent Manufacturing and Mechatronics - Proceedings of SympoSIMM 2020. Lecture Notes in Mechanical Engineering, Springer Science and Business Media Deutschland GmbH, pp. 175-186, 3rd Symposium on Intelligent Manufacturing and Mechatronics, SympoSIMM 2020, Perlis, Malaysia, 10/08/20. https://doi.org/10.1007/978-981-16-0866-7_14

Internet of Things Security: Modelling Smart Industrial Thermostat for Threat Vectors and Common Vulnerabilities. / Ali, Omer; Ishak, Mohamad Khairi; Bhatti, Muhammad Kamran Liaquat.
Intelligent Manufacturing and Mechatronics - Proceedings of SympoSIMM 2020. ed. / Muhammad Syahril Bahari; Azmi Harun; Zailani Zainal Abidin; Roshaliza Hamidon; Sakinah Zakaria. Springer Science and Business Media Deutschland GmbH, 2021. p. 175-186 (Lecture Notes in Mechanical Engineering).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Internet of Things Security

T2 - 3rd Symposium on Intelligent Manufacturing and Mechatronics, SympoSIMM 2020

AU - Ali, Omer

AU - Ishak, Mohamad Khairi

AU - Bhatti, Muhammad Kamran Liaquat

PY - 2021

Y1 - 2021

N2 - Internet of Things (IoT) made it possible to realize the vision of connected world, where devices ranging from wearables to industrial IoT solutions provide near real-time data insights. These IoT systems generates staggering amounts of data every single day which is prone to security risks. The threat surface for these IoT devices includes the entire hardware stack, processes, and associated applications, thus requires a systematic threat modeling approach to mitigate system vulnerabilities. In this paper, an industrial Smart Thermostat is threat modelled using the industry leading STRIDE framework to report system vulnerabilities, threat surface and its associated threat vectors. An attack tree is designed to investigate the threats on physical resources of the smart industrial thermostat under study identifying system wide vulnerabilities based on Common Vulnerability Scoring System (CVSS). Finally, the CVSS scores are calculated on the entire threat surface for an improved system design.

AB - Internet of Things (IoT) made it possible to realize the vision of connected world, where devices ranging from wearables to industrial IoT solutions provide near real-time data insights. These IoT systems generates staggering amounts of data every single day which is prone to security risks. The threat surface for these IoT devices includes the entire hardware stack, processes, and associated applications, thus requires a systematic threat modeling approach to mitigate system vulnerabilities. In this paper, an industrial Smart Thermostat is threat modelled using the industry leading STRIDE framework to report system vulnerabilities, threat surface and its associated threat vectors. An attack tree is designed to investigate the threats on physical resources of the smart industrial thermostat under study identifying system wide vulnerabilities based on Common Vulnerability Scoring System (CVSS). Finally, the CVSS scores are calculated on the entire threat surface for an improved system design.

KW - CVSS

KW - Internet of Things

KW - Security modeling

KW - Threat modeling

UR - https://www.scopus.com/pages/publications/85111819874

U2 - 10.1007/978-981-16-0866-7_14

DO - 10.1007/978-981-16-0866-7_14

M3 - Conference contribution

AN - SCOPUS:85111819874

SN - 9789811608650

T3 - Lecture Notes in Mechanical Engineering

SP - 175

EP - 186

BT - Intelligent Manufacturing and Mechatronics - Proceedings of SympoSIMM 2020

A2 - Bahari, Muhammad Syahril

A2 - Harun, Azmi

A2 - Zainal Abidin, Zailani

A2 - Hamidon, Roshaliza

A2 - Zakaria, Sakinah

PB - Springer Science and Business Media Deutschland GmbH

Y2 - 10 August 2020 through 10 August 2020

ER -

Ali O, Ishak MK, Bhatti MKL. Internet of Things Security: Modelling Smart Industrial Thermostat for Threat Vectors and Common Vulnerabilities. In Bahari MS, Harun A, Zainal Abidin Z, Hamidon R, Zakaria S, editors, Intelligent Manufacturing and Mechatronics - Proceedings of SympoSIMM 2020. Springer Science and Business Media Deutschland GmbH. 2021. p. 175-186. (Lecture Notes in Mechanical Engineering). doi: 10.1007/978-981-16-0866-7_14

Internet of Things Security: Modelling Smart Industrial Thermostat for Threat Vectors and Common Vulnerabilities

Abstract

Publication series

Conference

UN SDGs

Keywords

Access to Document

Other files and links

Fingerprint

Cite this