Cyber-Assurance for the Internet of Things

Tyson T. Brooks

• Publisher: Wiley-IEEE Press
• Year: 2016
• Print ISBN: 9781119193869
• eBook ISBN: 9781119193876
• Edition: 1
• Topic: Computer Science
• Subtopic: Cryptography
• Index: Computer Science

Presents an Cyber-Assurance approach to the Internet of Things (IoT)

This book discusses the cyber-assurance needs of the IoT environment, highlighting key information assurance (IA) IoT issues and identifying the associated security implications. Through contributions from cyber-assurance, IA, information security and IoT industry practitioners and experts, the text covers fundamental and advanced concepts necessary to grasp current IA issues, challenges, and solutions for the IoT. The future trends in IoT infrastructures, architectures and applications are also examined. Other topics discussed include the IA protection of IoT systems and information being stored, processed or transmitted from unauthorized access or modification of machine-2-machine (M2M) devices, radio-frequency identification (RFID) networks, wireless sensor networks, smart grids, and supervisory control and data acquisition (SCADA) systems. The book also discusses IA measures necessary to detect, protect, and defend IoT information and networks/systems to ensure their availability, integrity, authentication, confidentially, and non-repudiation.

• Discusses current research and emerging trends in IA theory, applications, architecture and information security in the IoT based on theoretical aspects and studies of practical applications
• Aids readers in understanding how to design and build cyber-assurance into the IoT
• Exposes engineers and designers to new strategies and emerging standards, and promotes active development of cyber-assurance
• Covers challenging issues as well as potential solutions, encouraging discussion and debate amongst those in the field

Cyber-Assurance for the Internet of Things is written for researchers and professionals working in the field of wireless technologies, information security architecture, and security system design. This book will also serve as a reference for professors and students involved in IA and IoT networking.

Tyson T. Brooks is an Adjunct Professor in the School of Information Studies at Syracuse University; he also works with the Center for Information and Systems Assurance and Trust (CISAT) at Syracuse University, and is an information security technologist and science-practitioner. Dr. Brooks is the founder/Editor-in-Chief of the International Journal of Internet of Things and Cyber-Assurance, an associate editor for the Journal of Enterprise Architecture, the International Journal of Cloud Computing and Services Science, and the International Journal of Information and Network Security.

PART I
EMBEDDED DESIGN SECURITY

CHAPTER 1
Certified Security by Design for the Internet of Things

Shiu-Kai Chin

Department of Electrical Engineering and Computer Science, Syracuse University, Syracuse, NY, USA

1.1 Introduction

Incorporating security into the design of components used in the Internet of Things (IoT) is essential for securing the operations of the IoT and the cyber-physical infrastructure upon which society depends. The pervasiveness of the IoT and its part in critical infrastructure requires incorporating security into the design of components from the start. There are several challenges to incorporating security into the design of IoT components from the start. These challenges include (1) precisely describing confidentiality and integrity policies in ways that are amenable to formal reasoning, (2) maintaining logical consistency among confidentiality and integrity policies and implementation at all levels of abstraction, from high-level behavioral descriptions at the user level, down to implementations at the level of state machines and transition systems, and (3) providing compelling evidence of security that is quickly and easily reproducible by certifiers.

This is not the first time the electrical and computer engineering profession has faced these challenges. In fact, the IoT is compelling evidence of successfully meeting the challenges of design, accountability, consistency, and verifiability across multiple levels of abstraction. To learn and draw inspiration from the past, we need only look back to the 1970s and 1980s when the challenges of designing and implementing very large-scale integrated (VLSI) circuits were encountered and overcome.

1.2 Lessons from the Microelectronics Revolution

In the 1970s, it was inconceivable that designers of algorithms and instruction-set architectures could fashion specialized integrated circuits down to the level of physical layouts. Each level of design had its collection of design detail, for example, transistor models at the circuit design level, and minimum separation distances among metal and polysilicon features at the layout level.

The union of all design concepts spanning algorithm design down to layouts was too much for a single designer to grasp conceptually. The prospect of a single designer accounting for all design details spanning algorithm to layout design was even more daunting. Conway's key insight that made VLSI design possible was:

“… to sidestep tons of accumulated vestigial practices in system architecture, logic design, circuit design and circuit layout, and replace them with a coherent but minimalist set of methods.” (Conway, L 2012)

Specifically, the minimalist set of methods made use of:

• parameterization, that is, specifying λ as the biggest of all the required minimum feature sizes.
• idealized transistor behavior as switch behavior,
• consistent interpretations of voltages, transistor state, truth values,
• interpretations linking models at multiple levels, spanning layouts to transition systems, and
• computer-aided design (CAD) tools.

Computer hardware design is often called logic design for good reason. Propositional logic pervades all levels of abstraction in VLSI design. Transistor circuits and layouts are related to logic operators such as negation, nand, and nor. Networks of logic gates implement arithmetic logic units, multiplexers, flip-flops, and registers that are the components of datapaths. Base 2 arithmetic is used precisely because operations on binary numbers conveniently map to logic operations. Timing and control is achieved using finite-state machines. Finite-state machines are parameterized by next-state and output functions described by propositional logic formulas and implemented by combinational logic components. Instruction-set architectures are implemented by a combination of data and control paths, whose operations are controlled and sequenced by finite-state machines. The VLSI-inspired vision for securing the integrity of the IoT is this: harmonize multiple levels of abstraction by using the same logic at all levels to describe behavior at each level. This enables designs at each level of abstraction to be related to behavior at other levels. This provides the means for a continuous t...

Table of contents

• Cover
• IEEE Press
• Title page
• Copyright
• Dedication
• FOREWORD
• PREFACE
• ACKNOWLEDGMENTS
• CONTRIBUTORS
• ACRONYMS
• INTRODUCTION
• PART I EMBEDDED DESIGN SECURITY
• PART II TRUST IMPACT
• PART III WEARABLE AUTOMATION PROVENANCE
• PART IV CLOUD ARTIFICIAL INTELLIGENCE CYBER-PHYSICAL SYSTEMS
• APPENDIX A LIST OF IEEE INTERNET OF THINGS STANDARDS
• APPENDIX B GLOSSARY
• APPENDIX C CSBD THERMOSTAT REPORT
• APPENDIX D CSBD ACCESS-CONTROL LOGIC REPORT
• BIBLIOGRAPHY
• INDEX
• EULA