Automating IoT security evaluation and enhancement

Abstract

The Internet of Things (IoT), based on interconnected devices, enables a variety of elegant new services that could not be realized in a traditional environment, and many of these services harvest the information of a potentially sensitive and private nature belonging to individual users. However, existing security solutions require additional efforts or modifications on existing environments for employing them, remaining many security issues as unhandled. To resolve this, we design two automated security frameworks according to its purpose

one minimizes human interventions for security evaluations on IoT using a document-based security assessment and the other enables a dynamic security enforcement using next-generation network techniques without modifying an existing IoT environment. We implement both frameworks and evaluate the effectiveness and the efficiency of our solutions on real-word environments.