Security Risk Assessment in Internet of Things Systems

Abstract

Information security risk assessment methods have served us well over the past two decades. They have provided a tool for organizations and governments to use in protecting themselves against pertinent risks. As the complexity, pervasiveness, and automation of technology systems increases and cyberspace matures, particularly with the Internet of Things (IoT), there is a strong argument that we will need new approaches to assess risk and build trust. The challenge with simply extending existing assessment methodologies to IoT systems is that we could be blind to new risks arising in such ecosystems. These risks could be related to the high degrees of connectivity present or the coupling of digital, cyber-physical, and social systems. This article makes the case for new methodologies to assess risk in this context that consider the dynamics and uniqueness of the IoT while maintaining the rigor of best practice in risk assessment.

9 pages, 1 figure

Cited by in corpus (7)

• Future developments in cyber risk assessment for the internet of things
• The Social and Psychological Impact of Cyber-Attacks
• Future developments in standardisation of cyber risk in the Internet of Things (IoT)
• COVID-19 what have we learned? The rise of social machines and connected devices in pandemic management following the concepts of predictive, preventive and personalised medicine
• If you can't understand it, you can't properly assess it! The reality of assessing security risks in Internet of Things systems
• Are we there yet? Understanding the challenges faced in complying with the General Data Protection Regulation (GDPR)
• Assessing Risks and Modeling Threats in the Internet of Things