{"title":"Towards a Secure and Resilient IoT Architecture for Smart Home Energy Management","authors":"H. Boyes, T. Watson","doi":"10.1049/CP.2019.0161","DOIUrl":"https://doi.org/10.1049/CP.2019.0161","url":null,"abstract":"This paper examines the development of consumer IoT solutions for the control of electrical energy in the home. Use of smart appliances is at the centre of the UK Government’s strategy for managing CO2 emissions and domestic electricity demand. The current market for IoT-enabled products that control domestic lighting and heating is rapidly evolving with a range of devices already available. Development of demand side response solutions will see these devices and smart appliances being integrated into consumer energy management solutions. The paper examines the architecture and security implications of these developments, explores some of the security risks and identifies a number of mitigation measures. It concludes by identifying future work that is required to address the security threats, both in the home and to the electricity supply system.","PeriodicalId":221011,"journal":{"name":"Living in the Internet of Things (IoT 2019)","volume":"56 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-10-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123442977","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Kathy New, J. Devine, Taylor Woodcock, Sophie Beck, J. Finney, M. Hazas, N. Banks, Karen Smith, Tim Bailey
{"title":"Energy in schools: promoting global change through socio technical deployments","authors":"Kathy New, J. Devine, Taylor Woodcock, Sophie Beck, J. Finney, M. Hazas, N. Banks, Karen Smith, Tim Bailey","doi":"10.1049/CP.2019.0148","DOIUrl":"https://doi.org/10.1049/CP.2019.0148","url":null,"abstract":"Reducing carbon emissions is a key priority across the globe, and in the UK, schools have been identified as the second largest users of non-domestic energy. In this paper, we present an IoT solution for schools that aims to unite senior leadership, teachers, and pupils in the goal of reducing or shifting their energy consumption and carbon emissions. We achieve this by prompting behavioural change through instrumenting schools with sensors, visual displays, and a variety of educational resources which use the BBC micro:bit to interact with the data produced by these sensors, enabling pupils to engage in educational activities to solve real world problems. By increasing the visibility, availability, and interactivity of data, we enable a new space for dialogue between facilities managers and building users. We summarise some of the challenges and lessons learned so far, with preliminary results indicating our approach is effective in raising the profile of energy management and shifting demand. Future monitoring and evaluation will provide more detail on the effectiveness of our IoT solution.","PeriodicalId":221011,"journal":{"name":"Living in the Internet of Things (IoT 2019)","volume":"30 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114465889","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Towards an integrated privacy protection framework for IoT: contextualising regulatory requirements with industry best practices","authors":"Robert Thorburn, Andrea Margheri, F. Paci","doi":"10.1049/CP.2019.0170","DOIUrl":"https://doi.org/10.1049/CP.2019.0170","url":null,"abstract":"One of the main obstacles to the widespread adoption of IoT devices and services is consumers' privacy concerns related to personal data collection, processing and sharing with third parties. Indeed, many IoT devices have been found collecting consumers' personal data without their knowledge or consent. While frameworks for identifying and mitigating security concerns of IoT devices and services are available, there is a lack of frameworks that address privacy issues for IoT applications. In this paper we lay the foundations for the future development of such a framework, based on both the experimental analysis of data flows on an IoT Smart Home testbed and a systematic analysis of other frameworks.","PeriodicalId":221011,"journal":{"name":"Living in the Internet of Things (IoT 2019)","volume":"546 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131933047","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Risk assessment methods for converged IoT and SCADA systems: review and recommendations","authors":"R. Aldmour, P. Burnap, Mike Lakoju","doi":"10.1049/cp.2019.0130","DOIUrl":"https://doi.org/10.1049/cp.2019.0130","url":null,"abstract":"Risk assessment is used to identify, estimate and prioritise risks that could impact organisations. Existing risk assessment methods are not particularly adapted to include dynamic systems such as the Internet of Things (IoT). Recently, IoT has been used to develop a natural extension of Supervisory Control and Data Acquisition (SCADA) systems that support industrial control in various sectors such as transportation, energy, and manufacturing. However, incorporating IoT systems without due attention to new risks posed could enable attacks, increase the cybersecurity concerns, and impact operations and safety. In this paper, special considerations for risk assessment methods in the context of converged IoT and SCADA systems are identified, and we present recommendations for the inclusion of the special considerations alongside standard methods for managing risks.","PeriodicalId":221011,"journal":{"name":"Living in the Internet of Things (IoT 2019)","volume":"45 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134238465","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
M. Schueler, Adrian J. M. Cox, Sha Yuan, Stephen Crouch, James Graham, Wendy Hall
{"title":"From Observatory to Laboratory: A Pathway to Data Evolution","authors":"M. Schueler, Adrian J. M. Cox, Sha Yuan, Stephen Crouch, James Graham, Wendy Hall","doi":"10.1049/cp.2019.0137","DOIUrl":"https://doi.org/10.1049/cp.2019.0137","url":null,"abstract":"Recent years have seen vast global increases in computing power and mobile networking. At the same time, huge numbers of sophisticated sensors, “smart devices”, and cyber physical social machines have created similarly vast increases of related data. Scattered across multiple domains and in a variety of formats-e.g. healthcare, smart cities, smart home, networked mobile and wearable devices, connected industry-these data constitute countless information sources. As such, they may be shared and recombined to offer opportunities for socioeconomic improvements in our homes, workplaces, and cities. At the same time, they present risks to privacy, trust, and ethical behaviour in our communities. These technologically enabled opportunities and risks create cybersecurity tensions that the current project seeks to address and mediate.","PeriodicalId":221011,"journal":{"name":"Living in the Internet of Things (IoT 2019)","volume":"50 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133488446","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"A simplified approach for dynamic security risk management in connected and autonomous vehicles","authors":"Anhtuan Le, C. Maple","doi":"10.1049/cp.2019.0140","DOIUrl":"https://doi.org/10.1049/cp.2019.0140","url":null,"abstract":"Connected and autonomous vehicles (CAVs) have the potential to offer safer and more efficient transportation. However, such vehicles operate in complex heterogeneous environments and it is therefore essential to control the dynamic risks that the CAVs face during operation. Given that CAVs can be seriously impacted by cyber-attacks, their security issues have been investigated widely. However, existing approaches fail to adequately consider the dynamicity of the risks that arise and present methods to capture the changes in risks and adaptive mitigations. To bridge these gaps, this paper proposes a systematic approach, which comprises of three modules: a knowledge-based system to support the identification of the critical threats, a monitoring module to detect the changes in security context of the CAV and its surrounding environments, and a simplified assessment module to capture the dynamic risks and adjust the mitigations as needed. We investigate a case study of CAV platooning to evaluate our proposal.","PeriodicalId":221011,"journal":{"name":"Living in the Internet of Things (IoT 2019)","volume":"5 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122557267","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Jamming-resilient control and communication framework for cyber physical systems","authors":"Ivana Tomić, Michael J. Breza, J. Mccann","doi":"10.1049/cp.2019.0132","DOIUrl":"https://doi.org/10.1049/cp.2019.0132","url":null,"abstract":"The control and monitoring of large infrastructure installations is becoming smarter, cheaper to run and easier to manage through the use of wireless sensor and actuator networks (WSANs). Cyber Physical Systems (CPSs) are the combination of cyber sensing via WSANs and physical control. The problem with the use of WSANs in CPSs is that they make the whole system being controlled exposed to the world and vulnerable to theft or cyber-attacks. In this article we examine the failure of CPS infrastructure due to intelligent radio jamming. The intelligent jammer employs a protocol-aware jamming strategy to learn the transmission period of a sensor device. It then broadcasts noise to disrupt the wireless communication and destabilise the CPS. We present a CPS control and communication approach to counter the threat of intelligent radio jamming. The approach exploits the properties of the event-based control strategy combined with a reservation-based communication protocol that employs obfuscation. We use a physical model of a water distribution network to demonstrate that the approach is resilient to an intelligent jamming attack, it is able to continue normal operation of the system and maintain the desired level of performance while achieving low overheads.","PeriodicalId":221011,"journal":{"name":"Living in the Internet of Things (IoT 2019)","volume":"25 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125486969","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Exploring the Risks of Children Engaging with Programmable Iot","authors":"Sophie Beck, Bran Knowles, J. Finney","doi":"10.1049/CP.2019.0152","DOIUrl":"https://doi.org/10.1049/CP.2019.0152","url":null,"abstract":"This paper reports on IoT4Kids, a study exploring the privacy, security and safety implications of children programming the Internet of Things. The study focuses on the BBC micro:bit as one device that allows children to create rudimentary IoT devices. Prior publications have described the first stage of this study, which involved workshops with child participants. This paper instead focuses on the second stage of the project, which involved conducting key informant interviews with representatives from our project partners in order to understand the risks children face with interacting with programmable IoT devices. We describe themes that emerged from these interviews, along with implications for the study and for future work in this area.","PeriodicalId":221011,"journal":{"name":"Living in the Internet of Things (IoT 2019)","volume":"76 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-04-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133972343","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Mateusz Mikusz, N. Davies, Peter Shaw, Christopher Bull, Bran Knowles, J. N. Hayes, Lucas D. Introna
{"title":"Supporting Older Adults Using Privacy-Aware IoT Analytics","authors":"Mateusz Mikusz, N. Davies, Peter Shaw, Christopher Bull, Bran Knowles, J. N. Hayes, Lucas D. Introna","doi":"10.1049/CP.2019.0144","DOIUrl":"https://doi.org/10.1049/CP.2019.0144","url":null,"abstract":"Mobile computing and the IoT offer the potential to provide new applications to support our ageing population. However, there has been little research into the implications for system design of supporting this specific user demographic. In this paper we consider these implications, focusing in particular on an architectural design that offers the potential for complex cross-device analytics while meeting the privacy and usability concerns of older adults.","PeriodicalId":221011,"journal":{"name":"Living in the Internet of Things (IoT 2019)","volume":"2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-04-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114573511","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
Peter Shaw, Mateusz Mikusz, Ludwig Trotter, Mike Harding, N. Davies
{"title":"Towards an Understanding of Emerging Cyber Security Threats in Mapping the IoT","authors":"Peter Shaw, Mateusz Mikusz, Ludwig Trotter, Mike Harding, N. Davies","doi":"10.1049/CP.2019.0158","DOIUrl":"https://doi.org/10.1049/CP.2019.0158","url":null,"abstract":"The increase in IoT sensing and actuating devices that are seamlessly integrated into the environment is often leading to a mistrust of users as it becomes impossible to spot deployed IoT devices and understand their purposes and capabilities. One approach is to provide an appropriate mechanism of mapping the IoT and address stakeholder requirements. However, providing comprehensive maps of the IoT may expose a number of vulnerabilities that need to be addressed. We conducted a comprehensive literature survey outlining the limitations of the existing body of work regarding the mapping of the IoT and conducting an appropriate threat analysis. We subsequently applied the STRIDE model to two case studies (smart campus and urban environment) to identify a set of potential vulnerabilities and approaches at addressing these issues in the context of IoT maps.","PeriodicalId":221011,"journal":{"name":"Living in the Internet of Things (IoT 2019)","volume":"42 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2019-04-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131938240","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}