IoTSec:Y1 Suggestions Research Council
From its-wiki.no
Revision as of 08:25, 27 October 2016 by Josef.Noll (Talk | contribs)
| Security in IoT for Smart Grids | |||||||
|---|---|---|---|---|---|---|---|
|
|
IoTSec recommendations for future research
Research Council asked for ideas on future research, being presented here as high-level recommendations and more detailed research specific challenges
- Privacy labelling: We have identified privacy labelling as a potential for making privacy work into a commercially viable alternative for companies that put more privacy into their products, apps, services. These can be seen for privacy the same as the energy labels for electronic equipment.
- Regulations and policies: Development in this area is going to be so fast that we need closer collaboration with regulative bodies.
- User-involvement: Research should be directed more towards the society, towards people. Incorporate citizens in projects, give them power to participate.
- Early design: Use of fast prototyping and visualisation as a tool for reducing research cost. When ideas are tested in early stage, critical mistakes may be avoided, thus saving resources.
Research specific challenges
- Complexity due to the concurrency and distributed nature of IoT systems
- Context-centric computation, since the IoT devices, e.g., in the Smart Home, must be aware of the humans
- Lack of semantics, since IoT systems would produce large amounts of data, which need semantic information in order to become usable.
- Models vs. programs: Analysis and evaluation for agile prototyping based on executable models and semantic-based tools, as and evolution from programming and their low-level tools.
- Semantics for Security and Privacy: Semantic technologies and ontologies are need to establish a unified terminology for fields of privacy and security. This would provide machine-readable data and would allow development of more automated tools.
- Edge and fog computing for privacy
- Measurable security and privacy: might sound unrealistic for some of the purist researchers in security, but this is what companies do every day, maybe under different names such as risk analysis. However, we see a lack of automated tools and methodologies to help in measuring such important “unmeasurable” aspects like security, privacy, or robustness, which are essential in evaluating smart infrastructures.