Dynamic real-time risk analytics of uncontrollable states in complex internet of things systems: cyber risk at the edge

Petar Radanliev (), David Roure, Max Kleek, Uchenna Ani, Pete Burnap, Eirini Anthi, Jason R. C. Nurse, Omar Santos, Rafael Mantilla Montalvo and La’Treall Maddox
Additional contact information
David Roure: University of Oxford
Max Kleek: University of Oxford
Uchenna Ani: University College London
Pete Burnap: Cardiff University
Eirini Anthi: Cardiff University
Jason R. C. Nurse: University of Kent
Omar Santos: Cisco Research Centre
Rafael Mantilla Montalvo: Cisco Research Centre
La’Treall Maddox: Cisco Research Centre

Environment Systems and Decisions, 2021, vol. 41, issue 2, 236-247

Abstract: Abstract The Internet of Things (IoT) triggers new types of cyber risks. Therefore, the integration of new IoT devices and services requires a self-assessment of IoT cyber security posture. By security posture this article refers to the cybersecurity strength of an organisation to predict, prevent and respond to cyberthreats. At present, there is a gap in the state of the art, because there are no self-assessment methods for quantifying IoT cyber risk posture. To address this gap, an empirical analysis is performed of 12 cyber risk assessment approaches. The results and the main findings from the analysis is presented as the current and a target risk state for IoT systems, followed by conclusions and recommendations on a transformation roadmap, describing how IoT systems can achieve the target state with a new goal-oriented dependency model. By target state, we refer to the cyber security target that matches the generic security requirements of an organisation. The research paper studies and adapts four alternatives for IoT risk assessment and identifies the goal-oriented dependency modelling as a dominant approach among the risk assessment models studied. The new goal-oriented dependency model in this article enables the assessment of uncontrollable risk states in complex IoT systems and can be used for a quantitative self-assessment of IoT cyber risk posture.

Keywords: Functional dependency; Network-based linear dependency modelling; Internet of things; Micro-mort model; Goal-oriented approach; Transformation roadmap; Cyber risk regulations; Empirical analysis; Cyber risk self-assessment; Cyber risk target state (search for similar items in EconPapers)
Date: 2021
References: View references in EconPapers View complete reference list from CitEc
Citations: View citations in EconPapers (1)

Downloads: (external link)
http://link.springer.com/10.1007/s10669-020-09792-x Abstract (text/html)
Access to the full text of the articles in this series is restricted.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:spr:envsyd:v:41:y:2021:i:2:d:10.1007_s10669-020-09792-x

Ordering information: This journal article can be ordered from
https://www.springer.com/journal/10669

DOI: 10.1007/s10669-020-09792-x

Access Statistics for this article

More articles in Environment Systems and Decisions from Springer
Bibliographic data for series maintained by Sonal Shukla () and Springer Nature Abstracting and Indexing ().