IoTsec: UML Extension for Internet of Things Systems Security Modelling

The Internet of things (IoT) is the natural evolution of the current Internet. As such, IoT systems do not just handle critical information as passwords, identities, personal information, routines, etc., but they also are able to control a whole variety of systems, for instance a robotic network in the automotive industry, autonomous cars networks, human health care and many systems in other domains. Hence, the existence of IoT systems that do not involve security mechanisms should be unthinkable; nevertheless there are not new standards which take into account the security of these systems. This proposal introduces a new UML extension which involves security issues encapsulated within a nomenclature, UML stereotypes to model common actors and UML notation extensions. All this with the aim of providing IoT developers with an useful notation to model security in IoT system from their designing stage, even if they are not completely familiar with cybersecurity concepts.