Towards a Standard-Based Security and Privacy of IoT System's Services

The Internet of Things (IoT) industry increases rapidly and becomes progressively more devoted to critical business services. IoT adoption generates two kinds of challenges: cybersecurity risks and privacy concerns. In order to generate a trust environment and provide confidence to IoT business services, LIST will partnered with private companies to implement an integrated framework and software tools for assessing and monitoring IoT system's service security and privacy. SPRINT assessment and monitoring foresees (1) an aggregated publicly available security and privacy integrated referential database dedicated to IoT services (SPRINT-REF), and (2), an IoT service-oriented assessment and monitoring methods based on this referential (SPRINT-METH). Compared to existing approaches, SPRINT-METH innovation is that it is service-oriented rather than device-oriented, as well as based recognized existing professional standards. Finally, the SPRINT toolbox (3) will include two assets: a software web service component aiming to assess the IoT system's service at the time of design, and an IoT Security Operations Centre to monitor IoT security and privacy at run time (SPRINT-TOOL).