Visual Cybersecurity Collaboration and Incident Exchange in Multi-Stakeholder IoT Environments

IoT environments in which there are multiple stake-holders, such as industrial IoT, are becoming susceptible to many kinds of cyber threats and attacks. In order to combat this, a strong cybersecurity collaboration among different stake-holders is required. However, the level of current cybersecurity situational awareness is rather low and incident handling in such environments is inefficient. Moreover many solutions are proprietary. To cope with this challenge, we propose visualization platforms tailored to two industrial scenarios for supporting incident exchange among different stakeholders based on open standards. We also analyze various stakeholder roles and the incident exchange workflow among them in an IoT ecosystem. Additionally, we create and evaluate sample incident reports for different kinds of attacks on IoT systems, which are then serialised using standards such as IODEF, JSON and CBOR for incident exchange among the stakeholders. The results demonstrate the applicability and usability of our solutions in industrial IoT ecosystems and environments.