Brass, I;
Tanczer, L;
Carr, M;
Elsden, M;
Blackstock, J;
(2018)
Standardising a moving target: The development and evolution of IoT security standards.
In:
Proceedings of Living in the Internet of Things: Cybersecurity of the IoT - 2018.
IET: London, UK.
Preview |
Text
PETRAS_Submission_Ref-0083_FullPaper.pdf - Accepted Version Download (1MB) | Preview |
Abstract
The standards landscape for IoT security is currently developing in a fragmented manner. This paper provides a review of the main IoT security standards and guidelines that have been developed by formal standardisation organisations and transnational industry associations and interest alliances to date. The review makes three main contributions to the study of current IoT standards-development processes. First, governments and regulatory agencies in the EU and the US are increasingly considering the promotion of baseline IoT security requirements, achieved through public procurement obligations and cybersecurity certification schemes. Second, the analysis reveals that the IoT security standards landscape is dominated by de facto standards initiated by a diverse range of industry associations across the IoT ecosystem. Third, the paper identifies a number of key challenges for IoT security standardisation, most notably: a) the difficulty of setting a baseline for IoT security across all IoT applications and domains; and b) the difficulty of monitoring the adoption, implementation and effectiveness of IoT security standards and best practices. The paper consequently contributes to a better understanding of the evolution of IoT security standards and proposes a more coherent standards development and deployment approach.
Type: | Proceedings paper |
---|---|
Title: | Standardising a moving target: The development and evolution of IoT security standards |
Event: | Living in the Internet of Things: Cybersecurity of the IoT - 2018 |
Location: | London, UK |
Dates: | 27 March 2018 - 29 March 2018 |
ISBN-13: | 978-1-78561-843-7 |
Open access status: | An open access version is available from UCL Discovery |
DOI: | 10.1049/cp.2018.0024 |
Publisher version: | https://doi.org/10.1049/cp.2018.0024 |
Language: | English |
Additional information: | This version is the author accepted manuscript. For information on re-use, please refer to the publisher’s terms and conditions. |
Keywords: | IoT security standards, certification, compliance |
UCL classification: | UCL UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > STEaPP |
URI: | https://discovery.ucl.ac.uk/id/eprint/10045804 |
Archive Staff Only
View Item |