Research in ASSET

Emerging technologies for the Internet of Things (IoT) have the potential to provide many benefits to improve eHealth where the Things include smart phones, sensors, sensor nodes and actuator nodes. The IoTs successful deployment depends on ensuring security and privacy that need to adapt to their processing capabilities and resource use. IoTs are, however, vulnerable to attacks since communications are mostly wireless, unattended things are usually vulnerable to physical attacks, and most IoT components are constrained by energy, communications, and computation capabilities necessary for the implementation of complex security-supporting schemes. Most current security models and mechanisms that address the IoT’s problems and allow a system to detect and recover from errors or attacks are hard to change, reuse, and analyze; thus making infrastructures that are inflexible, causing lost investments and damage as result from mechanisms not matching the threats, etc. Therefore, ASSET will build risk-based adaptive security methods and mechanisms that increase security to an appropriate level. The security methods and mechanisms will adapt to the dynamic changing conditions of IoT, including usability, threats, diversity, and heterogeneity. ASSET's case study will lead to the design of adaptive strategies for the dynamic interplay between security and data transmission in a mobile patient monitoring system. In order to achieve this overall goal the project will

  • Build models for estimating and predicting risk and benefits using game theory
    and context awareness for adaptive security in IoT
  • Build security metrics using innovative reasoning techniques for sufficient and
    credible evidence gathering for validating the effectiveness of adaptation
  • Prototype risk based adaptive methods for authentication and access control for
    IoT and use them in a simulation experiment in two patient monitoring scenarios
    in Oslo University Hospital
  • Build light-weight self-abilities in smart IoT that will allow them to detect in realtime
    unknown security and privacy threats, respond to them, and adapt to the
    environment and changing degree of threats