Shielding IoT against Cyber-Attacks: An Event-Based Approach Using SIEM
Shielding IoT against Cyber-Attacks: An Event-Based Approach Using SIEM
复制标题
保护物联网免受网络攻击：使用 SIEM 的基于事件的方法
DOI：
--
复制
发表时间：
2018
影响因子：
--
通讯作者：
Félix Gómez Mármol
中科院分区：
文献类型：
--
作者：
D. D. López;María Blanco Uribe;Claudia Santiago Cely;Andrés Vega Torres;Nicolás Moreno Guataquira;Stefany Morón Castro;P. Nespoli;Félix Gómez Mármol
由于近年来不同行业和市场中物联网（IoT）设备的增长，并考虑到目前对这些设备的保护不足，因此非常需要保护IoT架构的安全解决方案。开发安全解决方案的一个有趣的观点是使用事件管理方法，知道当信息资产在某些情况下受到影响时，事件可能会成为事故。本文提出了一种基于物联网场景中安全事件管理的安全解决方案，以准确识别可疑活动。为此，描述了物联网设备中发现的不同漏洞，以及使这些设备成为攻击目标的独特功能。最后，提出了三种物联网攻击场景，描述了被利用的漏洞，攻击产生的安全事件，以及可以发起的准确响应，以帮助减少攻击对物联网设备的影响。我们的分析表明，所提出的方法适用于保护物联网生态系统，为物联网设备提供足够的保护级别。
Due to the growth of IoT (Internet of Things) devices in different industries and markets in recent years and considering the currently insufficient protection for these devices, a security solution safeguarding IoT architectures are highly desirable. An interesting perspective for the development of security solutions is the use of an event management approach, knowing that an event may become an incident when an information asset is affected under certain circumstances. The paper at hand proposes a security solution based on the management of security events within IoT scenarios in order to accurately identify suspicious activities. To this end, different vulnerabilities found in IoT devices are described, as well as unique features that make these devices an appealing target for attacks. Finally, three IoT attack scenarios are presented, describing exploited vulnerabilities, security events generated by the attack, and accurate responses that could be launched to help decreasing the impact of the attack on IoT devices. Our analysis demonstrates that the proposed approach is suitable for protecting the IoT ecosystem, giving an adequate protection level to the IoT devices.