Cyber Continuum; towards a security engineering framework incorporating legacy systems

点击翻译按钮获取中文摘要

Mark is looking into privacy and security of Internet of Things devices, and their wider infrastructural landscape. Current work includes a privacy and security analysis of connected cars through the examination of the data- gathering systems of a production vehicle, to ascertain some of the privacy-related threats to which such systems give rise. Future work: With the lifecycle of an average car being approximately nine years, a connected car has a longer lifespan than the typical IoT device. In addition, it is significantly more likely to be re-sold over its lifetime. When looking at embedded devices across the IoT spectrum, more and more devices are falling outside traditional consumer devices such as speakers and home security, increasingly being used within city infrastructure, and in private and commercial transportation such as cars, the need for security management over longer lifecycles becomes more apparent. The high-level research objectives are as follows;1. What is the current state of the literature on the management of legacy embedded systems, and their associated infrastructure?2. What is the current state of manufacturers providing security updates to their products?3. What would a theoretical framework incorporating the long-term management of legacy IoT devices look like?This research project is linked to the EPSRC Cyber Security Research theme