Cyber Continuum; towards a security engineering framework incorporating legacy systems

Mark正在研究物联网设备的隐私和安全，以及它们更广泛的基础设施前景。目前的工作包括通过检查生产车辆的数据收集系统对联网汽车进行隐私和安全分析，以确定此类系统造成的一些与隐私有关的威胁。未来工作：由于一辆普通汽车的生命周期大约为九年，联网汽车的寿命比典型的物联网设备更长。此外，它在其生命周期内更有可能被转售。纵观整个物联网领域的嵌入式设备，越来越多的设备正在落入扬声器和家庭安全等传统消费设备之外，越来越多地在城市基础设施中使用，在汽车等私人和商业交通中，对更长生命周期的安全管理的需求变得更加明显。高层研究目标如下：1.传统嵌入式系统及其相关基础设施的管理文献的现状如何？2.制造商为其产品提供安全更新的现状如何？3.纳入旧物联网设备长期管理的理论框架将是什么样子？本研究项目与EPSRC网络安全研究主题相关联

Mark is looking into privacy and security of Internet of Things devices, and their wider infrastructural landscape. Current work includes a privacy and security analysis of connected cars through the examination of the data- gathering systems of a production vehicle, to ascertain some of the privacy-related threats to which such systems give rise. Future work: With the lifecycle of an average car being approximately nine years, a connected car has a longer lifespan than the typical IoT device. In addition, it is significantly more likely to be re-sold over its lifetime. When looking at embedded devices across the IoT spectrum, more and more devices are falling outside traditional consumer devices such as speakers and home security, increasingly being used within city infrastructure, and in private and commercial transportation such as cars, the need for security management over longer lifecycles becomes more apparent. The high-level research objectives are as follows;1. What is the current state of the literature on the management of legacy embedded systems, and their associated infrastructure?2. What is the current state of manufacturers providing security updates to their products?3. What would a theoretical framework incorporating the long-term management of legacy IoT devices look like?This research project is linked to the EPSRC Cyber Security Research theme