Vulnerability classification of IoT Software

物联网软件漏洞分类

• 批准号: 543347-2019
• 负责人: Alalfi, Manar
• 金额: $ 1.82万
• 依托单位: Ryerson University
• 依托单位国家: 加拿大
• 项目类别: Engage Grants Program
• 财政年份: 2019
• 资助国家: 加拿大
• 起止时间: 2019-01-01 至 2020-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=681301
• 关键词: Vulnerability; classification; IoT; Software

One new and emerging class of software is the one that operates/manages Internet-of-Things (IoT) devices. The global IoT market is expected to grow US ~ 2488 Billion by the end of 2022. With the current market competition, the rush to deploy products often results in a lack of security considerations in the design phase, according to Threatpost. Currently, there is no standard body of IoT security regulations for manufacturers to adhere to; consequently, every business must decide independently what security controls to employ, without a baseline for the bare minimum. Through this collaboration, this project will develop a classification of software vulnerabilities for a specific type of IoT platforms as an initial step toward providing support for regulatory and compliance standards.

一种新兴的软件类别是操作/管理物联网（IoT）设备的软件。到2022年底，全球物联网市场预计将增长2488亿美元。根据Threatpost的说法，在当前的市场竞争中，急于部署产品往往导致在设计阶段缺乏安全考虑。目前，没有物联网安全法规的标准机构供制造商遵守；因此，每个企业都必须独立决定采用哪些安全控制，而没有最低限度的基准。通过此次合作，该项目将为特定类型的物联网平台开发软件漏洞分类，作为为监管和合规标准提供支持的第一步。