Cyber Continuum; towards a security engineering framework incorporating legacy systems

Mark正在研究物联网设备的隐私和安全性，以及更广泛的基础设施领域。目前的工作包括通过检查生产车辆的数据收集系统来对联网汽车进行隐私和安全分析，以确定此类系统引起的一些与隐私相关的威胁。未来的工作：平均汽车的生命周期约为9年，联网汽车的寿命比典型的物联网设备更长。此外，它更有可能在其生命周期内重新出售。在物联网范围内的嵌入式设备中，越来越多的设备正在脱离传统的消费设备，如扬声器和家庭安全设备，越来越多地用于城市基础设施，以及私人和商业交通工具，如汽车，在更长的生命周期内进行安全管理的需求变得更加明显。高层次的研究目标如下：1。关于传统嵌入式系统及其相关基础设施管理的文献现状如何？2.制造商为其产品提供安全更新的现状如何？3.整合传统物联网设备长期管理的理论框架会是什么样子？该研究项目与EPSRC网络安全研究主题有关

Mark is looking into privacy and security of Internet of Things devices, and their wider infrastructural landscape. Current work includes a privacy and security analysis of connected cars through the examination of the data- gathering systems of a production vehicle, to ascertain some of the privacy-related threats to which such systems give rise. Future work: With the lifecycle of an average car being approximately nine years, a connected car has a longer lifespan than the typical IoT device. In addition, it is significantly more likely to be re-sold over its lifetime. When looking at embedded devices across the IoT spectrum, more and more devices are falling outside traditional consumer devices such as speakers and home security, increasingly being used within city infrastructure, and in private and commercial transportation such as cars, the need for security management over longer lifecycles becomes more apparent. The high-level research objectives are as follows;1. What is the current state of the literature on the management of legacy embedded systems, and their associated infrastructure?2. What is the current state of manufacturers providing security updates to their products?3. What would a theoretical framework incorporating the long-term management of legacy IoT devices look like?This research project is linked to the EPSRC Cyber Security Research theme