Analysis of IoT device´s factors affecting on the security risks in IoT systems.

Abstract

Organizations, cities and countries have chosen to implement digital transformation processes through the inclusion of emerging technologies such as: Cloud Computing, BigData, IoT and Artificial Intelligence to improve the effectiveness of their operations, and maintaining adequate consumption of renewable and non-renewable resources. However, these technologies have opened the possibility of facing cybersecurity threats that could have a negative economic, social and environmental impact. Particularly, IoT has been the focus of this research, due to its inherent characteristics which have allowed its adoption in multiple area such as health, education, transportation, energy, among others. Although the adoption of the "smart" concept has been deployed into an increasing number of devices worldwide, there are also the security risks, which have been of research interest in recent years. One of the important aspects from the security perspective related to IoT, is that, according to some researches, risk analysis methodologies, which are the first step in establishing any security strategy, need to be adapted to the particularities of IoT. Although several proposals have been presented, these differ from the parameters used to assess the risk, and in some cases the reason for their selection is not specified. In this sense, the aim of this research is to establish the risk factors of IoT devices that can be considered in security risk analysis, through a systematic literature review, experimentation and expert judgments, framed within a 4-phases DRM research methodology. The results present seven relevant risk factors in IoT, which have been modeled mathematically and used in a risk methodology based on a multi-criteria decision analysis to obtain an aggregate risk value.