GR-03 - COMPUTER NETWORKS GROUP - NETGROUP
Formal Models for the vulnerability analysis in IoT systems
Reference persons FULVIO VALENZA
External reference persons Erisa Karafili Lecturer in Cybersecurity at the University of Southampton.
Thesis type THEORETICAL/EXPERIMENTAL
Description The expansion of IoT will lead to new opportunities for wearable devices, home appliances, and software to share and communicate information on the Internet. However, it increments the amount and different levels of cyberattacks. Given that the shared data contains a large amount of private information, preserving information security on the shared data is an important issue that cannot be neglected.
The objective of the thesis is to focus on analyzing the vulnerabilities of IoT devices and elaborating a new formalism and tool for representing the threat models.
More specifically, the thesis will focus: (i) Construct an ontology of the different vulnerabilities/threats of IoT devices; (ii) Analyze and extract security properties and relations for the devices; (iii) Represent the different derivation rules to obtain security properties and countermeasures actions.
Required skills Reti di Calcolatori, Cybersecurity, Programmazione Java
Deadline 05/11/2022 PROPONI LA TUA CANDIDATURA