Special Issue on security and privacy in Internet of Things and cloud computing systems

Special Issue on security and privacy in Internet of Things and cloud computing systemsThe strong growth in mobile devices, pervasive networked embedded systems, and wireless sensors provides a flexible and cheap infrastructure for collecting and monitoring real-world data, nearly everywhere.This is complemented by the rapid increase in information and computing power offered by computing clusters, emerging cloud systems, and information services over stationary and dynamic networks.The integration of network computing and mobile systems presents new challenges with respect to the dependability of integrated applications: accepted measures of availability, costs, and quality of service for high-bandwidth, high-quality stationary systems have to be rethought, facing possibly new dependability paradigms for cheap, resource restricted, and unreliable mobile systems with low-bandwidth communication facilities.On the other hand, the proliferation of devices, which are able to directly connect to the Internet, has led to a new computing and communication paradigm known as Internet of Things (IoT).At the same time, new threat vectors have emerged that leverage and magnify traditional hacking methods, enabling large-scale and intelligence-driven attacks against a variety of platforms, including mobile, cloud, IoT, as well as conventional networks.The consequence of such fast-evolving environment is the pressing need for effective and efficient paradigms, approaches, and tools for building, maintaining, and managing secure and dependable systems.This Special Issue addresses security and privacy issues related to the design, analysis, and implementation of IoT and cloud computing infrastructures, systems, architectures, algorithms, and protocols.We have received many manuscripts.Only four of these manuscripts of high quality were selected for this Special Issue.Each selected paper was blindly reviewed by at least three qualified reviewers in the field.Below is a brief summary of each manuscript.The first paper entitled "The Internet of Things and the Smart City: Legal challenges with digital forensics, privacy, and security" by Losavio et al 1 investigates the threats to personal autonomy, personality, and privacy in IoT and smart city and proposes a comprehensive survey of related legal challenges.The technical-legal interaction involved and how they can be informative with respect to privacy and security with the IoT and smart city are examined in-depth, leading to a qualitative comparison of legal regimes of digital forensics and investigations among nations worldwide.The second paper entitled "Secure cloud computing: reference architecture for measuring instrument under legal control" by Oppermann et al 2 introduces a secure cloud reference architecture for measuring instruments, addressing both requirements and roles in the Legal Metrology framework.The general approach of the proposed reference architecture is evaluated to find out whether cloud computing can be integrated into the legal framework.A bottom-up approach is considered, where each layer of the cloud is addressed and thoroughly tested against the essential requirements for Legal Metrology.On top of this, a secure communication protocol for encrypted data is devised to address the demand of integrity of encrypted measurements throughout their lifecycle.Finally, for the purpose of detecting anomalies and classifying the system behavior depending on their severity and impact, a continuous monitoring approach is presented.The third paper entitled "Passphrase protected device-to-device mutual authentication schemes for smart homes" by Raniyal et al 3 proposes two novel passphrase protected device-to-device mutual authentication schemes for smart homes, in which the keys are protected using passphrases and a centralized server provides a proxy-passphrase service to smart home devices.The High-Level Protocol Specification Language is used to model the proposed protocols, and a security analysis is provided using the SPAN/AVISPA tool, demonstrating that the proposed schemes can achieve the goals of secrecy of secret keys and device-to-device mutual authentication.The fourth and last paper entitled "A review and an empirical analysis of privacy policy and notices for consumer Internet of things" by Perez et al 4 proposes a comprehensive review of issues related to privacy policies and notices of six consumer IoT devices and systems available in the U.S. market as of November 2017.An analysis of privacy practices is presented about the practices that manufacturers provide related to data collection, data ownership, data modification, data security, external data sharing, policy change, and policies for specific audiences.To this end, an experimental test bed is designed and used to investigate the traffic generated when two voice-activated intelligent assistant devices, namely the Amazon Echo Dot 2.0 and the

Récupéré en direct depuis OpenAlex et désinversé. Les résumés ne sont pas conservés dans cette base de données : les index inversés représentent 8,6 Go des 9,3 Go de texte de la base, et le serveur dispose de 13 Go libres.