Requirement analysis of IoT security in distributed systems

This paper presents Requirement Analysis of IoT Security in Distributed Systems, particularly looking at trust, confidentiality and privacy issues. The novelty of IoT is its ability to perform automated tasks in a way that was never envisaged. However, security and safety issues have been identified as key barriers, especially in distributed environments, whereby IoTs from different autonomous security domains may have to collaborate to solve business problems. This is not a surprise; as a disruptive technology, IoT come with inherent vulnerability and threats like most other computing structures. Trust, confidentiality and privacy are critically main security issues that must be addressed along the line of cloud computing and connectivity. Arguably, providing end-to-end security i.e. confidentiality, integrity and availability (CIA) cannot completely be built into IoT architecture by default as diverse use cases (or scenarios) may require different security configurations. Conversely, beside integrity and availability, trust, confidentiality and privacy may form one such layer of IoT security architecture that should be configurable at the point of deployment. We provide a novel requirement specification for addressing trust, confidentiality and privacy concerns simultaneously, after security requirements analysis. The requirements among others prescribe the need for negotiated release of provable attributes and resources, especially when devices have the Capabilities and Requirements to share data as well as collaborate in solving business problems.