Security, privacy and resilience for the Web of Things

[draggett]

Security, privacy and resilience are very important topics for the Web of Things. We need to build upon best practices for the underlying protocols and for end to end systems. Some of the considerations include:

• Use of encryption to defend against pervasive monitoring
• Software updates to fix security flaws
• Mutual authentication and identity management
• Credentials and trust management
• Access control mechanisms and policies
• Terms and conditions for data consumers
• Resilience to software and hardware faults
• Resilience to cyber attacks

We need your help to survey existing approaches, to identify gaps and potential solutions.

[mcicolella]

Hi, as starting point I suggest the following whitepaper by Cloud Security Alliance https://downloads.cloudsecurityalliance.org/whitepapers/Security_Guidance_for_Early_Adopters_of_the_Internet_of_Things.pdf They analyze IoT architecture, identify possible threats and suggest some guidelines. All with tables, images and schemas.