Modelo arquitetural AS-ProcBE: uma contribuição à segurança adaptativa na internet das coisas explorando contextualização progressiva de eventos

Abstract

The Internet of Things (IoT) consists of an ecosystem that combines sensor networks, cloud computing, as well as smart devices. With the high levels of connectivity practiced in the IoT, the security and privacy challenges have become intensified as necessary and enabling characteristics. Promoting security over this dynamic and heterogeneous environment with pre-defined and static mechanisms is a task that has proven to be unfeasible. Although adaptive security research already addresses some of the challenges of IoT, by conducting a Systematic Literature Review (RSL) it was possible to identify that most approaches do not present sufficient details about contextualization strategies. The selected works present contextualization as a single step in the event handling flow, which often implies greater consumption of resources such as network traffic, storage volume, memory and processing, in addition to scalability problems. The hypothesis defended in this Thesis consists of the conviction that it is possible to explore context awareness to provide adaptive security using an architectural model that offers event contextualization in a distributed, progressive and timely manner. Considering this, the objective of this Thesis was to design an architectural model to provide adaptive security in IoT, called AS-ProCBE, which stands out for its context-based progressive enrichment module. Among the features offered by AS-ProCBE, the following stand out: (i) meet the stages of the MAPE-K feedback loop with support for the IoT heterogeneity; (ii) flexibility to meet the demands of different adaptive security scenarios that require context awareness; (iii) ability to collect contextual information from different sources; (iv) distribution of contextualization in different stages; and finally, (v) description of the prototype that allows the replication of studies and continuity of research. AS-ProCBE was evaluated through usage scenarios exploring different designed functionalities. This assessment allowed the verification that the progressive contextualization of AS-ProCBE proves to be an opportune alternative for mitigating the security problems introduced by IoT.