An IoT Digital Twin for Cyber-Security Defence Based on Runtime Verification

Jorge David de Hoz Diego; Anastasios Temperekidis; Panagiotis Katsaros; Charalambos Konstantinou

doi:10.1007/978-3-031-19849-6_31

An IoT Digital Twin for Cyber-Security Defence Based on Runtime Verification

Jorge David de Hoz Diego, Anastasios Temperekidis, Panagiotis Katsaros^*, Charalambos Konstantinou

^*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

7 Scopus citations

Abstract

A security decoupling approach for IoT device communications is presented, based on a Digital Twin with runtime verification capabilities. The solution proposed assumes that a local agent (security module) can be deployed to the IoT device by the IoT server. The runtime verification approach implemented in the Digital Twin detects possible violations of protected communications from either a remote device or a local compromised process and provides timely and valuable information for countering a potential cyber-security attack. Moreover, only a subset of the observed traffic needs to be monitored, which induces negligible overhead and allows deploying the Digital Twin in IoT devices with limited computational resources. Runtime verification was implemented by adopting a rule-based approach for monitoring parametric events, i.e. the packets that carry data.

Original language	English (US)
Title of host publication	Leveraging Applications of Formal Methods, Verification and Validation. Verification Principles - 11th International Symposium, ISoLA 2022, Proceedings
Editors	Tiziana Margaria, Bernhard Steffen
Publisher	Springer Science and Business Media Deutschland GmbH
Pages	556-574
Number of pages	19
ISBN (Print)	9783031198489
DOIs	https://doi.org/10.1007/978-3-031-19849-6_31
State	Published - 2022
Event	11th International Symposium on Leveraging Applications of Formal Methods, Verification and Validation, ISoLA 2022 - Rhodes, Greece Duration: Oct 22 2022 → Oct 30 2022

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	13701 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	11th International Symposium on Leveraging Applications of Formal Methods, Verification and Validation, ISoLA 2022
Country/Territory	Greece
City	Rhodes
Period	10/22/22 → 10/30/22

Bibliographical note

Publisher Copyright:
© 2022, The Author(s), under exclusive license to Springer Nature Switzerland AG.

Keywords

Digital twin
IoT
Runtime verification
Security-by-design

ASJC Scopus subject areas

Theoretical Computer Science
General Computer Science

Access to Document

10.1007/978-3-031-19849-6_31

Cite this

de Hoz Diego, J. D., Temperekidis, A., Katsaros, P., & Konstantinou, C. (2022). An IoT Digital Twin for Cyber-Security Defence Based on Runtime Verification. In T. Margaria, & B. Steffen (Eds.), Leveraging Applications of Formal Methods, Verification and Validation. Verification Principles - 11th International Symposium, ISoLA 2022, Proceedings (pp. 556-574). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 13701 LNCS). Springer Science and Business Media Deutschland GmbH. https://doi.org/10.1007/978-3-031-19849-6_31

de Hoz Diego, Jorge David ; Temperekidis, Anastasios ; Katsaros, Panagiotis et al. / An IoT Digital Twin for Cyber-Security Defence Based on Runtime Verification. Leveraging Applications of Formal Methods, Verification and Validation. Verification Principles - 11th International Symposium, ISoLA 2022, Proceedings. editor / Tiziana Margaria ; Bernhard Steffen. Springer Science and Business Media Deutschland GmbH, 2022. pp. 556-574 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{a9fd90d19eff4bed9757e965ff677600,

title = "An IoT Digital Twin for Cyber-Security Defence Based on Runtime Verification",

abstract = "A security decoupling approach for IoT device communications is presented, based on a Digital Twin with runtime verification capabilities. The solution proposed assumes that a local agent (security module) can be deployed to the IoT device by the IoT server. The runtime verification approach implemented in the Digital Twin detects possible violations of protected communications from either a remote device or a local compromised process and provides timely and valuable information for countering a potential cyber-security attack. Moreover, only a subset of the observed traffic needs to be monitored, which induces negligible overhead and allows deploying the Digital Twin in IoT devices with limited computational resources. Runtime verification was implemented by adopting a rule-based approach for monitoring parametric events, i.e. the packets that carry data.",

keywords = "Digital twin, IoT, Runtime verification, Security-by-design",

author = "{de Hoz Diego}, {Jorge David} and Anastasios Temperekidis and Panagiotis Katsaros and Charalambos Konstantinou",

note = "Publisher Copyright: {\textcopyright} 2022, The Author(s), under exclusive license to Springer Nature Switzerland AG.; 11th International Symposium on Leveraging Applications of Formal Methods, Verification and Validation, ISoLA 2022 ; Conference date: 22-10-2022 Through 30-10-2022",

year = "2022",

doi = "10.1007/978-3-031-19849-6_31",

language = "English (US)",

isbn = "9783031198489",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer Science and Business Media Deutschland GmbH",

pages = "556--574",

editor = "Tiziana Margaria and Bernhard Steffen",

booktitle = "Leveraging Applications of Formal Methods, Verification and Validation. Verification Principles - 11th International Symposium, ISoLA 2022, Proceedings",

address = "Germany",

}

de Hoz Diego, JD, Temperekidis, A, Katsaros, P & Konstantinou, C 2022, An IoT Digital Twin for Cyber-Security Defence Based on Runtime Verification. in T Margaria & B Steffen (eds), Leveraging Applications of Formal Methods, Verification and Validation. Verification Principles - 11th International Symposium, ISoLA 2022, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 13701 LNCS, Springer Science and Business Media Deutschland GmbH, pp. 556-574, 11th International Symposium on Leveraging Applications of Formal Methods, Verification and Validation, ISoLA 2022, Rhodes, Greece, 10/22/22. https://doi.org/10.1007/978-3-031-19849-6_31

An IoT Digital Twin for Cyber-Security Defence Based on Runtime Verification. / de Hoz Diego, Jorge David; Temperekidis, Anastasios; Katsaros, Panagiotis et al.
Leveraging Applications of Formal Methods, Verification and Validation. Verification Principles - 11th International Symposium, ISoLA 2022, Proceedings. ed. / Tiziana Margaria; Bernhard Steffen. Springer Science and Business Media Deutschland GmbH, 2022. p. 556-574 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 13701 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - An IoT Digital Twin for Cyber-Security Defence Based on Runtime Verification

AU - de Hoz Diego, Jorge David

AU - Temperekidis, Anastasios

AU - Katsaros, Panagiotis

AU - Konstantinou, Charalambos

PY - 2022

Y1 - 2022

N2 - A security decoupling approach for IoT device communications is presented, based on a Digital Twin with runtime verification capabilities. The solution proposed assumes that a local agent (security module) can be deployed to the IoT device by the IoT server. The runtime verification approach implemented in the Digital Twin detects possible violations of protected communications from either a remote device or a local compromised process and provides timely and valuable information for countering a potential cyber-security attack. Moreover, only a subset of the observed traffic needs to be monitored, which induces negligible overhead and allows deploying the Digital Twin in IoT devices with limited computational resources. Runtime verification was implemented by adopting a rule-based approach for monitoring parametric events, i.e. the packets that carry data.

AB - A security decoupling approach for IoT device communications is presented, based on a Digital Twin with runtime verification capabilities. The solution proposed assumes that a local agent (security module) can be deployed to the IoT device by the IoT server. The runtime verification approach implemented in the Digital Twin detects possible violations of protected communications from either a remote device or a local compromised process and provides timely and valuable information for countering a potential cyber-security attack. Moreover, only a subset of the observed traffic needs to be monitored, which induces negligible overhead and allows deploying the Digital Twin in IoT devices with limited computational resources. Runtime verification was implemented by adopting a rule-based approach for monitoring parametric events, i.e. the packets that carry data.

KW - Digital twin

KW - IoT

KW - Runtime verification

KW - Security-by-design

UR - http://www.scopus.com/inward/record.url?scp=85142669319&partnerID=8YFLogxK

U2 - 10.1007/978-3-031-19849-6_31

DO - 10.1007/978-3-031-19849-6_31

M3 - Conference contribution

AN - SCOPUS:85142669319

SN - 9783031198489

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 556

EP - 574

BT - Leveraging Applications of Formal Methods, Verification and Validation. Verification Principles - 11th International Symposium, ISoLA 2022, Proceedings

A2 - Margaria, Tiziana

A2 - Steffen, Bernhard

PB - Springer Science and Business Media Deutschland GmbH

T2 - 11th International Symposium on Leveraging Applications of Formal Methods, Verification and Validation, ISoLA 2022

Y2 - 22 October 2022 through 30 October 2022

ER -

de Hoz Diego JD, Temperekidis A, Katsaros P, Konstantinou C. An IoT Digital Twin for Cyber-Security Defence Based on Runtime Verification. In Margaria T, Steffen B, editors, Leveraging Applications of Formal Methods, Verification and Validation. Verification Principles - 11th International Symposium, ISoLA 2022, Proceedings. Springer Science and Business Media Deutschland GmbH. 2022. p. 556-574. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-031-19849-6_31