[T2TRG] Reminder: T2TRG interim meeting on IoT security

[Ari Keränen <[e-mail]>]

T2TRG,

The registration for the T2TRG interim on “IoT security implementation, operation, and systems aspects” (May 21/22 in Paris and online) is still open and we look forward to seeing many of you joining: https://github.com/t2trg/2024-05-security#registration

Based on the interests of the currently registered attendees, we have added a more detailed description of the potential topics to be discussed at the workshop:

IoT is moving away from closely coupling devices with a vendor cloud, towards enabling their integration into an infrastructure run by the device's operator or third parties of the device operator's choice. This is especially true in traditional OT environments such as factories and commercial buildings. The focus is shifting away from the connections that move data, towards the data themselves, including data about devices and their relationships. Security is the crucial enabler, but can only work if it is well-informed about the structure of the data and the processes.

The usual areas of work continue to apply:

  *   Secure communication in structured groups and distributed environments
  *   Communication of security-relevant properties (provenance, posture, ...)
  *   Resilience against system security lapses (IoT device, distributed application components -- having enough information to be able to detect and react to unexpected situations)

However, these now need to be seen in the context of the emerging device/infrastructure continuum. We plan to explore how devices and infrastructure can be melded more closely together so the device can rely on the infrastructure for some of its tasks and the infrastructure knows what to expect from the device and what the device expects from it. This includes looking at what the points of interaction are between components, both inside and between domains of authority. Moving from a connection-oriented infrastructure to a data-oriented infrastructure enables rapid and sustainable application development, as well as more efficient transfer of information by the infrastructure that can leverage the knowledge of the purpose and expectations of the data and devices. Elements enabling this continuum include distributed applications, distributed AI, efficient protocols that make use of the friends in the network, device management capabilities, etc. Open research issues include scalable and efficient modeling of data, naming data, proving provenance for processed and aggregated data, discovery and distribution of data, secure distributed processing of data.

We invite academics, engineers, and practitioners working on related topics to join the T2TRG interim to present and discuss the state of the art and future direction of secure and scalable IoT.


Thanks,
Carsten & Ari