IoTsecM: A UML/SysML Extension for Internet of Things Security Modeling

• Published in: IEEE access Vol. 9; pp. 154112 - 154135
• Main Authors: Escamilla-Ambrosio, Ponciano Jorge, Robles-Ramirez, David Alejandro, Tryfonas, Theo, Rodriguez-Mota, Abraham, Gallegos-Garcia, Gina, Salinas-Rosales, Moises
• Format: Journal Article
• Language: English
• Published: Piscataway IEEE 2021; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Analytical models; autonomous vehicles; Computer architecture; Cybersecurity; Internet of Things; Model-based systems; Modeling; Modelling; Proposals; Requirements analysis; Security; Smart cities; SysML; Systems engineering; Threat evaluation; UML; Unified modeling language; Waterfalls
• ISSN: 2169-3536; 2169-3536
• DOI: 10.1109/ACCESS.2021.3125979

In this paper, an approach referred to as IoTsecM is proposed. This proposal is a UML/SysML extension for security requirements modeling within the analysis stage in a waterfall development life cycle in a Model-Based Systems Engineering Approach. IoTsecM allows the security requirements representation in two very well-known modeling languages, UML and SysML. With the utilization of this extension, IoT developers can consider the security requirements from the analysis stage in the design process of IoT systems. IoTsecM allows IoT systems to be designed considering possible threats and the corresponding security requirements analysis. The applicability of IoTsecM is demonstrated through applying it to analyze and represent the security requirements in an IoT real-life system in the context of collaborative autonomous vehicles in smart cities. In this use case, IoTsecM was able to represent the security requirements identified within the system architecture elements, in which all countermeasures identified were depicted using the proposed IoTsecM profile.