Risk-driven security metrics development for an e-health IoT application

Reijo M. Savola; Pekka Savolainen; Antti Evesti; Habtamu Abie; Markus Sihvonen

doi:10.1109/ISSA.2015.7335061

Risk-driven security metrics development for an e-health IoT application

Reijo M. Savola, Pekka Savolainen, Antti Evesti, Habtamu Abie, Markus Sihvonen

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

20 Citations (Scopus)

Abstract

Security and privacy for e-health Internet-of-Things applications is a challenge arising due to the novelty and openness of the solutions. We analyze the security risks of an envisioned e-health application for elderly persons' day-to-day support and chronic disease self-care, from the perspectives of the service provider and end-user. In addition, we propose initial heuristics for security objective decomposition aimed at security metrics definition. Systematically defined and managed security metrics enable higher effectiveness of security controls, enabling informed risk-driven security decision-making.

Original language	English
Title of host publication	Information Security for South Africa (ISSA), 2015
Publisher	IEEE Institute of Electrical and Electronic Engineers
Pages	1 - 6
ISBN (Electronic)	978-1-4799-7755-0, 978-1-4799-7754-3
DOIs	https://doi.org/10.1109/ISSA.2015.7335061
Publication status	Published - 23 Nov 2015
MoE publication type	A4 Article in a conference publication
Event	14th International Information Security South Africa Conference, ISSA 2015 - Johannesburg, South Africa Duration: 12 Aug 2015 → 14 Aug 2015 Conference number: 14

Conference

Conference	14th International Information Security South Africa Conference, ISSA 2015
Abbreviated title	ISSA 2015
Country/Territory	South Africa
City	Johannesburg
Period	12/08/15 → 14/08/15

Keywords

android
risk analysis
security effectiveness
security metrics

Access to Document

10.1109/ISSA.2015.7335061

Cite this

@inproceedings{8e8be36f9e674d7cadbb008742806ee1,

title = "Risk-driven security metrics development for an e-health IoT application",

abstract = "Security and privacy for e-health Internet-of-Things applications is a challenge arising due to the novelty and openness of the solutions. We analyze the security risks of an envisioned e-health application for elderly persons' day-to-day support and chronic disease self-care, from the perspectives of the service provider and end-user. In addition, we propose initial heuristics for security objective decomposition aimed at security metrics definition. Systematically defined and managed security metrics enable higher effectiveness of security controls, enabling informed risk-driven security decision-making.",

keywords = "android, risk analysis, security effectiveness, security metrics",

author = "Savola, {Reijo M.} and Pekka Savolainen and Antti Evesti and Habtamu Abie and Markus Sihvonen",

year = "2015",

month = nov,

day = "23",

doi = "10.1109/ISSA.2015.7335061",

language = "English",

pages = "1 -- 6",

booktitle = "Information Security for South Africa (ISSA), 2015",

publisher = "IEEE Institute of Electrical and Electronic Engineers",

address = "United States",

note = "14th International Information Security South Africa Conference, ISSA 2015, ISSA 2015 ; Conference date: 12-08-2015 Through 14-08-2015",

}

Savola, RM, Savolainen, P, Evesti, A, Abie, H & Sihvonen, M 2015, Risk-driven security metrics development for an e-health IoT application. in Information Security for South Africa (ISSA), 2015. IEEE Institute of Electrical and Electronic Engineers, pp. 1 - 6, 14th International Information Security South Africa Conference, ISSA 2015, Johannesburg, South Africa, 12/08/15. https://doi.org/10.1109/ISSA.2015.7335061

Risk-driven security metrics development for an e-health IoT application. / Savola, Reijo M.; Savolainen, Pekka; Evesti, Antti et al.
Information Security for South Africa (ISSA), 2015. IEEE Institute of Electrical and Electronic Engineers, 2015. p. 1 - 6.

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

TY - GEN

T1 - Risk-driven security metrics development for an e-health IoT application

AU - Savola, Reijo M.

AU - Savolainen, Pekka

AU - Evesti, Antti

AU - Abie, Habtamu

AU - Sihvonen, Markus

N1 - Conference code: 14

PY - 2015/11/23

Y1 - 2015/11/23

N2 - Security and privacy for e-health Internet-of-Things applications is a challenge arising due to the novelty and openness of the solutions. We analyze the security risks of an envisioned e-health application for elderly persons' day-to-day support and chronic disease self-care, from the perspectives of the service provider and end-user. In addition, we propose initial heuristics for security objective decomposition aimed at security metrics definition. Systematically defined and managed security metrics enable higher effectiveness of security controls, enabling informed risk-driven security decision-making.

AB - Security and privacy for e-health Internet-of-Things applications is a challenge arising due to the novelty and openness of the solutions. We analyze the security risks of an envisioned e-health application for elderly persons' day-to-day support and chronic disease self-care, from the perspectives of the service provider and end-user. In addition, we propose initial heuristics for security objective decomposition aimed at security metrics definition. Systematically defined and managed security metrics enable higher effectiveness of security controls, enabling informed risk-driven security decision-making.

KW - android

KW - risk analysis

KW - security effectiveness

KW - security metrics

U2 - 10.1109/ISSA.2015.7335061

DO - 10.1109/ISSA.2015.7335061

M3 - Conference article in proceedings

SP - 1

EP - 6

BT - Information Security for South Africa (ISSA), 2015

PB - IEEE Institute of Electrical and Electronic Engineers

T2 - 14th International Information Security South Africa Conference, ISSA 2015

Y2 - 12 August 2015 through 14 August 2015

ER -

Risk-driven security metrics development for an e-health IoT application

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this