CloudIoTSecurity: evaluating the security in cloud IoT applications

Abstract

Internet of Things (IoT) and Cloud Computing are two innovative technologies that merged to exploit their benefits. The integration of IoT and Cloud Computing is known as the CloudIoT paradigm. However, there are issues related to its application (e.g., security, privacy, legal and social aspects, heterogeneity, performance, reliability), which require tools that could assist in improving those non-functional characteristics when functioning. Also, it is necessary to consider security features when combining IoT and Cloud Computing; because there are no known methods to evaluate quality in CloudIoT applications related to security. Therefore, this paper presents a quality model and a method to evaluate the security in Cloud IoT applications aligned to ISO 25040, called CloudIoTSecurity, which is a support to assess the security step by step towards the identification of security problems and therefore the improvement of these applications. Also, an example that uses this proposal is presented to demonstrate its feasibility.