Risk-based automated assessment and testing for the cybersecurity certification and labelling of IoT devices
Open accessIntegrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
An IoT security certification methodology for assessing security solutions in an automated way has also been proposed.
“An IoT security certification methodology for assessing security solutions in an automated way has also been proposed [39].”
From IoT cyber risk: A holistic analysis of cyber risk assessment frameworks, risk vectors, and risk ranking process (2020) · cites this paper as [39]
Cites
The Constrained Application Protocol (CoAP)
Shelby, Z., Hartke, K., & Bormann, C. (2014) · doi:10.17487/rfc7252 · Cited by 2,605 · see citing works
DDoS in the IoT: Mirai and Other Botnets
Kolias, C., Kambourakis, G., Stavrou, A., & Voas, J. (2017) · Computer · doi:10.1109/mc.2017.201 · Cited by 1,892 · see citing works
Internet of Things security: A survey
Alaba, F. A., Othman, M., Hashem, M., & Alotaibi, F. A. (2017) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2017.04.002 · Cited by 1,348 · see citing works
Regression testing minimization, selection and prioritization: a survey
Yoo, S., & Harman, M. (2012) · Software Testing Verification and Reliability · doi:10.1002/stv.430 · Cited by 1,330 · see citing works
Security of the Internet of Things: perspectives and challenges
Jing, Q., Vasilakos, A. V., Wan, J., Lu, J., & Qiu, D. (2014) · Wireless Networks · doi:10.1007/s11276-014-0761-7 · Cited by 1,257 · see citing works
Cyber Security and the Internet of Things: Vulnerabilities, Threats, Intruders and Attacks
Abomhara, M., & K�ien, G. M. (2015) · Journal of Cyber Security and Mobility · doi:10.13052/jcsm2245-1439.414 · Cited by 673 · see citing works
Datagram Transport Layer Security Version 1.2
Rescorla, E., & Modadugu, N. (2012) · doi:10.17487/rfc6347 · Cited by 641 · see citing works
Godefroid, P., Levin, M. Y., & Molnár, D. (2012) · Communications of the ACM · doi:10.1145/2093548.2093564 · Cited by 572 · see citing works
Arkin, B., Stender, S., & McGraw, G. E. (2005) · IEEE Security & Privacy · doi:10.1109/msp.2005.23 · Cited by 265 · see citing works
Introducing OCTAVE Allegro: Improving the Information Security Risk Assessment Process
Caralli, R. A., Stevens, J. F., Young, L. R., et al. (2007) · KiltHub Repository · doi:10.1184/r1/6574790.v1 · Cited by 203 · see citing works
Security Risk Assessment in Internet of Things Systems
Nurse, J. R. C., Creese, S., & Roure, D. D. (2017) · IT Professional · doi:10.1109/mitp.2017.3680959 · Cited by 199 · see citing works
Autonomic schemes for threat mitigation in Internet of Things
Ashraf, Q. M., & Habaebi, M. H. (2014) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2014.11.011 · Cited by 148 · see citing works
Felderer, M., Büchler, M., Johns, M., et al. (2015) · Advances in computers · doi:10.1016/bs.adcom.2015.11.003 · Cited by 137 · see citing works
Staff, C. (2012) · Communications of the ACM · doi:10.1145/2076450.2076464 · Cited by 103 · see citing works
A subset of precise UML for model-based testing
Bouquet, F., Grandpierre, C., Legeard, B., et al. (2007) · doi:10.1145/1291535.1291545 · Cited by 83 · see citing works
A Survey on Model-Based Testing Tools for Test Case Generation
Li, W., Gall, F. L., & Spaseski, N. (2017) · Communications in computer and information science · doi:10.1007/978-3-319-71734-0_7 · Cited by 55 · see citing works
A Classification for Model-Based Security Testing
Felderer, M., Agreiter, B., Zech, P., et al. (2011) · Cited by 38 · see citing works
Applying the common criteria in systems engineering
Keblawi, F., & Sullivan, D. (2006) · IEEE Security & Privacy · doi:10.1109/msp.2006.35 · Cited by 29 · see citing works
Does the common criteria paradigm have a future?
Hearn, J. (2004) · IEEE Security & Privacy · doi:10.1109/msecp.2004.1264857 · Cited by 28 · see citing works
Towards integration of use case modelling and usage-based testing
Regnell, B., Runeson, P., & Wohlin, C. (2000) · Journal of Systems and Software · doi:10.1016/s0164-1212(99)00084-9 · Cited by 28 · see citing works
Online Model-Based Behavioral Fuzzing
Schneider, M., Großmann, J., Schieferdecker, I., et al. (2013) · IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW) · doi:10.1109/icstw.2013.61 · Cited by 22 · see citing works
How Certification Systems Fail: Lessons from the Ware Report
Murdoch, S. J., Bond, M., & Anderson, R. (2012) · IEEE Security & Privacy · doi:10.1109/msp.2012.89 · Cited by 20 · see citing works
Combining Security Risk Assessment and Security Testing Based on Standards
Großmann, J., & Seehusen, F. (2015) · Lecture notes in computer science · doi:10.1007/978-3-319-26416-5_2 · Cited by 17 · see citing works
Smartesting CertifyIt: Model-Based Testing for Enterprise IT
Legeard, B., & Arnaud, B. (2013) · IEEE International Conference on Software Testing, Verification and Validation (ICST) · doi:10.1109/icst.2013.55 · Cited by 16 · see citing works
A Quantitative Analysis of Common Criteria Certification Practice
Kaluvuri, S. P., Bezzi, M., & Roudier, Y. (2014) · Lecture notes in computer science · doi:10.1007/978-3-319-09770-1_12 · Cited by 16 · see citing works
MBT for Global Platform Compliance Testing: Experience Report and Lessons Learned
Bernabeu, G., Jaffuel, E., Legeard, B., et al. (2014) · IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) · doi:10.1109/issrew.2014.91 · Cited by 14 · see citing works
Certification and evaluation: A security economics perspective
Anderson, R., & Fuloria, S. (2009) · IEEE Conference on Emerging Technologies & Factory Automation (ETFA) · doi:10.1109/etfa.2009.5347129 · Cited by 13 · see citing works
Test-based risk assessment and security certification proposal for the Internet of Things
Matheu, S. N., Hernández-Ramos, J. L., & Skármeta, A. (2018) · IEEE World Forum on Internet of Things (WF-IoT) · doi:10.1109/wf-iot.2018.8355193 · Cited by 12 · see citing works
Self-citationTitan TTCN-3 Based Test Framework for Resource Constrained Systems
Yushev, A., Schappacher, M., & Sikora, A. (2016) · MATEC Web of Conferences · doi:10.1051/matecconf/20167506005 · Cited by 9 · see citing works
Risk Assessment and Risk-Driven Testing
Bauer, T., Großmann, J., Seehusen, F., et al. (2014) · Lecture notes in computer science · doi:10.1007/978-3-319-14114-5 · Cited by 2 · see citing works
Improving Security Testing with Usage-Based Fuzz Testing
Schneider, M., Herbold, S., Wendland, M.-F., et al. (2015) · Lecture notes in computer science · doi:10.1007/978-3-319-26416-5_8 · Cited by 1 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Kandasamy, K., Srinivas, S., Achuthan, K., & Rangan, V. P. (2020) · EURASIP Journal on Information Security · doi:10.1186/s13635-020-00111-0 · Cited by 160 · see citing works
IoT security certifications: Challenges and potential approaches
Cirne, A., Sousa, P. R., Resende, J. S., & Antunes, L. (2022) · Computers & Security · doi:10.1016/j.cose.2022.102669 · Cited by 54 · see citing works
Gateway-Based Certification Approach to Include IoT Nodes in a Trusted Edge/Cloud Environment
Lukaj, V., Martella, F., Fazio, M., Galletta, A., Celesti, A., & Villari, M. (2023) · 2023 IEEE/ACM 23rd International Symposium on Cluster, Cloud and Internet Computing Workshops (CCGridW) · doi:10.1109/ccgridw59191.2023.00048 · Cited by 3 · see citing works
- Authors
- Matheu-García, S. N., Hernández-Ramos, J. L., Skarmeta, A. F., & Baldini, G.
- Affiliations
- European Commission (BE)
- Venue
- Computer Standards & Interfaces
- Publisher
- Elsevier BV
- Published
- 2019-02
- Volume
- 62
- Pages
- 64-83
- ISSN
- 0920-5489 (ISSN-L)
- OpenAlex
- W2885541569
- Cited by
- 111
- References
- 32
- Citations by year
- 2026: 3 · 2025: 6 · 2024: 4 · 2023: 15 · 2022: 42 · 2021: 19 · 2020: 10 · 2019: 12
- FWCI
- 6.35
- Type
- journal article
- Language
- en
- Open access
- green
- zenodo.org
- Licence
- Locations
- Computer Standards & Interfaces (publishedVersion)
- Joint Research Centre (European Commission) (submittedVersion)
- Zenodo (CERN European Organization for Nuclear Research) (submittedVersion, other-oa)
- Funders
- European Commission (H2020-644852 ARMOUR EU, H2020-731558 ANASTACIA, H2020-779852 IoTCrawler)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Keywords
- Internet of Things security, automated security testing, ISO 31000
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
