CMXsafe · CMXsafe: A novel cloud-based secure communication architecture to simplify emerging IoT regulatory compliance

Security in Internet-of-Things (IoT) environments has become a major concern. This is partly due to a large number of remotely exploitable IoT vulnerabilities in service authentication and access control combined with the lack of timely technical support. Furthermore, emerging regulations require changes in IoT deployments difficult to apply in a generalisable fashion. This difficults reusability, and scalability, and increases development and management costs. Therefore, the objectives of CMXsafe are twofold: a) Provide a proxy-layer communication architecture devised to offload security communications functions from IoT applications into application-agnostic proxy modules. This simplifies IoT device application designs and the deployment of security updates.b) Devise CMXsafe components abiding by the Security Evaluation Standard for IoT Platforms (SESIP) methodology, accepted by the European Committee for Standardization to facilitate composite cybersecurity certification schemes.To accomplish this, I will describe the technical requirements according to the SESIP standard and implement a testbed comprising 8 IoT devices and the cloud side of CMXsafe architecture.These activities will take place at the University College of Dublin School of Science, at the ASEADOS Lab where I will be supervised by Prof. Anca Delia Jurcut. CMXsafe will allow me to improve my competencies in cybersecurity regulations, cloud architectures and valuable transferable skills required to succeed in the industry.CMXsafe will guarantee a successful two-way transfer of knowledge because CMXsafe combines my background experience in security decoupled communications with the host’s experience in cybersecurity, regulations and business relations with industry partners. Therefore, CMXsafe will contribute with an IoT proxy-based communication architecture that facilitates security updates and regulation compliance.