TITLE:
Internet of Things Behavioral-Economic Security Design, Actors & Cyber War
AUTHORS:
Robert L. Shuler, Billy G. Smith
KEYWORDS:
Security, Reliability, Privacy, Distributed Denial of Service, DDOS, Botnet, Cyberwar
JOURNAL NAME:
Advances in Internet of Things,
Vol.7 No.2,
April
30,
2017
ABSTRACT: Using security incident history we identify threats to and using the IoT and other ubiquitous devices emerging since 2012, gaining widespread recognition in 2016, and only lightly addressed in either IoT security literature or the press. We show the IoT has likely already been used in cyber war between major powers. The new threats, most notably “hijack,” are larger than previous threats combined, but only mildly affect suppliers, and only a few clients. Using a successful behavioral-economic model we show that traditional mitigation places responsibility on un-affected parties and likely will not work. For suppliers, there are profit-conflicted motives, as the new threat rides on a profit vehicle. The new threat circumvents conventional security architecture at a behavioral level. We analyze each actor-target pair and evaluate technical strategies. More effective technical strategies are suggested where old ones are overmatched by the budgets, technical prowess or regulatory power of hostile actors, or the technical nature of the threats. Consolidated action may be needed, but regulation is difficult because of conflicts of interest within the national security community.