The thesis was titled "Adaptive Security in the Internet of Things".
Internet of Things (IoT) aims to connect various devices or things including sensors, software, electronics and other physical objects to collect and exchange data. This interconnection makes it a heterogeneous and dynamic ecosystem in which achieving security efficacy has become a challenging task and critical concern.
Conventional security controls and risk management models have a limited protection scope, and they implement fixed or static mitigation strategies. Therefore, they cannot address the dynamic threat, they do not address other runtime objectives, such as usability, and respond to threats manually that increases latency in risk mitigation. Aman focuses on adaptive security, which can be an effective tool to address threats in IoT as it can observe, analyze and react to them dynamically.
Aman's thesis contributes an Event-driven Adaptive Security (EDAS) model for IoT. The model feasibility is assessed using a developed prototype and a scenario-based evaluation method that provide clear evidence that EDAS is an efficient solution for IoT Security.
Aman's main supervisor has been Professor Einar Snekkenes, NTNU in Gjøvik and Co-supervisor has been Senior Research Scientist Habtamu Abie, Norwegian Computing Centre (Norsk Regnesentral).
First External opponent: Professor Pierangela Samarati, Universita` degli Studi di Milano, Italy.
Second External opponent: Professor Josef Noll, UiO/UNIK – Universitetssenteret på Kjeller.
Third external opponent: Associate Senior Lecturer Dr. Lothar Fritsch, Karlstads universitet, Faculty of Health, Science and Technology, Sweden.
Head of the committee and administrator of the committee’s work: Prof. Dr. Stephen Wolthusen, Faculty of Computer Science and Media Technology, NTNU in Gjøvik.
Dean Nils Kalstad Svendsen, AIMT conducted the public defense.