Vadim Shmal – Urban and suburban transport intelligent management. Textbook (страница 2)

– an analytical environment that allows you to make rational and effective management decisions based on the analysis of the data obtained.

In the Internet of Things, physical and virtual «objects» have the characteristics of identity, physical attributes and personification. The main role in IoT is played by devices that can collect various information and distribute it over networks to the necessary software products, as well as transmit control actions from them to devices. It is worth noting that in IoT, any communication node of the network is equal in providing its services.

As a data transfer format, it is convenient to use the format of JSON structures (Java Script Objective Notation). Its advantage lies in the fact that there is no need to include service information in the transmitted data.

The construction of IoT is associated with the formation of large data flows, which are not always structured. There are two main types for structured data: categorical and numeric. In the first of them, the data is associated with a set of values that is fixed.

Various special protocols are allocated for the interaction of things and users in IoT (Figure 1.1):

– IoT devices (things) and a user device (computer, tablet, mobile phone, etc.) establish a Device-to-Device (D2D) communication with each other;

– the collected data is transferred to the server infrastructure (cloud) «Device-to-Server» (D2S);

– the server infrastructure should share data, being able to transfer it back to devices, analysis programs or users – «Server-to-Server».

The following protocols of device interaction in IoT are distinguished (Figure 1.2):

– DDS: fast bus for integration of intelligent devices (D2D);

– CoAP: protocol for transmitting node status information to the server (D2S);

– MQTT: protocol for collecting device data and transmitting it to servers (D2S);

– XMPP: protocol for connecting devices to users, a special case of the D2S scheme when users connect to servers;

– STOMP: a protocol for exchanging messages between the device and the server, implemented in different languages and platforms (D2S);

– AMQP: queuing system for connecting servers to each other (S2S).

There are three main segments of the IoT technology market in Russia:

– mass market (B2C) or consumer segment: solutions for households and users – pos materials, smart home, banks, etc.;

– market of commercial companies (B2B) or industrial Internet of Things: industry, transport and logistics, finance, agriculture, etc.;

– market of public institutions and state-owned companies (B2G): electric power, housing and communal services, smart city, etc. There is also a so—called cross-industrial segment covering IoT solutions in all areas. [40]

The customer base of communication networks used to be characterized by the number of users, but with the development and increased availability of technologies, most users have several devices, so there is a vector of bias in the evaluation of the customer base by the number of «things» included in the network.

Positive aspects of IoT technology application:

1) The devices in the network are in constant connection with each other, which improves the quality and efficiency of the collected data.

2) The possibility of centralized control of digital information of connected devices and high speed of its output for rapid response is provided.

3) A large amount of data contributes to improving the accuracy of decisions made as a result of their processing, which makes it possible to switch from process modeling to «digital twins» technology.

4) Increasing the speed and quality of managerial decision-making leads to a significant economic effect.

The risks of implementing IoT include:

1) Separate devices are offered on the Russian market,

rather than complex solutions, which does not allow forming a single IoT ecosystem.

2) The complexity of building an IoT is accompanied by a high risk of system error during operation.

3) The scalability of the network of devices transmitting data significantly increases the risk of personal data leakage due to the complexity of monitoring and protecting a distributed network.

4) The introduction of digital systems leads to the automation of technological processes, followed by a reduction in employees and an increase in social tension.

5) The lack of unified connection standards and data transfer protocols, which does not allow combining various wireless networks of objects into a single network. The most common is the MQTT protocol. [40]

The most important differences between the Internet of Things and the existing Internet of people are:

– focus on things, not on the person;

– significantly more connected objects;

– significantly smaller object sizes and low speeds;

– focus on reading data, not on communications;

– the need to form a new infrastructure and new standards.

1.1.2 Internet of Things potential threats

The problem of building IoT in different countries and systems using different protocols may increase in the future when all devices are incompatible and it will not be possible to link them together and collect the necessary data due to the presence of two or more different IoT protocols.

Currently, the most competitive are two approaches to unifying open source platforms to increase the interconnectedness of products and devices – Open Interconnect Consortium (OIC) and AllSeen Alliance.

To understand the necessary technical support for IoT, it is worth considering several factors when approaching IoT security:

– IoT is a developing and rapidly changing area. Adding new features also leads to new vulnerabilities;

– IoT systems include not only sensors, but also software, as well as devices, platforms and infrastructure elements necessary for data transmission over the network, as well as data storage and analysis in the cloud; [30]

– IoT systems must be protected from threats to other networks and users (external security), as well as from threats to their users and property (internal security); [30]

– the Internet is an interconnected network of networks in which the security of each of them affects the security of the others. [30]

Let’s look at some IoT security threats:

– Malware distribution botnets can be used to attack IoT devices connected to the global network;

– Denial of service DoS attack to slow down services and discredit businesses;

– social engineering attacks aimed at illegally obtaining confidential information about users can also be exposed to devices connected to IoT;

– targeted cyber attacks in order to gain illegal control and access to the network while remaining unnoticed for a long period of time;

– ransomware virus;

– remote recording of Internet of Things users in order to obtain confidential data;

– physical damage to equipment controlled by the Internet of Things by obtaining control;

– falsification of data in order to make wrong decisions;

– digital espionage.

As you can see, information in the modern world plays a very important role, especially when it is possible to remotely control various devices or predict the implementation and manage business or technological processes, so cybersecurity issues come to the fore.

Some methods of IoT risk reduction:

– Management and control of Internet of Things endpoints by identifying and adding to the inventory of resources to reduce the likelihood of cyber attacks;

– identify the IT security vulnerability zone;

– detection of abnormal deviations in data during the interaction of devices and servers;

– using a good data encryption system and protocols;

– management control at the identity level to identify users and their actions. Authentication helps companies better understand how users access devices, which increases the level of protection against vulnerabilities and misuse.

It is worth noting that with the development of IoT, it is necessary to guarantee sufficient security of solutions, since they operate with a large amount of confidential data that directly affects the most important production processes. For this purpose, measures are carried out aimed at:

– Security of devices and sensors. Device security is implemented through device authentication, partial message encryption, and sensor firmware updates.;