A Proposal to Apply a Risk Assessment Methodology for IoT Systems to a Smart Childhood Obesity Caring Solution

1. This project has received funding from the European Union’s Horizon 2020 research and
innovation program under the grant agreement No. 777082 and RNP 3007.
Call EUB-02-2017 IoT Pilots
smart childhood Obesity CARing solution using IoT potential
WCN 2018
WCN and Cloudscape Brazil Position Papers – Discussion Session
A Proposal to Apply a Risk Assessment
Methodology for IoT Systems

2. This project has received funding from the European Union’s Horizon 2020 research and
innovation program under the grant agreement No. 777082 and RNP 3007.
Call EUB-02-2017 IoT Pilots
OCARIoT
smart childhood Obesity CARing solution using IoT potential
Objective: promote the improvement of eating and physical disorders and also the
prevention of the obesity onset for children (between 9 and 12 years old)
224 million school-age children in the world; more than one in three in Brazil, Greece and
Spain.
Solution: IoT-based personalised coaching
solution guiding children to adopt healthy
eating and physical activity behaviour.
Pilots: three pilot sites Spain, Greece and Brazil.
Duration: nov/17 - oct/20
https://www.rnp.br/destaques/tecnologia-baseada-internet-coisas-promete-reducao-obesidade-infantil
2

3. This project has received funding from the European Union’s Horizon 2020 research and
innovation program under the grant agreement No. 777082 and RNP 3007.
Call EUB-02-2017 IoT Pilots
OCARIoT
Specific risk assessment methodology for IoT sytems
3
IoT systems require a
different risk view

4. This project has received funding from the European Union’s Horizon 2020 research and
innovation program under the grant agreement No. 777082 and RNP 3007.
Call EUB-02-2017 IoT Pilots
OCARIoT
A Privacy, Security, Safety, Resilience and Reliability Focused
Risk Assessment Methodology for IoT Systems
4
Threat
agent
Threat
Vulnerability
originates
Impact
turns
Probability
Control
generates
Asset
has
Attack
tecnhique
RISK
Incident
Methodology is based on the
best practices, considering
different risk views and elements
type with the focus on privacy,
security, safety, resilience and
reliability on IoT context

5. This project has received funding from the European Union’s Horizon 2020 research and
innovation program under the grant agreement No. 777082 and RNP 3007.
Call EUB-02-2017 IoT Pilots
OCARIoT
A Privacy, Security, Safety, Resilience and Reliability Focused
Risk Assessment Methodology for IoT Systems
5

6. This project has received funding from the European Union’s Horizon 2020 research and
innovation program under the grant agreement No. 777082 and RNP 3007.
Call EUB-02-2017 IoT Pilots
OCARIoT
A Privacy, Security, Safety, Resilience and Reliability Focused
Risk Assessment Methodology for IoT Systems
6

7. This project has received funding from the European Union’s Horizon 2020 research and
innovation program under the grant agreement No. 777082 and RNP 3007.
Call EUB-02-2017 IoT Pilots
OCARIoT
Next steps and conclusion
7
▪ The methodology will be applied in the OCARIoT’s Pilot scenarios.
▪ The methodology can be applied in different projects.
▪ The methodology can be used by different actors to build secure IoT
systems elements.
▪ The increasing complexity requires new techniques to perform specific
activities, such as hardware security analysis.
▪ There is a need for a tool to support the methodology application.

8. This project has received funding from the European Union’s Horizon 2020 research and
innovation program under the grant agreement No. 777082 and RNP 3007.
Call EUB-02-2017 IoT Pilots
Thanks!
Sérgio Luís Ribeiro
sribeiro@cpqd.com.br
Emílio Tissato
Nakamura
nakamura@cpqd.com.b
r