Abstract:The aim of this paper was to enhance the process of diagnosing and detecting possible vulnerabilities within an Internet of Things (IoT) system by using a named entity recognition (NER)-based solution. In both research and practice, security system management experts rely on a large variety of heterogeneous security data sources, which are usually available in the form of natural language. This is challenging as the process is very time consuming and it is difficult to stay up to date with the constant findings in the areas of security threats, vulnerabilities, attacks, countermeasures, and risks. The proposed system is conceived as a semantic indexing solution of existing vulnerabilities and serves as an information tool for security management experts. By integrating the proposed system, the users can easily discover the potential vulnerabilities of their IoT devices. The proposed solution integrates ontologies and NER techniques in order to obtain a high rate of automation with the scope of reaching a self-maintained and up-to-date system in terms of vulnerabilities and common exposures knowledge. To achieve this, a total of 312 CVEs (common vulnerabilities and exposures) specific to the IoT field were identified. CVEs are arguably one of the most important cybersecurity resources nowadays, containing information about the latest discovered vulnerabilities. This set is further used as data corpus for an NER model designed to identify the main entities and relations that are relevant to IoT security. The goal is to automatically monitor cybersecurity information relevant to IoT, and filter and present it in an organized and structured framework based on users' needs. The taxonomies specific to IoT security are implemented via a domain ontology, which is later used to process natural language. Relevant tokens are marked as entities and the relations between them identified. The text analysis solution is connected to a gateway which scans the environment and identifies the main IoT devices and communication technologies. The strength of the approach proposed within this research is that the designed semantic gateway is using context-aware searches in the modeled IoT security database and can identify possible vulnerabilities before they can be exploited.

Security in IoT systems using natural language processing: Future challenges and directions

Machine and Deep Learning for IoT Security and Privacy: Applications, Challenges, and Future Directions

Deep Learning for Anomaly Detection in IoT Systems: Techniques, Applications, and Future Directions

Survey on IoT security: Challenges and solution using machine learning, artificial intelligence and blockchain technology

Internet of Things: Evolution, Concerns and Security Challenges

Analysis of IoT Security Challenges and Its Solutions Using Artificial Intelligence

Internet of Things (IoT) Security Intelligence: A Comprehensive Overview, Machine Learning Solutions and Research Directions

Exploring security threats and solutions Techniques for Internet of Things (IoT): from vulnerabilities to vigilance

Artificial Intelligence in IoT Security: Review of Advancements, Challenges, and Future Directions

IoT technologies in smart environment: security issues and future enhancements

Named-Entity-Recognition-Based Automated System for Diagnosing Cybersecurity Situations in IoT Networks

A comprehensive study on cybersecurity challenges and opportunities in the IoT world

Role of machine learning and deep learning in securing 5G-driven industrial IoT applications

Is there a Trojan! : Literature survey and critical evaluation of the latest ML based modern intrusion detection systems in IoT environments

Recent Security Trends in Internet of Things: A Comprehensive Survey

Review on the Security Threats of Internet of Things

Machine learning based solutions for security of Internet of Things (IoT): A survey

Towards Identification of Security Threats and Vulnerabilities in Internet of Things

Strengthening Smart Grid Cybersecurity: An In-Depth Investigation into the Fusion of Machine Learning and Natural Language Processing

A Detail Study of Security and Privacy issues of Internet of Things

Using machine learning algorithms to enhance IoT system security