Development of a Zero -Trust Risk-Framework for IoT Security: Ensuring Security of eHealth Devices and Applications.

Abstract

IoT continue to gain momentum, and its application has widened since the concept was coined . Industries, businesses and homes are interminably adopting the deployment and application of IoT. Recent research has attributed the wide application of IoT in agriculture, environmental management and monitoring, industries, healthcare and smart homes to the low cost of sensors and relevant technologies. Application of IoT has made information sharing and communication from machine to machine (M2M) easier. Devices can now be connected to the internet along with sensors to monitor and report plant growth, pest infestation, and condition of animals. In the healthcare IoT application, wearable sensors are connected via wireless communication to the patients’ mobile device to collect and share data with healthcare practitioners or care providers. Several security challenges arose from the proliferation of devices and interconnection of things. However, an identity of things (IDoT) management approach is necessary to provide each device or thing with a unique identifier. The study proposed a robust and acceptable security framework that manages, categorizes and recognises identities of things in the IoT paradigm with a single solution. This solution involves combining different frameworks that enable the identification of objects within the IoT environment due to differences in types and architecture of various things that are interconnected. Data from primary sources were extrapolated. Extrapolated data sets are, sensors names, communication methods in eHealth IoT architectures in the deployment of healthcare sensors, vulnerabilities that sensors and communication networks possess, threats to sensors and networks and a list of potential or reported attacks to sensor resources (data and physical attack).