Cloud-of-Things meets Mobility-as-a-Service: An insider threat perspective

Mobility-as-a-Service (MaaS) applies the everything-as-a-service paradigm of Cloud Computing to transportation: a MaaS provider offers to its users the dynamic composition of solutions of different travel agencies into a single, consistent interface. Traditionally, transits and data on mobility belo...

Full description

Saved in:
Bibliographic Details
Published in:Computers & security 2018-05, Vol.74, p.277-295
Main Authors: Callegati, Franco, Giallorenzo, Saverio, Melis, Andrea, Prandini, Marco
Format: Article
Language:English
Subjects:
Cloud computing
Cloud-of-Things
Cybersecurity
Economic analysis
Economic models
Electronic devices
Environmental engineering
Federated platforms
Insider threat
Internet of Things
Mobility
Mobility-as-a-Service
Operators
Studies
Transits
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Mobility-as-a-Service (MaaS) applies the everything-as-a-service paradigm of Cloud Computing to transportation: a MaaS provider offers to its users the dynamic composition of solutions of different travel agencies into a single, consistent interface. Traditionally, transits and data on mobility belong to a scattered plethora of operators. Thus, we argue that the economic model of MaaS is that of federations of providers, each trading its resources to coordinate multi-modal solutions for mobility. Such flexibility comes with many security and privacy concerns, of which insider threat is one of the most prominent. In this paper, we revise and extend previous work where we classified the potential threats of individual operators and markets of federated MaaS providers, proposing appropriate countermeasures to mitigate the problems. In addition, we consider the emerging case of Cloud-of-Things (CoT) for mobility, i.e., networks of ubiquitous, pervasive devices that provide real-time data on objects and people. Automation and pervasiveness of CoT make an additional attack surface for insiders. In an effort to limit such phenomenon, we present an overlay networking architecture, based on gossip protocols, that lets users share information on mobility with each other. A peculiarity of the architecture is that it both constrains the quality and quantity of data obtainable by insiders, optimizing the routing of requests to involve only users that are able to answer them.
ISSN:0167-4048
1872-6208
DOI:10.1016/j.cose.2017.10.006