A Guiding Framework for Vetting the Internet of Things

Fatma Masmoudi, Zakaria Maamar, Mohamed Sellami, Ali Ismail Awad, Vanilson Burégio

Research output: Contribution to journalArticlepeer-review

9 Citations (Scopus)


Like any emerging and disruptive technology, multiple obstacles are slowing down the Internet of Things (IoT) expansion for instance, multiplicity of things’ standards, users’ reluctance and sometimes rejection due to privacy invasion, and limited IoT platform interoperability. IoT expansion is also accompanied by the widespread use of mobile apps supporting anywhere, anytime service provisioning to users. By analogy to vetting mobile apps, this paper addresses the lack of principles and techniques for vetting IoT devices (things) in preparation for their integration into mission-critical systems. Things have got vulnerabilities that should be discovered and assessed through proper device vetting. Unfortunately, this is not happening. Rather than sensing a nuclear turbines steam level, a thing could collect some sensitive data about the turbine without the knowledge of users and leak these data to third parties. This paper presents a guiding framework that defines the concepts of, principles of, and techniques for thing vetting as a pro-active response to potential things vulnerabilities.

Original languageEnglish
Article number102644
JournalJournal of Information Security and Applications
Publication statusPublished - Dec 2020
Externally publishedYes


  • Atomic/composite duties
  • Internet of Things
  • Security vulnerabilities
  • Vetting

ASJC Scopus subject areas

  • Software
  • Safety, Risk, Reliability and Quality
  • Computer Networks and Communications


Dive into the research topics of 'A Guiding Framework for Vetting the Internet of Things'. Together they form a unique fingerprint.

Cite this