Cyber Security of the Internet of Things

Lead Research Organisation: Imperial College London
Department Name: Institute for Security Science and Tech

Abstract

Today we use many objects not normally associated with computers or the internet. These include gas meters and lights in our homes, healthcare devices, water distribution systems and cars. Increasingly, such objects are digitally connected and some are transitioning from cellular network connections (M2M) to using the internet: e.g. smart meters and cars - ultimately self-driving cars may revolutionise transport. This trend is driven by numerous forces. The connection of objects and use of their data can cut costs (e.g. allowing remote control of processes) creates new business opportunities (e.g. tailored consumer offerings), and can lead to new services (e.g. keeping older people safe in their homes).

This vision of interconnected physical objects is commonly referred to as the Internet of Things. The examples above not only illustrate the vast potential of such technology for economic and societal benefit, they also hint that such a vision comes with serious challenges and threats. For example, information from a smart meter can be used to infer when people are at home, and an autonomous car must make quick decisions of moral dimensions when faced with a child running across on a busy road. This means the Internet of Things needs to evolve in a trustworthy manner that individuals can understand and be comfortable with. It also suggests that the Internet of Things needs to be resilient against active attacks from organised crime, terror organisations or state-sponsored aggressors.

Therefore, this project creates a Hub for research, development, and translation for the Internet of Things, focussing on privacy, ethics, trust, reliability, acceptability, and security/safety: PETRAS, (also suggesting rock-solid foundations) for the Internet of Things. The Hub will be designed and run as a 'social and technological platform'. It will bring together UK academic institutions that are recognised international research leaders in this area, with users and partners from various industrial sectors, government agencies, and NGOs such as charities, to get a thorough understanding of these issues in terms of the potentially conflicting interests of private individuals, companies, and political institutions; and to become a world-leading centre for research, development, and innovation in this problem space.

Central to the Hub approach is the flexibility during the research programme to create projects that explore issues through impactful co-design with technical and social science experts and stakeholders, and to engage more widely with centres of excellence in the UK and overseas. Research themes will cut across all projects: Privacy and Trust; Safety and Security; Adoption and Acceptability; Standards, Governance, and Policy; and Harnessing Economic Value. Properly understanding the interaction of these themes is vital, and a great social, moral, and economic responsibility of the Hub in influencing tomorrow's Internet of Things. For example, a secure system that does not adequately respect privacy, or where there is the mere hint of such inadequacy, is unlikely to prove acceptable. Demonstrators, like wearable sensors in health care, will be used to explore and evaluate these research themes and their tension. New solutions are expected to come out of the majority of projects and demonstrators, many solutions will be generalisable to problems in other sectors, and all projects will produce valuable insights. A robust governance and management structure will ensure good management of the research portfolio, excellent user engagement and focussed coordination of impact from deliverables.

The Hub will further draw on the expertise, networks, and on-going projects of its members to create a cross-disciplinary language for sharing problems and solutions across research domains, industrial sectors, and government departments. This common language will enhance the outreach, development, and training activities of the Hub.

Publications

10 25 50
 
Description This award was used to fund a number of research and management activities conducted as part of the PETRAS IoT Research Hub. In particular it is funding:

The technical part of the "Safety and Security" and "Harnessing Economic Value Stream" activities. This has led to state of the art and gap analysis reports that have influenced the PETRAS 1st SRF call for projects as well as a forthcoming RAEng policy report.

This award has led to new developments in security for implantable medical devices. In particular, we have designed and evaluated new techniques for cryptographic key generation from physiological values as well as secure communication links implantable sensors.

This award has also funded a project on Securing the Value of Smart Metering. This project has contributed to the research community for the possible ways that real time energy data affect individuals. We have highlighted the issues around ethics considerations, the adoption issues and the possibilities that these devices (smart plugs) and our experimental designs can affect the underlying personal and economic incentives of individuals posing risks for the grid, their socioeconomic status and possibly health. We have also shown that the opportunity to utilize this knowledge stems from the trade-off between private economic returns and social returns. This is perhaps the most crucial aspect of IoT research going forward and will require a data framework that goes beyond the current EU GDPR regulations. The algorithms and the type of behaviour they induce can make a significant difference to the entire society.

This award is also funding projects developing improvements to transportation in urban environments such as a dynamic pricing framework for urban mobility services.

This award has also led to an evaluation of the impact of security protocols in adaptive wireless sensor networks: a security module in the Cooja simulator which can be sued to develop and test new security mechanisms and a light-weight fully distributed run-time security solution for WSN.
Exploitation Route Each of the different projects funded through this activity has been taken forward in different ways. Please see individual projects for details.
Sectors Aerospace, Defence and Marine,Agriculture, Food and Drink,Construction,Creative Economy,Digital/Communication/Information Technologies (including Software),Electronics,Energy,Environment,Healthcare,Security and Diplomacy,Transport

URL https://www.petrashub.org/
 
Description The findings have helped us provide insights to the IoT UK programme and DCMS.
First Year Of Impact 2017
Sector Digital/Communication/Information Technologies (including Software),Government, Democracy and Justice
Impact Types Policy & public services

 
Description Delegate of USITO in Beijing, China, on Cryptography and Blockchain Technology, Standards, and Policy
Geographic Reach Asia 
Policy Influence Type Membership of a guideline committee
 
Description Expert Input into ISO/SEC Standards Inivitative on Trustworthiness, 20 July 2017, Beijing, China
Geographic Reach Multiple continents/international 
Policy Influence Type Participation in a advisory committee
 
Description Demonstration of a Secure, Low-Power tracking system for works of art
Amount £60,340 (GBP)
Funding ID ArtConnect 
Organisation PETRAS 
Sector Public
Country United Kingdom
Start 06/2018 
End 12/2018
 
Description PETRAS 1st Strategic Research Fund Call for Proposals
Amount £160,747 (GBP)
Funding ID SECRIS 
Organisation PETRAS 
Sector Public
Country United Kingdom
Start 02/2018 
End 02/2019
 
Description Strong random number generation from body physiological signals for secure communication with Implantable Medical Devices (IMD)
Amount £11,000 (GBP)
Funding ID 133566 
Organisation Innovate UK 
Sector Public
Country United Kingdom
Start 02/2018 
End 03/2018
 
Description Strong random number generation from body physiological signals for secure communication with Implantable Medical Devices (IMD)
Amount £17,000 (GBP)
Funding ID 133673 
Organisation Innovate UK 
Sector Public
Country United Kingdom
Start 05/2018 
End 06/2018
 
Title Extension of Cooja to simulate IoT attacks 
Description Cooja is a simulation tool used to debug Contiki based IoT devices. We have extended it to incorporate attacks at different levels of the stack. This allows us to both debug and scale up our experimentation before deployment but also test for security. 
Type Of Material Improvements to research infrastructure 
Provided To Others? No  
Impact None as yet. 
URL https://www.petrashub.org/portfolio-item/iot-in-the-park/
 
Title The POWBAL platform 
Description This platform allows users to log in, control their energy consumption through the wi-fi plugs and monitor their performance versus others. 
Type Of Material Improvements to research infrastructure 
Year Produced 2017 
Provided To Others? Yes  
Impact This tool led to the reduction of peak-time electricity usage in the samples we tested and is being upgraded to allow broader tests across countries in Europe. 
URL http://www.powbal.net
 
Description Collaboration on Formal Techniques to Arms Verification 
Organisation Atomic Weapons Establishment
Country United Kingdom 
Sector Private 
PI Contribution AWE plc and their Arms Verification Group. He have transferred capabilities from formal methods, notably SMT solvers, to the domain of modelling arms inspection and verification scenarios. This has given the Arms Verification Group at AWE new insights and modelling & analysis tools that were also applied on a case study based on the UK-Norway 2018 Initiative. This collaboration is ongoing; AWE is very interested in high-assurance modelling and optimization for decision support, and we are working on tools that can provide such support.
Collaborator Contribution AWE hosted some meetings with stakeholders within AWE but also within government agencies. AWE also supplied crucial test data for our approaches, and influenced the writing of the paper that was published at INMM 2017, the flagship venue for the nuclear materials industry.
Impact Software at https://bitbucket.org/pjbeaumont/inmm2016/ Disciplines involved are nuclear policy, nuclear physics, decision sciences, mathematical optimization, social science
Start Year 2016
 
Description Collaboration with Optimization Group and Chemical Engineers 
Organisation Imperial College London
Department Department of Chemistry
Country United Kingdom 
Sector Academic/University 
PI Contribution We have began a collaboration with colleagues in our department who specialize in mathematical programming and its applications in engineering, chemical engineering and bioengineering in particular. This is very promising as we provide the expertise and know-how of recent advanced in automated reasoning, symbolic computation, and formal verification, whereas they (Notably Dr Ruth Misener) are leading international experts on MINLP programming and its application to challenging optimization problems in engineering.
Collaborator Contribution The partners provide test cases in the form of MINLP models and benchmarks, domain knowledge from chemical engineering, and consult on where to public in their communities. They also plan to write papers with us about the synergy potential of formal methods and mathematical programming. We also hope to look at threat models in engineering, within an IoT context and apply our new optimization techniques there.
Impact It is too early for listing any outputs on this.
Start Year 2017
 
Description Collaboration with network from University of Oxford and XAIN company 
Organisation XAIN AG
Country Germany 
Sector Private 
PI Contribution We assisted in the experimental work and mathematical modelling for governed blockchain technology, including its threat modelling. We co-created a new variant of consensus algorithm that may consume much less energy than Proof of Work. This has been integrated and tested in a pilot project with XAIN/Porsche (which also contains other work that we did not contribute to). A good overview of this is seen in the following clip: https://youtu.be/KvyF78RTj18
Collaborator Contribution The contributions by the Oxford team were in the machine learning aspects for anomaly detection of blockchain systems, and in the company XAIN by transferring such knowledge into practice through a real-world demonstrator.
Impact We publishes a "Yellow Paper" at https://www.xain.io/pdf/XAIN_Yellow_Paper.pdf and this is interdisciplinary in that it covers EEE, Computer Science, and Automotive.
Start Year 2017
 
Description Collaboration with people at US NIST 
Organisation National Institute of Standards & Technology (NIST)
Country United States 
Sector Public 
PI Contribution We have begun to collaborate with people at NIST on Trustworthiness of Cyber Physical Systems (CPS). This also involves someone from Intel and a researcher from a prominent US Business School (Saint Joseph's University). We held a workshop in December at Imperial in which the framework that NIST has proposed for this issue was discussed and feedback given. Our contributions were in assisting the modelling and development of knowledge representation and reasoning about the trustworthiness of CPS. We also mean to extend that to quantitative reasoning, where we locally will bring needed expertise.
Collaborator Contribution They have lead the strategic direction of this work, which is very much about impact in several verticals.
Impact A first key output of this is a paper to be presented at the IET PETRAS conference on Living in the Internet of Things: https://spiral.imperial.ac.uk:8443/handle/10044/1/57662
Start Year 2017
 
Description IoT in the Park 
Organisation Queen Elizabeth Olympic Park
Country United Kingdom 
Sector Public 
PI Contribution Andrew Hudson-Smith, CASA, University College London Queen Elizabeth Olympic Park The Imperial team have places solar powered environmental sensors in the QEOP area and are analyzing the security features of this system.
Collaborator Contribution QEOP have contributed the space of the Park, UCL are placing nodes in the same area as our sensors.
Impact None as yet.
Start Year 2016
 
Description IoT in the Park 
Organisation University College London
Country United Kingdom 
Sector Academic/University 
PI Contribution Andrew Hudson-Smith, CASA, University College London Queen Elizabeth Olympic Park The Imperial team have places solar powered environmental sensors in the QEOP area and are analyzing the security features of this system.
Collaborator Contribution QEOP have contributed the space of the Park, UCL are placing nodes in the same area as our sensors.
Impact None as yet.
Start Year 2016
 
Description SeMIoT 
Organisation Grove IS
Country United Kingdom 
Sector Private 
PI Contribution The research team creates the algorithms the randomly allocate switch off events to the plugs. The team analyzes the responses from the participants and informs them about their performance. The team distributes rewards and monitors the use of the plugs consequently. The research team manages the distribution of the plugs, the resolution of technical faults and the replacement of equipment. The team also reports the results on the dedicated website : www.powbal.net and the PETRAS hub.
Collaborator Contribution Wi-fi Plug contributes with the delivery of the plugs, the support for their API and the discounts in accessing (polling) the IoT equipment. We have weekly meetings with the entire team (CEO and two senior engineers) and we have constant updates in cases of work that affects our experiments. Grove IS helps develop the Powbal platform. This allows us to schedule the switch-off events for hundreds of plugs, collect the status of each plug and store the data. The platform also calculates the reward points based on the performance of each individual (if they abide by the smart grid choices or not and the power consumed). The company supports the platform, hosts the server on its cloud infrastructure, stores the data for our work and provides support related to the performance of the platform. We also have a two-year Premium support (worth 9,600 GBP) for a 24/7 phone and email support, In version maintenance, feature enhancement support and version upgrade protection (See contract). Poplar Harca hosts the testbed for SeMIoT experiments, these are the residences that host the plugs we measure. Poplar provides us with access to their facilities, connection with impact champions (energy sensitive individuals to "spread the word" about our work), background information (addresses, names, etc) for the participants, management of the lists and the changes in their premises, etc. They also have organised bi weekly calls with us to provide updates about the progress of the experiments. An individual researcher (Alexandros Kosiaris) has helped us to produce the new version of the Powbal platform and contributed to the previous rounds of these experiments. Without his support on a weekly basis this platform would not have become a reality.
Impact Powbal platform currently under development :http://grove-cloud.groveis.com:8080/powbal/ The final platform will be under the www.powbal.net
Start Year 2017
 
Description SeMIoT 
Organisation Poplar HARCA
Country United Kingdom 
Sector Charity/Non Profit 
PI Contribution The research team creates the algorithms the randomly allocate switch off events to the plugs. The team analyzes the responses from the participants and informs them about their performance. The team distributes rewards and monitors the use of the plugs consequently. The research team manages the distribution of the plugs, the resolution of technical faults and the replacement of equipment. The team also reports the results on the dedicated website : www.powbal.net and the PETRAS hub.
Collaborator Contribution Wi-fi Plug contributes with the delivery of the plugs, the support for their API and the discounts in accessing (polling) the IoT equipment. We have weekly meetings with the entire team (CEO and two senior engineers) and we have constant updates in cases of work that affects our experiments. Grove IS helps develop the Powbal platform. This allows us to schedule the switch-off events for hundreds of plugs, collect the status of each plug and store the data. The platform also calculates the reward points based on the performance of each individual (if they abide by the smart grid choices or not and the power consumed). The company supports the platform, hosts the server on its cloud infrastructure, stores the data for our work and provides support related to the performance of the platform. We also have a two-year Premium support (worth 9,600 GBP) for a 24/7 phone and email support, In version maintenance, feature enhancement support and version upgrade protection (See contract). Poplar Harca hosts the testbed for SeMIoT experiments, these are the residences that host the plugs we measure. Poplar provides us with access to their facilities, connection with impact champions (energy sensitive individuals to "spread the word" about our work), background information (addresses, names, etc) for the participants, management of the lists and the changes in their premises, etc. They also have organised bi weekly calls with us to provide updates about the progress of the experiments. An individual researcher (Alexandros Kosiaris) has helped us to produce the new version of the Powbal platform and contributed to the previous rounds of these experiments. Without his support on a weekly basis this platform would not have become a reality.
Impact Powbal platform currently under development :http://grove-cloud.groveis.com:8080/powbal/ The final platform will be under the www.powbal.net
Start Year 2017
 
Title Car Chip Manufacturer experiments with technology from papers co-authored by Michael Huth 
Description Infineon Technologies collaborated with XAIN AG on a Minimal Viable Product that uses blockchain technology to program more secure usage control of cars through consumer-facing apps and where the usage control is executed on an electronic control unit as used in cars, embedded devices that do hot have an operating system on them. We refer to the official press release by Infineon Technologies: https://www.infineon.com/cms/en/about-infineon/press/press-releases/2018/INFATV201810-005.html This work was influenced by the publications Leif-Nissen Lundbaek, Daniel Janes Beutel, Michael Huth, Stephen Jackson, Laurence Kirk, Robert Steiner, Proof of Kernel Work: a democratic low-energy consensus for distributed access-control protocols, Published on 8 August 2018 in the journal Royal Society Open Science https://royalsocietypublishing.org/doi/full/10.1098/rsos.180422 and the Yellow Paper on the FROST Access Control Language, e.g. available at https://xain.foundation/assets/downloads/xain-frost-yellow-paper.pdf. 
Type Of Technology Software 
Year Produced 2018 
Impact This resulted in XAIN AG and Infineon Technologies signing a 2-year partnership to explore the maturation of this technology into production readiness. 
 
Title The POWBAL platform 
Description The product connects wi-fi plugs connected to the internet and provides statistics for their use. There is an administrator dashboard available and a user-level dashboard. All data are collected and used for the experiments we conducted. 
Type Of Technology Webtool/Application 
Year Produced 2017 
Impact We measured the impact of intermittent electricity supply during peak demand and found that we can achieve up to 10% reductions through a combination of incentives and norm-effects to the users. 
URL https://iotuk.org.uk/semiot-securing-the-value-of-smart-metering/
 
Description Blockchain Event at the European Finance Forum, Old Stock Exchange, Frankfurt, Germany 
Form Of Engagement Activity Participation in an activity, workshop or similar
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Professional Practitioners
Results and Impact This was an event in which professional practitioners and policy makers (bankers, lawyers, regulators, and so forth) met to find out about blockchain technology and its opportunities and challenges. Michael Huth gave a keynote that surveyed this space and he also served on a panel that answered questions from the audience.
Year(s) Of Engagement Activity 2016
URL http://www.europeanfinanceforum.org/Meeting.45.0.html?&no_cache=1&eventanchor=2420&location=&cHash=5...
 
Description Business Reporter IT Security Hub Breakfast Briefing Future Trends in Cyber Security 
Form Of Engagement Activity A formal working group, expert panel or dialogue
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Professional Practitioners
Results and Impact Invited participation to A Business Reporter/IT Security Hub Breakfast briefing on future trends in cyber security. The event was attended by practitioners from organisations covering a broad spectrum of industries.
Year(s) Of Engagement Activity 2016
 
Description Challenges and Knowledge Gaps in Securing Cyber-Physical Systems 
Form Of Engagement Activity Participation in an activity, workshop or similar
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Other audiences
Results and Impact Keynote at 12th WISTP International Conference on Information Security Theory and Practice.
Year(s) Of Engagement Activity 2018
URL http://wistp2018.wistp.org/program/
 
Description Distributed Intelligent Systems in Mobility 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Industry/Business
Results and Impact Quote from the event description:

We invite you to join fellow decision-makers from the automotive, M2M and mobility sectors for a specially curated day of insights on how intelligent systems are redefining the industry´s approach to data and resource sharing.

The eXpandable Artificial Intelligence Network (XAIN) is a distributed network featuring a user-centric access delegation framework purpose-built for the management of machines, vehicles and IoT devices.

Developed by researchers from Oxford University and Imperial College London, XAIN combines an access control protocol with embedded blockchain nodes and an energy-efficient consensus mechanism (PoKW), as published by The Royal Society.

The event will feature an exclusive deep dive into XAIN's pilot project with Porsche as well as keynote presentations from Prof. Michael Huth, Dr. Maria Boerner and Dr. Dimitri De Jonghe, and a panel discussion featuring expertise from Imperial College London, Ocean Protocol and Mintbit.
Year(s) Of Engagement Activity 2018
URL https://events.xain.io
 
Description Feature in Swiss TV Tech Series "Einstein" on Blockchain work 
Form Of Engagement Activity A broadcast e.g. TV/radio/film/podcast (other than news/press)
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Media (as a channel to the public)
Results and Impact The work we did on Proof of Kernel Work and Usage Control via FROST and blockchain technology drew the attention of the Swiss TV who made a feature of the Infineon demo referred to in the press release https://www.infineon.com/cms/en/about-infineon/press/press-releases/2018/INFATV201810-005.html

That feature was aired on 28 February 2019 and it available online (in German): https://www.srf.ch/sendungen/einstein/blockchain-verstehen-die-digitale-zukunft-wird-dezentral-2
Year(s) Of Engagement Activity 2019
URL https://www.srf.ch/sendungen/einstein/blockchain-verstehen-die-digitale-zukunft-wird-dezentral-2
 
Description Industrial Internet of Things event for Corporate Members at Chatham House 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Industry/Business
Results and Impact I was invited to give a presentation about the Internet of Things and Security Issues for it. Alison Vincent, the UK CTO of Cisco was the other speaker. The technical editor of the Financial Times then chaired a debate with the audience. This was also a good opportunity to promote the PETRAS IoT Research Hub.
Year(s) Of Engagement Activity 2016
URL https://www.chathamhouse.org/event/industrial-internet-things
 
Description Invited Presentation Cybersecurity in the Bank Environment 
Form Of Engagement Activity Participation in an activity, workshop or similar
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Industry/Business
Results and Impact Participation and Presentation at Workshop on Cyberphysical security in the Bank Environment CPS2017
Year(s) Of Engagement Activity 2017
 
Description Invited Presentation at COMIT Conference 
Form Of Engagement Activity Participation in an activity, workshop or similar
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Industry/Business
Results and Impact Invited presentation to a broad audience covering cybersecurity risks to the built environment, research results and techniques which may be applicable.
Year(s) Of Engagement Activity 2016
URL http://www.comit.org.uk/comit2016-speakers
 
Description Invited Presentation: Safety-Critical Systems Club 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Professional Practitioners
Results and Impact Organised seminar on the Safety of the Internet of Things organised by the Safety Critical Systems Club
Year(s) Of Engagement Activity 2018
URL https://scsc.uk/file/564/Jun-18-Safety-of-IoT-Programme-v6.pdf
 
Description Invited Talk CODEX "Top 50 Innovators from the Industries of the future" 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Other audiences
Results and Impact This was an invited talk on the trustworthiness of cyber physical systems in a panel session on cyber security which also featured as speakers, Mikko Hypponen, Chief Research Officer, F-Secure, Andrew Rubin, CEO and Founder, Illumio, and Dave Palmer, Director of Technology, Darktrace. The talk and panel were recorded and CODEX plan to make them available on line. The event was intended to reach a broad audience of thought leaders including practitioners, academics, scientists and the general public.
Year(s) Of Engagement Activity 2017
URL https://www.codex.com/?p=4947
 
Description Invited talk at Grid Analytics Europe 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Industry/Business
Results and Impact Talk covered a number of aspects on the Cyber Security of Grid Systems identifying the points of vulnerability specific to big data infrastructure and determining appropriate prevention, detection, recovery and response strategies to mitigate risks

Identifying, detecting and diagnosing threats to the integrity and availability of data including malicious data injections. Building methods for dynamic risk assessment, impact analysis and resilience
Managing threats arising from a combination of the human, physical and cyber aspects of systems
Balancing the need to integrate more systems with minimising the attack surface for cyber threats
Evaluating new approaches to dealing with the inherent security weaknesses of legacy systems
Exploring vulnerabilities associated with the use of Machine Learning algorithms
Ensuring the protection of systems containing sensitive data to minimise business risk.
Year(s) Of Engagement Activity 2018
URL https://www.gridanalytics-europe.com
 
Description Keynote and panel of Michael Huth (Imperial) with Jesse Steele from XAIN AG at Tulip 2018 Enterprise Blockchain Adoption Conference, San Francisco, CA, June 2018 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Professional Practitioners
Results and Impact The keynote presented work that Michael Huth and Leif-Nissen Lundback had done with others at Oxford University and XAIN AG on blockchain technology for mobility and IoT, notably the Porsche pilot and strategic plans for XAIN AG based on this initial technology. The startup just closed a 6 million Euros pre-seed round and is expanding and building up its integration of decentralised machine learning and access control for mobility ad IoT - including the automotive vertical. The panel was about adoption barriers of blockchain for enterprises, and involved also senior people from IBM and Oracle.
Year(s) Of Engagement Activity 2018
URL https://tulipconf.com
 
Description Logic Teaching For Science and Engineering in the 21st Century 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Postgraduate students
Results and Impact Michael Huth was invited to present his views on teaching logic in computer science at a high-profile "Logic Lounge". Huth argued for the need to broaden the use of logical tools to all engineering disciplines, in particular for the design, implementation, and assurance of Cyber Physical Systems and their trustworthiness.
Year(s) Of Engagement Activity 2017
URL http://www.vcla.at/2017/08/logiclounge-in-memoriam-helmut-veith/
 
Description Multiple Views on Blockchain: Technology, Use Cases, Economics, and Policies 
Form Of Engagement Activity Participation in an activity, workshop or similar
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Policymakers/politicians
Results and Impact The event was organized by Trusted Digital Life, based in The Hague, The Netherlands, in conjunction with people from Intel, Microsoft, and other ICT businesses. Michael Huth gave a presentation on Blockchain Technology and its trustworthiness issues, also pertaining to architectural choices of such technology. He then also served on a panel on research foundations for Blockchain Technology.
Year(s) Of Engagement Activity 2016
URL https://trustindigitallife.eu/events/past-events/multiple-views-on-blockchain-technology-use-cases-e...
 
Description Panel Member and Speaker at US NIST event on Trustworthiness of Cyberphysical Systems 
Form Of Engagement Activity A formal working group, expert panel or dialogue
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Industry/Business
Results and Impact This was a high-profile, one-day workshop at the US NIST regarding their proposed framework and guidance for the design, implementation, and validation of trustworthy cyberphysical systems. All panel sessions and keynotes were recorded are are accessible to the general public at the URL below. Michael Huth served on two panels and was asked to present his views on trustworthiness R&D in cyberphysical systems, which was also an opportunity to highlight the PETRAS IoT Research Hub to the US and global audience.
Year(s) Of Engagement Activity 2016
URL https://www.nist.gov/news-events/events/2016/08/exploring-dimensions-trustworthiness-challenges-and-...
 
Description Panel Participation and Attendance at FCO organised: Cyber Security: Testing France & the UK's Digital Defences 
Form Of Engagement Activity Participation in an activity, workshop or similar
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Industry/Business
Results and Impact Panel Participation and Attendance at FCO organised: Cyber Security: Testing France & the UK's Digital Defences
Year(s) Of Engagement Activity 2017
 
Description Panelist on Future IoT Security at the SecCon 2017 conference by CISCO 
Form Of Engagement Activity A formal working group, expert panel or dialogue
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Industry/Business
Results and Impact Senior Members of the PETRAS IoT Hub were invited to serve on a panel at the internal CISCO flagship security conference, which also brings along CISCO partners. We were asked about our views on IoT cybersecurity and its influence on policy, standards, acceptability, and related aspects.
Year(s) Of Engagement Activity 2017
 
Description Participation in a Panel Discussion at Smart IoT London 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Professional Practitioners
Results and Impact Panel member on panel on Personal Data And Trust at Smart IoT London - London ExCeL Centre
Year(s) Of Engagement Activity 2016
 
Description Position Talk and Panel Membership at "From Research to Innovation - The Blockchain Era", The Press Club, Brussels, Belgium, 6 June 2017 
Form Of Engagement Activity Participation in an activity, workshop or similar
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Policymakers/politicians
Results and Impact Assessing the viability of blockchain applications. Priorities for research. Supporting Public Policy Priorities. New Ideas, New Scenarios. These themes are discussed through talks, panels, audience Q&A, and involved a broad audience of decision makers, policy makers, industrial and business people, politicians, and some media.
Year(s) Of Engagement Activity 2017
URL https://trustindigitallife.eu/events/blockchain-conferences/research-innovation-blockchain-era/
 
Description Presentation and Participation at NATO IST-153 Workshop 
Form Of Engagement Activity Participation in an activity, workshop or similar
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Other audiences
Results and Impact Participation and presentation at NATO IST 153 Workshop on cyber-resilience. The event was attended by representatives from Universities, Companies and Defence research establishments across both US and Europe.
Year(s) Of Engagement Activity 2017
 
Description Presentation at Workshop on Theory and Practice of Secure Multi-Party Computation 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Professional Practitioners
Results and Impact Patrick Ah-Fat attended the above workshop to learn more about this research topic and its practical relevance. He also presented his first results of his PhD work, which concern important security considerations of making such technology practically secure.
Year(s) Of Engagement Activity 2016
URL http://ctic.au.dk/events/workshops-conferences/mpc-2016/
 
Description Talk ABI Event Banks Cyber-Physical Security 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Industry/Business
Results and Impact The "Banche e Sicurezza" (Banks and Security) conference in Italy is organised by ABI the main industry organisation of financial institutions and is their annual event focussing on Security. It is attended by 300-400 people in positions of responsibility for security in banks and government. I was invited to speak on a panel entitled "From Physical Security to Cyber Security" and my talk included insights from several EPSRC funded projects including CIPART and the PETRAS Hub.
Year(s) Of Engagement Activity 2018
URL http://banchesicurezza.abieventi.it
 
Description Talk at IoT SF Members Meeting 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Professional Practitioners
Results and Impact Presentation of PETRAS Research Hub at IoT SF meeting.
Year(s) Of Engagement Activity 2016
 
Description Toward a Calculus for Logical Optimization of Trustworthy CPS 
Form Of Engagement Activity Participation in an activity, workshop or similar
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Professional Practitioners
Results and Impact This event was co-organized between Michael Huth (Imperial College London) and Edward Griffor (US National Institute of Standards and Technology) on 11December 2017 in London, UK. This event had two aims: to report on research undertaken toward a Calculus for Logical Optimization of Trustworthiness and other Aspects of Cyber Physical Systems, and to solicit feedback and identify collaboration opportunities for research in that space. The event reviewed the US NIST Framework for Cyber Physical Systems, especially how it supports the Trustworthiness Concern in the Design, Implementation, and Validation of Cyber Physical Systems. The event also presented how Ontologies and their Reasoning Capabilities can support such engineering activities through analyses can explore multiple concerns and their relationships both qualitatively and quantitatively, for example through the use of parameters or probabilities to inform risk management. A broad set of stake holders was in attendance, e.g. people from IBM, Intel, UK Government Agencies, and PETRAS academics.
Year(s) Of Engagement Activity 2017
 
Description Trust and privacy in IoT 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Professional Practitioners
Results and Impact Hosted by Berwin Leighton Paisner the Connected Cities Convention included our talk on IoT and issues for privacy and security. The Internet of Things, smart technologies and improved connectivity can enable local authorities to deliver improved services, but with the benefits come security risks. This session explored the key challenges for ensuring security and privacy in a more data-rich built environment.
Year(s) Of Engagement Activity 2016
URL http://www.citiesconvention.com/connected/
 
Description co-editor of thematic issue of Royal Society Open Science journal, dedicated to blockchain technology 
Form Of Engagement Activity A magazine, newsletter or online publication
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Professional Practitioners
Results and Impact I was asked by a subject editor of this journal to propose such a thematic issue, which I did with Ghassan Karame (NEC Laboratories Europe) and Claire Vishik (Intel USA). The issue is expected to be launched at the end of 2018, perhaps with a launch event at the ATI.
Year(s) Of Engagement Activity 2018