SUCCESS -- SecUre aCCESSibility for the internet of things

The Internet of Things (IoT) denotes the combination of physical objects with a virtual representation in the Internet. It consists not only of human participants but "Things" as well. The IoT has a great potential to provide novel services to humans in critical areas for society. This innovation however requires updating our understanding of the new risks associated with the new technology so that we can deploy it with confidence and society can trust it.
Amongst the biggest threats to the trustworthiness of new technology are security issues and amongst the main triggers for security problems is human behaviour, either through genuine errors or though malicious intent. The core idea of SUCCESS is to upgrade methods and tools with a proven track record to provide a more holistic consideration of security in relation to human factors within IoT.
Our core scientific innovation will consist on the extension of well-known industry-strength methods in our priority areas. Our technological innovation will provide adequate tools to address trustworthiness within IoT in healthcare environments.
Our project will validate the scientific and technological innovation through pilots, one of which will be in collaboration with a hospital and will allow all stakeholders (e.g. physicians, hospital technicians, patients and relatives) to enjoy a safer system capable to appropriately handle highly sensitive information on vulnerable people.
This innovation will be achieved by a multi-disciplinary team of recognized experts in their fields which has significant experience in knowledge transfer to and from society.
SUCCESS will have significant impact, strengthening the interdisciplinary approach to this important challenge at the crossroads between society and technology, creating new methods for increased security in healthcare, supporting the use of these robust methods by adequate open-source tools, and educating on the use of our products through real-life working prototypes.

Scientifically, the project SUCCESS will produce: extensions to important existing mechanisms such as the BIP methodology to further improve certified code generation, secure integration of IoT infrastructure, supported with quantitative model checking and with attack trees for user-aware risk analysis and models of human behaviour for security analysis in Isabelle/HOL. The application of the extended methodology to the scenario of dementia patient monitoring provides a demanding and realistic validation of our contributions to support user-aware S&P, a reproducible scientific result in itself.
The impact of the scientific and technological objectives of SUCCESS is perfectly aligned with the expected impact of this call and addresses four out of 10 challenges: - Data visualisation for increasing user awareness of privacy issues - Empowering users with risk evaluation tool for their data and contacts.
- Assistive technology/techniques to encourage more secure behaviour and awareness of users - Dynamic security to allow systems to adapt to varying users.
CHIST-ERA impact: SUCCESS "cross[es] traditional boundaries between disciplines in order to strengthen the community involved in tackling these new challenges". The "range of disciplines" our team covers "include[s] expertise and skills in hardware and software, [...] cryptography, [...] data analysis, business models, user interfaces, user behaviour and human-computer interaction".
SUCCESS will "[h]ave short-term impact on the development of designs, algorithms and prototypes" by extending formal modeling for human-centric IoT security, attack trees for IoT, quantitative model-checking, and certified code generation for BIP extended to IoT and validating these advances on our health care pilots.
These scientific and technological advances "will contribute to the longer term impact of a more user-centric and trustworthy IoT" because the focus of the scientific extensions of SUCCESS lies on user-aware S&P and human understandable risk assessment.
Scientific community impact: SUCCESS will push the importance of security and transparency of IoT higher in the agenda of research groups and companies. Our consortium wants to equip teams with a solution, an IoT security architecture which is reproducible for the community, and above this, to install in the community awareness the importance of developing IoT with user-aware security higher up in their agendas. We expect the technical advances will increase security of existing frameworks on 20% detection rate.
The economic and social impact of SUCCESS: a) Economic Impact: the overall cost for dementia care in Europe is an expected 600 billion Euro, b) Impact on Healthcare: at the present time, the expenditures on health care in the member countries of the European community account for an estimated 8.5% of the GDP and could rise up to 11.8% in 2030. SUCCESS will help this sector by facilitating the creation of automated monitoring of dementia patients, releasing time for nurses and doctors who can focus on more important tasks, c) Impact for Dementia patients: SUCCESS improves privacy for dementia patients from first diagnosis to care. It mitigates problems with insurance companies and employers of dementia patients. User-centred flexibility will be increased by 20% as judged by technical teams (in our case healthcare support). Compared to specialized installation with (specialized HW and SW) we will be able to offer same security at a reduced 20% cost.