Project General Information

This project is worth 25% of the course grade. The total marks assigned are 100. These 100 marks are divided into:
⦁ Written Report – 50 Marks (Group)
⦁ Oral Defense – 50 Marks (Individual)
Project Selection:
Project Group will Implement (propose) IoT and Cloud Security on the IoT project they created in CIA-2513 course.
Written Report (Group) (50 Marks)
In this part, the Project Group is required to understand and analyze the security requirements for the IoT system they developed in CIA-2513 course. The students use the collected information to propose security measures to secure their IoT system from different types of IoT attack. The proposed measures should or can be implemented to enhance the security of their IoT system.
Following is the structure of report with details.
⦁ Introduction (5 Marks)
Write general information about the IOT project developed in CIA-2503. This should include the objectives and functions of the IoT system; the technology (hardware, software, etc.) used; and the challenges faced.
200 words minimum
⦁ Overview of the IoT Tech Stack (5 Marks, CLO1)
In this section, students need to provide details of the Sensors, Actuators, OS/RTOS, Firmware, programming language, Kit, APIs, Cloud services, data storage etc. used to implement the CIA-2503 IoT System. The IoT Tech Stack should be explained at different layers.
300 words minimum.
Use table to give the specification of hardware, software
⦁ Secure Design of IoT System (5 Marks, CLO2)
Given below is a “Secure IoT System Implementation Life Cycle”. You objective is to make your IoT System secure. For this you must start thinking about security in the beginning i.e. in the Design Phase.
Write, how you would perform the following to implement security/safety on your IoT System in the design phase.
⦁ Privacy Impact Assessment
⦁ Safety Impact Assessment
⦁ Establish Privacy Agreement
⦁ Technology Selection
500 words minimum

⦁ Cryptography (5 Marks, CLO2)
Explain the different components of a Cryptographic module and their purposes.
Propose, how the Cryptography can be used in the different layers of your IoT System to keep the data, communication, software, firmware etc. secure. Illustrate with figures.
300 Words minimum
⦁ OWSAP IoT Testing Guidance (IoT Attack Vectors) – CLO3 (5 Marks, CLO3)
In this section, the group describes all the IoT attack vectors mentioned by the OWASP.
Select Five (5) most relevant to their IoT system and briefly explain them by linking to the IoT System.
300 words minimum

⦁ Applying the Threat Modeling Process (5 Marks, CLO3)
In this section, the team should apply all the Six (6) steps of Threat Modeling on their IoT project. The team should use templates given in the PPT. The 6 steps are:
⦁ Identifying physical, data and information assets and Populating them in Asset Table
⦁ Creating a System architecture of IoT system and Identifying Technologies used
⦁ Starting the decomposition process, Identify the entry points
⦁ Identify Threats using STRIDE Model
⦁ Documenting at least 3 threats using the template given in PPTs.
⦁ Rating the threats using DREAD Model. Rate the threats documented in step 5.
300 words minimum (use tables, diagrams, where required)
⦁ Trust Models (5 Marks, CLO4)
CLO4 slides introduce three Trust Models.
⦁ Describe briefly each of the three Trust Model. Propose and explain a suitable Trust Model for your IoT system.
⦁ Describe briefly the role of “IoT Identity and Access Management” in your IoT System.
300 words minimum
⦁ IoT Cloud Platforms (15 Marks, CLO5)
The Project Group selects Two Cloud Service Providers (CSP) who offers IoT services.
⦁ Describe briefly the IoT services provided by the two CSP. (5 Marks)
⦁ Compare the following Five (5) IoT Security Challenges dealt by the Two (2) selected CSP: Control, Compatibility, Confidentiality, Integrity, and Updates. (5 Marks)
⦁ Compare the following Seven IoT Security Issues managed by the Two CSPs: Privileged User Access; Regulatory Compliance; Data Location; Recovery; Data Segregation; Investigative Support; Long Term Viability. (5 Marks)
500 words minimum.
Add tables, images where required

Oral Defense (Individual Grading) (50 Marks)
⦁ Each Team Member should activity contribute in the Project.
⦁ Team Member takes 2-3 minutes to presents his contribution in the project. Team member should provide the evidence of his contribution.
⦁ PPT is optional.
⦁ The presentation will be followed by a question/answer session in which each Team Member will be asked Questions.
⦁ See Rubric below

Oral Viva Rubric and Marking Scheme (Max 50 Marks)
Question Fail Poor Good Very Good Excellent
⦁ Explain the Project background, problem, requirement , and proposed solution of the project Could not explain anything.
(0 mark) Could explain something.
(4 mark) Could explain most.
(6 mark) Could explain all.
(8 marks) Could explain all exceptionally well.
(10 marks)
⦁ Explain his/her contribution in the project. Could not explain anything.
(0 mark) Could explain something.
(4 mark) Could explain most.
(6 mark) Could explain all.
(8 marks) Could explain all exceptionally well.
(10 marks)
⦁ Question 1:

CLO1/CLO2 Could not answer anything.
(0 mark) Could answer something.
(4 mark) Could answer most.
(6 mark) Could answer all.
(8 marks) Could answer all exceptionally well.
(10 marks)
⦁ Question 2:

CLO3/CLO4 Could not answer anything.
(0 mark) Could answer something.
(4 mark) Could answer most.
(6 mark) Could answer all.
(8 marks) Could answer all exceptionally well.
(10 marks)
⦁ Question 3:

CLO5 Could not answer anything.
(0 mark) Could answer something.
(4 mark) Could answer most.
(6 mark) Could answer all.
(8 marks) Could answer all exceptionally well.
(10 marks)
Maximum Possible Marks 50 Actual Marks