Year: 2024
Type: article
Abstract: The proliferation of IoT devices and big data has catalyzed the emergence of data markets. Regulatory and technological frameworks such as the International Data Spaces (IDS) have been developed to facilitate secure data exchange while integrating security and data sovereignty aspects required by laws and regulations, such as the GDPR and NIS2. Recently, novel attack vectors have taken a toll on many enterprises, causing significant damage despite the deployed security mechanisms. Hence, it is reasonable to assume that the IDS may be just as susceptible. In this paper, we conduct a STRIDE threat analysis on IDS to assess its susceptibility to traditional and emerging cybersecurity threats. Specifically, we evaluate novel risks in widely used software, including Man-in-the-Middle (MitM) attacks, compromised end-user devices, SIM swapping, and potential backdoors. Our analysis identifies multiple vulnerabilities, particularly at the trust boundary (TB) between users and the IDS system. These include Denial of Service (DoS) risks, key management weaknesses, and the mentioned novel threats. We discuss the hacking techniques, tools, and associated risks to the IDS framework, followed by targeted mitigation strategies and recommendations. This work provides foundational insights to support the development of a safer and more resilient data space architecture.
Source: Technologies
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: gold
Estimated APC paid: $1,819
Funder: Hochschule Luzern
OpenAlex ID: W4405810020