{"id":"https://openalex.org/W4224243773","doi":"https://doi.org/10.1109/drcn53993.2022.9758028","title":"The IoTAC Software Security-by-Design Platform: Concept, Challenges, and Preliminary Overview","display_name":"The IoTAC Software Security-by-Design Platform: Concept, Challenges, and Preliminary Overview","publication_year":2022,"publication_date":"2022-03-28","ids":{"openalex":"https://openalex.org/W4224243773","doi":"https://doi.org/10.1109/drcn53993.2022.9758028"},"language":"en","primary_location":{"id":"doi:10.1109/drcn53993.2022.9758028","is_oa":false,"landing_page_url":"https://doi.org/10.1109/drcn53993.2022.9758028","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 18th International Conference on the Design of Reliable Communication Networks (DRCN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://zenodo.org/record/6564200","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071883230","display_name":"Miltiadis Siavvas","orcid":"https://orcid.org/0000-0002-3251-8723"},"institutions":[{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Miltiadis Siavvas","raw_affiliation_strings":["Centre for Research and Technology Hellas,Thessaloniki,Greece","Centre for Research and Technology Hellas, Thessaloniki, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Research and Technology Hellas,Thessaloniki,Greece","institution_ids":["https://openalex.org/I4210134249"]},{"raw_affiliation_string":"Centre for Research and Technology Hellas, Thessaloniki, Greece","institution_ids":["https://openalex.org/I4210134249"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074413858","display_name":"Erol Gelenbe","orcid":"https://orcid.org/0000-0001-9688-2201"},"institutions":[{"id":"https://openalex.org/I4210122744","display_name":"Institute of Theoretical and Applied Informatics","ror":"https://ror.org/037p52j25","country_code":"PL","type":"facility","lineage":["https://openalex.org/I4210122744","https://openalex.org/I99542240"]},{"id":"https://openalex.org/I99542240","display_name":"Polish Academy of Sciences","ror":"https://ror.org/01dr6c206","country_code":"PL","type":"government","lineage":["https://openalex.org/I99542240"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Erol Gelenbe","raw_affiliation_strings":["Polish Academy of Sciences,Institute of Theoretical & Applied Informatics,Gliwice,Poland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Polish Academy of Sciences,Institute of Theoretical & Applied Informatics,Gliwice,Poland","institution_ids":["https://openalex.org/I4210122744","https://openalex.org/I99542240"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007207219","display_name":"Dimitrios Tsoukalas","orcid":"https://orcid.org/0000-0001-9986-0796"},"institutions":[{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Dimitrios Tsoukalas","raw_affiliation_strings":["Centre for Research and Technology Hellas,Thessaloniki,Greece","Centre for Research and Technology Hellas, Thessaloniki, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Research and Technology Hellas,Thessaloniki,Greece","institution_ids":["https://openalex.org/I4210134249"]},{"raw_affiliation_string":"Centre for Research and Technology Hellas, Thessaloniki, Greece","institution_ids":["https://openalex.org/I4210134249"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002897802","display_name":"Ilias Kalouptsoglou","orcid":"https://orcid.org/0000-0002-5118-2508"},"institutions":[{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Ilias Kalouptsoglou","raw_affiliation_strings":["Centre for Research and Technology Hellas,Thessaloniki,Greece","Centre for Research and Technology Hellas, Thessaloniki, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Research and Technology Hellas,Thessaloniki,Greece","institution_ids":["https://openalex.org/I4210134249"]},{"raw_affiliation_string":"Centre for Research and Technology Hellas, Thessaloniki, Greece","institution_ids":["https://openalex.org/I4210134249"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021943307","display_name":"Maria Mathioudaki","orcid":null},"institutions":[{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Maria Mathioudaki","raw_affiliation_strings":["Centre for Research and Technology Hellas,Thessaloniki,Greece","Centre for Research and Technology Hellas, Thessaloniki, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Research and Technology Hellas,Thessaloniki,Greece","institution_ids":["https://openalex.org/I4210134249"]},{"raw_affiliation_string":"Centre for Research and Technology Hellas, Thessaloniki, Greece","institution_ids":["https://openalex.org/I4210134249"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019187933","display_name":"Mert Nak\u0131p","orcid":"https://orcid.org/0000-0002-6723-6494"},"institutions":[{"id":"https://openalex.org/I4210122744","display_name":"Institute of Theoretical and Applied Informatics","ror":"https://ror.org/037p52j25","country_code":"PL","type":"facility","lineage":["https://openalex.org/I4210122744","https://openalex.org/I99542240"]},{"id":"https://openalex.org/I99542240","display_name":"Polish Academy of Sciences","ror":"https://ror.org/01dr6c206","country_code":"PL","type":"government","lineage":["https://openalex.org/I99542240"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Mert Nakip","raw_affiliation_strings":["Polish Academy of Sciences,Institute of Theoretical & Applied Informatics,Gliwice,Poland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Polish Academy of Sciences,Institute of Theoretical & Applied Informatics,Gliwice,Poland","institution_ids":["https://openalex.org/I4210122744","https://openalex.org/I99542240"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060625416","display_name":"Dionysios Kehagias","orcid":"https://orcid.org/0000-0002-6912-3493"},"institutions":[{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Dionysios Kehagias","raw_affiliation_strings":["Centre for Research and Technology Hellas,Thessaloniki,Greece","Centre for Research and Technology Hellas, Thessaloniki, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Research and Technology Hellas,Thessaloniki,Greece","institution_ids":["https://openalex.org/I4210134249"]},{"raw_affiliation_string":"Centre for Research and Technology Hellas, Thessaloniki, Greece","institution_ids":["https://openalex.org/I4210134249"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087452615","display_name":"Dimitrios Tzovaras","orcid":"https://orcid.org/0000-0001-6915-6722"},"institutions":[{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Dimitrios Tzovaras","raw_affiliation_strings":["Centre for Research and Technology Hellas,Thessaloniki,Greece","Centre for Research and Technology Hellas, Thessaloniki, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Research and Technology Hellas,Thessaloniki,Greece","institution_ids":["https://openalex.org/I4210134249"]},{"raw_affiliation_string":"Centre for Research and Technology Hellas, Thessaloniki, Greece","institution_ids":["https://openalex.org/I4210134249"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.707,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.6541307,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.713870644569397},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7091501355171204},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6811543107032776},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.5521421432495117},{"id":"https://openalex.org/keywords/security-bug","display_name":"Security bug","score":0.5348687767982483},{"id":"https://openalex.org/keywords/application-security","display_name":"Application security","score":0.5027658939361572},{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.4950827658176422},{"id":"https://openalex.org/keywords/certification","display_name":"Certification","score":0.48710203170776367},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.4560849368572235},{"id":"https://openalex.org/keywords/enterprise-information-security-architecture","display_name":"Enterprise information security architecture","score":0.454215407371521},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.4473438262939453},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.44422051310539246},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.4407259523868561},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.4332917034626007},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.4110347032546997},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.3570237457752228},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.32430166006088257},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.14322656393051147},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.13836351037025452}],"concepts":[{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.713870644569397},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7091501355171204},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6811543107032776},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.5521421432495117},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.5348687767982483},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.5027658939361572},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.4950827658176422},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.48710203170776367},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.4560849368572235},{"id":"https://openalex.org/C31139447","wikidata":"https://www.wikidata.org/wiki/Q5380386","display_name":"Enterprise information security architecture","level":2,"score":0.454215407371521},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.4473438262939453},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.44422051310539246},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4407259523868561},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.4332917034626007},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.4110347032546997},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3570237457752228},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.32430166006088257},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.14322656393051147},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13836351037025452},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/drcn53993.2022.9758028","is_oa":false,"landing_page_url":"https://doi.org/10.1109/drcn53993.2022.9758028","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 18th International Conference on the Design of Reliable Communication Networks (DRCN)","raw_type":"proceedings-article"},{"id":"pmh:oai:zenodo.org:6564200","is_oa":true,"landing_page_url":"https://zenodo.org/record/6564200","pdf_url":"https://zenodo.org/record/6564200","source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferencePaper"}],"best_oa_location":{"id":"pmh:oai:zenodo.org:6564200","is_oa":true,"landing_page_url":"https://zenodo.org/record/6564200","pdf_url":"https://zenodo.org/record/6564200","source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferencePaper"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.5199999809265137,"id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G5565070372","display_name":"SECURITY BY DESIGN IOT DEVELOPMENT AND CERTIFICATE FRAMEWORK WITH FRONT-END ACCESS CONTROL","funder_award_id":"952684","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G7842005466","display_name":null,"funder_award_id":"Horizon 2020","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4224243773.pdf","grobid_xml":"https://content.openalex.org/works/W4224243773.grobid-xml"},"referenced_works_count":17,"referenced_works":["https://openalex.org/W1996503769","https://openalex.org/W2079753286","https://openalex.org/W2116667392","https://openalex.org/W2294407885","https://openalex.org/W2614225773","https://openalex.org/W2771786928","https://openalex.org/W2884852277","https://openalex.org/W2953772132","https://openalex.org/W3014322119","https://openalex.org/W3164837021","https://openalex.org/W3166095789","https://openalex.org/W3200047497","https://openalex.org/W4210670677","https://openalex.org/W4225827204","https://openalex.org/W4252722366","https://openalex.org/W4293201779","https://openalex.org/W6840465325"],"related_works":["https://openalex.org/W4240401768","https://openalex.org/W2018644264","https://openalex.org/W2155353733","https://openalex.org/W2795113090","https://openalex.org/W896362041","https://openalex.org/W2126513753","https://openalex.org/W3189065608","https://openalex.org/W4313400739","https://openalex.org/W101391871","https://openalex.org/W2129479435"],"abstract_inverted_index":{"Critical":[0],"everyday":[1],"activities":[2],"handled":[3],"by":[4],"modern":[5],"IoT":[6,24,45,77,92,106],"Systems":[7],"imply":[8],"that":[9,115,128],"security":[10,39,60,90,103,117,139,143],"is":[11,27],"of":[12,40,54,61,66,91,104,122],"major":[13],"concern":[14],"both":[15],"for":[16,85],"the":[17,20,23,38,44,52,59,62,89,101,105,111],"end-users":[18],"and":[19,87,132,141],"industry.":[21],"Securing":[22],"System":[25],"Architecture":[26],"commonly":[28],"used":[29],"to":[30,34,99,136],"strengthen":[31],"its":[32,55,69],"resilience":[33],"malicious":[35],"attacks.":[36],"However,":[37],"software":[41,93],"running":[42],"on":[43],"must":[46],"be":[47],"considered":[48],"as":[49],"well,":[50],"since":[51],"exploitation":[53],"vulnerabilities":[56],"can":[57,134],"infringe":[58],"overall":[63],"system,":[64],"regardless":[65],"how":[67],"secure":[68],"architecture":[70],"may":[71],"be.":[72],"Thus,":[73],"we":[74],"present":[75],"an":[76],"Software":[78],"Security-by-Design":[79],"(SSD)":[80],"Platform,":[81],"which":[82,133],"provides":[83],"mechanisms":[84,127],"monitoring":[86],"optimizing":[88],"applications":[94],"throughout":[95],"their":[96],"development":[97],"lifecycle,":[98],"validate":[100],"broader":[102],"software.":[107],"This":[108],"paper":[109],"describes":[110],"proposed":[112],"SSD":[113],"platform":[114],"leverages":[116],"information":[118],"from":[119],"all":[120],"phases":[121],"development,":[123],"using":[124],"some":[125],"novel":[126],"have":[129],"been":[130],"implemented,":[131],"lead":[135],"a":[137],"holistic":[138],"evaluation":[140],"future":[142],"certification.":[144]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-14T08:27:34.040176","created_date":"2025-10-10T00:00:00"}