• iot
• iot-lysa
• simulator
• simulatore
• static-analysis
• surfing

In the realm of IoT, the demand for verifying the reliability of data gathered by sensors and employed in decision-making processes for actuators is steadily increasing. Collecting unreliable data could lead serious information leakage, and if IoT is combined with critical control system (e.g., train control system), security attack would cause loss of lives. Furthermore, research on IoT security requirements is insufficient now. This thesis focusses on IoT security, and its requirement specification. First we propose SURFING, a requirement language for IoT, based on the IoT-LySa process calculus. We illustrate the design and the implementation of the SURFING toolkit and its usage to analyse the behaviour of IoT specifications. Then, we suggest the exploitation of a Static Analysis inspired by Control Flow Analysis (CFA) to collect, surf and reason about data trajectories within an IoT system specification so to increase the overall security measurement of IoT specifications.