Static Analysis of Information Systems for IoT Cyber Security: A Survey of Machine Learning Approaches

• Published in: Sensors (Basel, Switzerland) Vol. 22; no. 4; p. 1335
• Main Authors: Kotenko, Igor, Izrailov, Konstantin, Buinevich, Mikhail
• Format: Journal Article
• Language: English
• Published: Switzerland MDPI AG 10.02.2022; MDPI
• Subjects: Algorithms; analytic model; Automation; cyber security; Cyberterrorism; Data security; Heterogeneity; Hypotheses; Information systems; Internet of Things; Investment analysis; IoT systems; Machine learning; Performance evaluation; Review; Security management; Software; static analysis; survey model; Surveys; Systems analysis; Taxonomy; New York; cyber security; IoT systems; static analysis; survey model; formalization; analytic model; machine learning
• ISSN: 1424-8220; 1424-8220
• DOI: 10.3390/s22041335

Ensuring security for modern IoT systems requires the use of complex methods to analyze their software. One of the most in-demand methods that has repeatedly been proven to be effective is static analysis. However, the progressive complication of the connections in IoT systems, the increase in their scale, and the heterogeneity of elements requires the automation and intellectualization of manual experts' work. A hypothesis to this end is posed that assumes the applicability of machine-learning solutions for IoT system static analysis. A scheme of this research, which is aimed at confirming the hypothesis and reflecting the ontology of the study, is given. The main contributions to the work are as follows: systematization of static analysis stages for IoT systems and decisions of machine-learning problems in the form of formalized models; review of the entire subject area publications with analysis of the results; confirmation of the machine-learning instrumentaries applicability for each static analysis stage; and the proposal of an intelligent framework concept for the static analysis of IoT systems. The novelty of the results obtained is a consideration of the entire process of static analysis (from the beginning of IoT system research to the final delivery of the results), consideration of each stage from the entirely given set of machine-learning solutions perspective, as well as formalization of the stages and solutions in the form of "Form and Content" data transformations.