Definition of Internet of Things (IoT) Cyber Risk – Discussion on a Transformation Roadmap for Standardization of Regulations, Risk Maturity, Strategy Design and Impact Assessment

Radanliev, Petar and De Roure, David and R.C. Nurse, Jason and Burnap, Pete and Anthi, Eirini and Ani, Uchenna and Maddox, La’Treall and Santos, Omar and Mantilla Montalvo, Rafael (2019): Definition of Internet of Things (IoT) Cyber Risk – Discussion on a Transformation Roadmap for Standardization of Regulations, Risk Maturity, Strategy Design and Impact Assessment.

Abstract

Definition of Internet of Things (IoT) Cyber Risk – Discussion on a Transformation Roadmap for Standardization of Regulations, Risk Maturity, Strategy Design and Impact Assessment

• Item Type: MPRA Paper
• Language: English
• Keywords: Internet of Things; Micro Mart model; Goal-Oriented Approach; transformation roadmap; Cyber risk regulations; empirical analysis; cyber risk self-assessment; cyber risk target state
• Subjects: L - Industrial Organization > L0 - General; L - Industrial Organization > L5 - Regulation and Industrial Policy; L - Industrial Organization > L5 - Regulation and Industrial Policy > L50 - General; L - Industrial Organization > L5 - Regulation and Industrial Policy > L52 - Industrial Policy ; Sectoral Planning Methods; L - Industrial Organization > L5 - Regulation and Industrial Policy > L53 - Enterprise Policy; O - Economic Development, Innovation, Technological Change, and Growth > O2 - Development Planning and Policy; O - Economic Development, Innovation, Technological Change, and Growth > O2 - Development Planning and Policy > O21 - Planning Models ; Planning Policy; O - Economic Development, Innovation, Technological Change, and Growth > O3 - Innovation ; Research and Development ; Technological Change ; Intellectual Property Rights; O - Economic Development, Innovation, Technological Change, and Growth > O3 - Innovation ; Research and Development ; Technological Change ; Intellectual Property Rights > O31 - Innovation and Invention: Processes and Incentives; O - Economic Development, Innovation, Technological Change, and Growth > O3 - Innovation ; Research and Development ; Technological Change ; Intellectual Property Rights > O32 - Management of Technological Innovation and R&D; O - Economic Development, Innovation, Technological Change, and Growth > O3 - Innovation ; Research and Development ; Technological Change ; Intellectual Property Rights > O33 - Technological Change: Choices and Consequences ; Diffusion Processes; O - Economic Development, Innovation, Technological Change, and Growth > O3 - Innovation ; Research and Development ; Technological Change ; Intellectual Property Rights > O35 - Social Innovation; O - Economic Development, Innovation, Technological Change, and Growth > O3 - Innovation ; Research and Development ; Technological Change ; Intellectual Property Rights > O38 - Government Policy

References

Anderson, R. and Moore, T. (2006) ‘The Economics of Information Security’, Science AAAS, 314(5799), pp. 610–613. Available at: http://science.sciencemag.org/content/314/5799/610.full (Accessed: 2 April 2017).

Axon, L., Alahmadi, B., Nurse, J. R. C., Goldsmith, M. and Creese, S. (2018) ‘Sonification in Security Operations Centres: What do Security Practitioners Think?’, in Proceedings of the Workshop on Usable Security (USEC) at the Network and Distributed System Security (NDSS) Symposium. San Diego, CA, USA, pp. 1–12. Available at: https://www.cs.ox.ac.uk/files/9802/2018-USEC-NDSS-aangc-preprint.pdf (Accessed: 13 March 2018).

Barrett, M., Marron, J., Yan Pillitteri, V., Boyens, J., Witte, G. and Feldman, L. (2017) Draft NISTIR 8170, The Cybersecurity Framework: Implementation Guidance for Federal Agencies. Maryland. Available at: https://csrc.nist.gov/CSRC/media/Publications/nistir/8170/draft/documents/nistir8170-draft.pdf (Accessed: 9 March 2018).

Bilal, M. (2017) ‘A Review of Internet of Things Architecture , Technologies and Analysis Smartphone-based Attacks Against 3D printers’, arXiv preprint arXiv:1708.04560, pp. 1–21.

Bloomfield, R., Buzna, L., Popov, P., Salako, K. and Wright, D. (2010) Stochastic modelling of the effects of interdependencies between critical infrastructure, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics). Edited by E. Rome and R. Bloomfield. Springer Berlin Heidelberg. doi: 10.1007/978-3-642-14379-3_17.

Carruthers, K. (2016) ‘Internet of Things and Beyond: Cyber-Physical Systems - IEEE Internet of Things’, IEEE Internet of Things. Available at: http://iot.ieee.org/newsletter/may-2016/internet-of-things-and-beyond-cyber-physical-systems.html (Accessed: 11 April 2017).

CMMI (2017) What Is Capability Maturity Model Integration (CMMI)®? | CMMI Institute, CMMI Institute. Available at: http://cmmiinstitute.com/capability-maturity-model-integration (Accessed: 26 December 2017).

CVSS (2017) Common Vulnerability Scoring System SIG, FIRST.org. Available at: https://www.first.org/cvss/ (Accessed: 26 December 2017).

Deloitte (2017) Cyber security: everybody’s imperative A guide for the C-suite and boards on guarding against cyber risks. Ontario. Available at: https://www2.deloitte.com/content/dam/Deloitte/global/Documents/Risk/gx-ers-cyber-security-everybodys-imperative.pdf (Accessed: 20 January 2018).

DiMase, D., Collier, Z. A., Heffner, K. and Linkov, I. (2015) ‘Systems engineering framework for cyber physical security and resilience’, Environment Systems and Decisions, 35(2), pp. 291–300. doi: 10.1007/s10669-015-9540-y.

Eggenschwiler, J., Agrafiotis, I. and Nurse, J. R. (2016) ‘Insider threat response and recovery strategies in financial services firms’, Computer Fraud & Security. Elsevier Advanced Technology, 2016(11), pp. 12–19. doi: 10.1016/S1361-3723(16)30091-4.

Evans, P. C. and Annunziata, M. (2012) Industrial Internet: Pushing the Boundaries of Minds and Machines. General Electric. Available at: https://www.ge.com/docs/chapters/Industrial_Internet.pdf (Accessed: 15 April 2017).

FAIR (2017a) Quantitative Information Risk Management | The FAIR Institute, Factor Analysis of Information Risk . Available at: http://www.fairinstitute.org/ (Accessed: 26 December 2017).

FAIR (2017b) What is a Cyber Value-at-Risk Model? Available at: http://www.fairinstitute.org/blog/what-is-a-cyber-value-at-risk-model (Accessed: 26 December 2017).

FIRST (no date) CVSS v3.0 Specification Document. Available at: https://www.first.org/cvss/specification-document#8-4-Metrics-Levels (Accessed: 3 October 2017).

Giordano, A., Spezzano, G. and Vinci, A. (2016) ‘A Smart Platform for Large-Scale Cyber-Physical Systems’, in. Springer International Publishing, pp. 115–134. doi: 10.1007/978-3-319-26869-9_6.

Gordon, L. A. and Loeb, M. P. (2002) ‘The economics of information security investment’, ACM Transactions on Information and System Security. ACM, 5(4), pp. 438–457. doi: 10.1145/581271.581274.

Hanson, K. M. and Cunningham, G. S. (1996) THE BAYES INFERENCE ENGINE, Maximum Entropy and Bayesian Methods. Available at: http://kmh-lanl.hansonhub.com/publications/maxent95.pdf (Accessed: 17 April 2018).

IBM (2016) 2016 Cyber Security Intelligence Index infographic for Healthcare. Available at: http://www-01.ibm.com/common/ssi/cgi-bin/ssialias?htmlfid=SE912352USEN (Accessed: 20 January 2018).

ISO (2017) ISO - International Organization for Standardization. Available at: https://www.iso.org/home.html (Accessed: 26 December 2017).

Koch, R. and Rodosek, G. (2016) Proceedings of the 15th European Conference on Cyber Warfare and Security : ECCWS 2016 : hosted by Universität der Bundeswehr, Munich, Germany 7-8 July 2016. Available at: https://books.google.co.uk/books?hl=en&lr=&id=ijaeDAAAQBAJ&oi=fnd&pg=PA145&dq=economic+impact+of+cyber+risk&ots=50mTo8TVSV&sig=sD4V76yG5tG6IZIglmnGz3L1qqw&redir_esc=y#v=onepage&q=economic impact of cyber risk&f=false (Accessed: 3 April 2017).

Kotzanikolaou, P., Theoharidou, M. and Gritzalis, D. (2013) ‘Cascading Effects of Common-Cause Failures in Critical Infrastructures’, in Butts, J. and Shenoi, S. (eds) Critical Infrastructure Protection VII. Series Vol. Berlin Heidelberg: Springer Berlin Heidelberg, pp. 171–182. doi: 10.1007/978-3-642-45330-4_12.

Laugé, A., Hernantes, J. and Sarriegi, J. M. (2015) ‘Critical infrastructure dependencies: A holistic, dynamic and quantitative approach’, International Journal of Critical Infrastructure Protection. Elsevier, 8, pp. 16–23. doi: 10.1016/j.ijcip.2014.12.004.

Leitão, P., Colombo, A. W. and Karnouskos, S. (2016) ‘Industrial automation based on cyber-physical systems technologies: Prototype implementations and challenges’, Computers in Industry, 81, pp. 11–25. doi: 10.1016/j.compind.2015.08.004.

Marwedel, P. and Engel, M. (2016) ‘Cyber-Physical Systems: Opportunities, Challenges and (Some) Solutions’, in. Springer International Publishing, pp. 1–30. doi: 10.1007/978-3-319-26869-9_1.

Nicolescu, R., Huth, M., Radanliev, P. and De Roure, D. (2018) ‘Mapping the values of IoT’, Journal of Information Technology. Palgrave Macmillan UK, pp. 1–16. doi: 10.1057/s41265-018-0054-1.

NIST (2017) Update to Cybersecurity Framework | NIST, National Institute of Standards and Technology, U.S. Department of Commerce. Available at: https://www.nist.gov/news-events/news/2017/12/update-cybersecurity-framework (Accessed: 31 March 2018).

Nurse, J., Creese, S. and De Roure, D. (2017) ‘Security Risk Assessment in Internet of Things Systems’, IT Professional, 19(5), pp. 20–26. doi: 10.1109/MITP.2017.3680959.

Nurse, J. R. C., Radanliev, P., Creese, S. and De Roure, D. (2018) ‘Realities of Risk: “If you can”t understand it, you can’t properly assess it!’: The reality of assessing security risks in Internet of Things systems’, in Living in the Internet of Things: Cybersecurity of the IoT - 2018. 28 - 29 March 2018 | IET London: Savoy Place: The Institution of Engineering and Technology, pp. 1–9. doi: 10.1049/cp.2018.0001.

Radanliev, P. (2014) A conceptual framework for supply chain systems architecture and integration design based on practice and theory in the North Wales slate mining industry. British Library. doi: ISNI: 0000 0004 5352 6866.

Radanliev, P. (2015a) ‘Architectures for Green-Field Supply Chain Integration’, Journal of Supply Chain and Operations Management. GB, 13(2). Available at: https://www.csupom.com/uploads/1/1/4/8/114895679/2015n5p5.pdf (Accessed: 11 August 2016).

Radanliev, P. (2015b) ‘Engineering Design Methodology for Green-Field Supply Chain Architectures Taxonomic Scheme’, Journal of Operations and Supply Chain Management. GB, 8(2), pp. 52–66. doi: 10.12660/joscmv8n2p52-66.

Radanliev, P. (2015c) ‘Green-field Architecture for Sustainable Supply Chain Strategy Formulation’, International Journal of Supply Chain Management. GB, 4(2), pp. 62–67. Available at: http://ojs.excelingtech.co.uk/index.php/IJSCM/article/view/1060/pdf (Accessed: 11 August 2016).

Radanliev, P. (2016) ‘Supply Chain Systems Architecture and Engineering Design: Green-field Supply Chain Integration’, Operations and Supply Chain Management: An International Journal, 9(1). Available at: http://www.journal.oscm-forum.org/journal/abstract/oscm-volume-9-issue-1-2016/supply-chain-systems-architecture-and-engineering-design-green-field-supply-chain-integration (Accessed: 21 July 2017).

Radanliev, P., De Roure, C. D., Nurse, .R.C., Nicolescu, R., Huth, M., Cannady, C., Montalvo, R. M., De Roure, D., Nurse, J. R. C., Nicolescu, R., Huth, M., Cannady, S. and Montalvo, R. M. (2018) ‘Integration of Cyber Security Frameworks, Models and Approaches - Design Principles for the Internet-of-things in Industry 4.0’, in Living in the Internet of Things: Cybersecurity of the IoT - 2018. London: IET, p. 41 (6 pp.)-41 (6 pp.). doi: 10.1049/cp.2018.0041.

Radanliev, P., Roure, D. C. De, Nurse, J. R. C., Burnap, P., Anthi, E., Ani, U., Maddox, L., Santos, O. and Montalvo, R. M. (2019a) Cyber risk from IoT technologies in the supply chain – decision support system for the Industry 4.0. University of Oxford.

Radanliev, P., Roure, D. C. De, Nurse, J. R. C., Burnap, P., Anthi, E., Ani, U., Maddox, L., Santos, O. and Montalvo, R. M. (2019b) Definition of Internet of Things (IoT) Cyber Risk – Discussion on a Transformation Roadmap for Standardisation of Regulations, Risk Maturity, Strategy Design and Impact Assessment. 201903.0080.v1. Oxford: Preprints. doi: 10.13140/RG.2.2.17305.88167.

Radanliev, P., De Roure, D. C., Nurse, J. R. C., Burnap, P., Anthi, E., Ani, U., Santos, O. and Montalvo, R. M. (2019) Definition of Cyber Strategy Transformation Roadmap for Standardisation of IoT Risk Impact Assessment with a Goal-Oriented Approach and the Internet of Things Micro Mart, Working paper. University of Oxford.

Radanliev, P., De Roure, D. C., Nurse, J. R. C., Montalvo, R. M. and Burnap, P. (2019a) Standardisation of cyber risk impact assessment for the Internet of Things (IoT). University of Oxford.

Radanliev, P., De Roure, D. C., Nurse, J. R. C., Montalvo, R. M. and Burnap, P. (2019b) The Industrial Internet-of-Things in the Industry 4.0 supply chains of small and medium sized enterprises, Working paper. University of Oxford.

Radanliev, P., De Roure, D. C., Nurse, J. R. C., Montalvo, R. M., Burnap, P., Roure, D. C. De, Nurse, J. R. C., Montalvo, R. M. and Stacy Cannady (2019) Design principles for cyber risk impact assessment from Internet of Things (IoT), Working paper. University of Oxford.

Radanliev, P., De Roure, D., Cannady, S., Montalvo, R. M., Nicolescu, R. and Huth, M. (2018) ‘Economic impact of IoT cyber risk - analysing past and present to predict the future developments in IoT risk analysis and IoT cyber insurance’, in Living in the Internet of Things: Cybersecurity of the IoT - 2018. London: Institution of Engineering and Technology, p. 3 (9 pp.)-3 (9 pp.). doi: 10.1049/cp.2018.0003.

Radanliev, P., De Roure, D., Nicolescu, R. and Huth, M. (2019) A reference architecture for integrating the Industrial Internet of Things in the Industry 4.0, Working paper. University of Oxford.

Radanliev, P., De Roure, D., Nicolescu, R., Huth, M., Montalvo, R. M., Cannady, S. and Burnap, P. (2018) ‘Future developments in cyber risk assessment for the internet of things’, Computers in Industry. Elsevier, 102, pp. 14–22. doi: 10.1016/J.COMPIND.2018.08.002.

Radanliev, P., De Roure, D., Nurse, J., Burnap, P. and Mantilla Montalvo, R. (2019) Methodology for designing decision support supply chain systems for visualising and mitigating cyber risk from IoT technologies, Working paper. University of Oxford. doi: 10.13140/RG.2.2.32975.53921.

Radanliev, P., Roure, D. De, Nurse, J. R. C., Nicolescu, R., Huth, M., Cannady, S. and Montalvo, R. M. (2019c) Cyber risk impact assessment – assessing the risk from the IoT to the digital economy. University of Oxford. doi: 10.13140/RG.2.2.11145.49768.

Radanliev, P., Roure, D. De, Nurse, J. R. C., Nicolescu, R., Huth, M., Cannady, S. and Montalvo, R. M. (2019d) New developments in Cyber Physical Systems, the Internet of Things and the Digital Economy – future developments in the Industrial Internet of Things and Industry 4.0. University of Oxford. doi: 10.13140/RG.2.2.14133.93921.

Radanliev, P., Rowlands, H. and Thomas, A. (2014) ‘Supply Chain Paradox: Green-field Architecture for Sustainable Strategy Formulation’, in Setchi, R., Howlett, R. J., Naim, M., and Seinz, H. (eds) Cardiff: Sustainable Design and Manufacturing 2014, Part 2, International Conference. Cardiff: Future Technology Press, pp. 839–850.

RiskLens (2017) Risk Analytics Platform | FAIR Platform Management. Available at: https://www.risklens.com/platform (Accessed: 26 December 2017).

Rodewald, G. and Gus (2005) ‘Aligning information security investments with a firm’s risk tolerance’, in Proceedings of the 2nd annual conference on Information security curriculum development - InfoSecCD ’05. New York, New York, USA: ACM Press, p. 139. doi: 10.1145/1107622.1107654.

Roumani, M. A., Fung, C. C., Rai, S. and Xie, H. (2016) ‘Value Analysis of Cyber Security Based on Attack Types’, ITMSOC Transactions on Innovation & Business Engineering, 01, pp. 34–39. Available at: http://www.itmsoc.org (Accessed: 4 April 2017).

Ruan, K. (2017) ‘Introducing cybernomics: A unifying economic framework for measuring cyber risk’, Computers & Security, 65, pp. 77–89. doi: 10.1016/j.cose.2016.10.009.

Sangiovanni-Vincentelli, A., Damm, W. and Passerone, R. (2012) ‘Taming Dr. Frankenstein: Contract-Based Design for Cyber-Physical Systems * g’, European Journal of Control, 18, pp. 217–238. doi: 10.3166/EJC.18.217–238.

Shaw, R., Takanti, V., Zullo, T., Director, M. and Llc, E. (2017) Best Practices in Cyber Supply Chain Risk Management Boeing and Exostar Cyber Security Supply Chain Risk Management Interviews. Available at: https://www.nist.gov/sites/default/files/documents/itl/csd/NIST_USRP-Boeing-Exostar-Case-Study.pdf (Accessed: 9 March 2018).

Stergiopoulos, G., Kotzanikolaou, P., Theocharidou, M., Lykou, G. and Gritzalis, D. (2016) ‘Time-based critical infrastructure dependency analysis for large-scale and cross-sectoral failures’, International Journal of Critical Infrastructure Protection. Elsevier, 12, pp. 46–60. doi: 10.1016/j.ijcip.2015.12.002.

Taylor, P., Allpress, S., Carr, M., Lupu, E., Norton, J., Smith, L., Blackstock, J., Boyes, H., Hudson-Smith, A., Brass, I., Chizari, H., Cooper, R., Coulton, P., Craggs, B.,Davies, N., De Roure, D., Elsden, M., Huth, M., Lindley, J., Maple, C., Mittelstadt, B., Nicolescu, R., Nurse, J., Procter, R., Radanliev, P., Rashid, A., Sgandurra, D., Skatova, A., Taddeo, M., Tanczer, L., Vieira-Steiner, R., Watson, J.D.M., Wachter, S., Wakenshaw, S., Carvalho, G., T. and R.J., Westbury, P. S. (2018) Internet of Things realising the potential of a trusted smart world. London. Available at: www.raeng.org.uk/internetofthings (Accessed: 31 March 2018).

Wang, L., Törngren, M. and Onori, M. (2015) ‘Current status and advancement of cyber-physical systems in manufacturing’, Journal of Manufacturing Systems, 37, pp. 517–527. doi: 10.1016/j.jmsy.2015.04.008.

Weinberg, M. D. (no date) ‘Computational statistics using the Bayesian Inference Engine’, Monthly Notices of the Royal Astronomical Society. Oxford University Press, 434(2), pp. 1736–1755. doi: 10.1093/mnras/stt1132.

World Economic Forum (2015) Partnering for Cyber Resilience Towards the Quantification of Cyber Threats. Geneva. Available at: http://www3.weforum.org/docs/WEFUSA_QuantificationofCyberThreats_Report2015.pdf (Accessed: 4 April 2017).

Zhang, P. and Peeta, S. (2011) ‘A generalized modeling framework to analyze interdependencies among infrastructure systems’, Transportation Research Part B: Methodological, 45(3), pp. 553–579. doi: 10.1016/j.trb.2010.10.001.

Nicolescu, R., Huth, M., Radanliev, P. and De Roure, D. (2018a) ‘Mapping the values of IoT’, Journal of Information Technology. Palgrave Macmillan UK, pp. 1–16. doi: 10.1057/s41265-018-0054-1.

Nicolescu, R., Huth, M., Radanliev, P. and De Roure, D. (2018b) State of The Art in IoT - Beyond Economic Value. London. Available at: https://iotuk.org.uk/wp-content/uploads/2018/08/State-of-the-Art-in-IoT-–-Beyond-Economic-Value2.pdf (Accessed: 14 October 2018).

Nurse, J. R. C., Radanliev, P., Creese, S. and De Roure, D. (2018) ‘Realities of Risk: “If you can”t understand it, you can’t properly assess it!’: The reality of assessing security risks in Internet of Things systems’, in Living in the Internet of Things: Cybersecurity of the IoT - 2018. 28 - 29 March 2018 | IET London: Savoy Place: The Institution of Engineering and Technology, pp. 1–9. doi: 10.1049/cp.2018.0001.

Radanliev, P. (2014) A conceptual framework for supply chain systems architecture and integration design based on practice and theory in the North Wales slate mining industry. British Library. doi: ISNI: 0000 0004 5352 6866.

Radanliev, P. (2015a) ‘Architectures for Green-Field Supply Chain Integration’, Journal of Supply Chain and Operations Management. GB, 13(2). Available at: https://www.csupom.com/uploads/1/1/4/8/114895679/2015n5p5.pdf (Accessed: 11 August 2016).

Radanliev, P. (2015b) ‘Engineering Design Methodology for Green-Field Supply Chain Architectures Taxonomic Scheme’, Journal of Operations and Supply Chain Management. GB, 8(2), pp. 52–66. doi: 10.12660/joscmv8n2p52-66.

Radanliev, P. (2015c) ‘Green-field Architecture for Sustainable Supply Chain Strategy Formulation’, International Journal of Supply Chain Management. GB, 4(2), pp. 62–67. Available at: http://ojs.excelingtech.co.uk/index.php/IJSCM/article/view/1060/pdf (Accessed: 11 August 2016).

Radanliev, P. (2016) ‘Supply Chain Systems Architecture and Engineering Design: Green-field Supply Chain Integration’, Operations and Supply Chain Management: An International Journal, 9(1). Available at: http://www.journal.oscm-forum.org/journal/abstract/oscm-volume-9-issue-1-2016/supply-chain-systems-architecture-and-engineering-design-green-field-supply-chain-integration (Accessed: 21 July 2017).

Radanliev, P., Charles De Roure, D., Maple, C., Nurse, J. R. C., Nicolescu, R. and Ani, U. (2019) Cyber Risk in IoT Systems, Journal of Cyber Policy. University of Oxford. doi: 10.13140/RG.2.2.29652.86404.

Radanliev, P., Charles De Roure, D., Nurse, J. R., Burnap, P., Anthi, E., Ani, U., Maddox, T., Santos, O. and Mantilla Montalvo, R. (no date) Definition of Internet of Things (IoT) Cyber Risk-Discussion on a Transformation Roadmap for Standardization of Regulations, Risk Maturity, Strategy Design and Impact Assessment. Available at: www.mdpi.com/journal/sensors.

Radanliev, P., Charles De Roure, D., Nurse, J. R. C., Burnap, P. and Montalvo, R. M. (2019) Methodology for designing decision support supply chain systems for visualising and mitigating cyber risk from IoT technologies, Working paper. University of Oxford. doi: 10.13140/RG.2.2.32975.53921.

Radanliev, P., De Roure, C. D., Nurse, .R.C., Nicolescu, R., Huth, M., Cannady, C. and Montalvo, R. M. (2018) ‘Integration of Cyber Security Frameworks, Models and Approaches for Building Design Principles for the Internet-of-things in Industry 4.0’, in Living in the Internet of Things: Cybersecurity of the IoT - 2018. London: IET, p. 41 (6 pp.)-41 (6 pp.). doi: 10.1049/cp.2018.0041.

Radanliev, P., Roure, D. C. De, Nurse, J. R. C., Burnap, P., Anthi, E., Ani, U., Maddox, L., Santos, O. and Montalvo, R. M. (2019) Cyber risk from IoT technologies in the supply chain – decision support system for the Industry 4.0. University of Oxford.

Radanliev, P., Roure, D. C. De, Nurse, J. R. C., Burnap, P., Anthi, E., Ani, U., Maddox, L., Santos, O. and Montalvo, R. M. (2019) Definition of Internet of Things (IoT) Cyber Risk – Discussion on a Transformation Roadmap for Standardisation of Regulations, Risk Maturity, Strategy Design and Impact Assessment. 201903.0080.v1. Oxford: Preprints. doi: 10.13140/RG.2.2.17305.88167.

Radanliev, P., De Roure, D. C., Nurse, J. R. C., Burnap, P., Anthi, E., Ani, U., Santos, O. and Montalvo, R. M. (2019) Definition of Cyber Strategy Transformation Roadmap for Standardisation of IoT Risk Impact Assessment with a Goal-Oriented Approach and the Internet of Things Micro Mart, Working paper. University of Oxford.

Radanliev, P., De Roure, D. C., Nurse, J. R. C. C., Nicolescu, R., Huth, M., Cannady, S. and Montalvo, R. M. (2019) New developments in Cyber Physical Systems, the Internet of Things and the Digital Economy – future developments in the Industrial Internet of Things and Industry 4.0. University of Oxford. doi: 10.13140/RG.2.2.14133.93921.

Radanliev, P., De Roure, D. C., Nurse, J. R. C., Montalvo, R. M. and Burnap, P. (2019a) Standardisation of cyber risk impact assessment for the Internet of Things (IoT). University of Oxford.

Radanliev, P., De Roure, D. C., Nurse, J. R. C., Montalvo, R. M. and Burnap, P. (2019b) The Industrial Internet-of-Things in the Industry 4.0 supply chains of small and medium sized enterprises, Working paper. University of Oxford.

Radanliev, P., De Roure, D. C., Nurse, J. R. C., Montalvo, R. M., Burnap, P., Roure, D. C. De, Nurse, J. R. C., Montalvo, R. M. and Stacy Cannady (2019) Design principles for cyber risk impact assessment from Internet of Things (IoT), Working paper. University of Oxford.

Radanliev, P., Roure, D. C. De, Nurse, J. R. C., Montalvo, R. M. and Stacy Cannady (2018) ‘Design principles for cyber risk impact assessment from Internet of Things (IoT)’, Wokring paper.

Radanliev, P., De Roure, D. C., Nurse, J. R. C., Rafael, M. M. and Burnap, P. (2019) Supply Chain Design for the Industrial Internet of Things and the Industry 4.0. University of Oxford. doi: 10.13140/RG.2.2.36311.32160.

Radanliev, P., De Roure, D., Cannady, S., Montalvo, R. M., Nicolescu, R. and Huth, M. (2018) ‘Economic impact of IoT cyber risk - analysing past and present to predict the future developments in IoT risk analysis and IoT cyber insurance’, in Living in the Internet of Things: Cybersecurity of the IoT - 2018. London: Institution of Engineering and Technology, p. 3 (9 pp.)-3 (9 pp.). doi: 10.1049/cp.2018.0003.

Radanliev, P., De Roure, D., Cannady, S., Montalvo, R. M., Nicolescu, R. and Huth, M. (2019) Analysing IoT cyber risk for estimating IoT cyber insurance. Available at: www.preprints.org. Radanliev, P., De Roure, D., Nicolescu, R. and Huth, M. (2019) A reference architecture for integrating the Industrial Internet of Things in the Industry 4.0, Working paper. University of Oxford.

Radanliev, P., De Roure, D., Nicolescu, R., Huth, M., Montalvo, R. M., Cannady, S. and Burnap, P. (2018) ‘Future developments in cyber risk assessment for the internet of things’, Computers in Industry. Elsevier, 102, pp. 14–22. doi: 10.1016/J.COMPIND.2018.08.002.

Radanliev, P., De Roure, D., Nurse, J. R. C. C., Nicolescu, R., Huth, M., Cannady, S. and Montalvo, R. M. (2019) Cyber risk impact assessment – assessing the risk from the IoT to the digital economy. University of Oxford. doi: 10.13140/RG.2.2.11145.49768.

Radanliev, P., De Roure, D., Nurse, J. R. C., Nicolescu, R., Huth, M., Cannady, S. and Montalvo, R. M. (2019) Cyber Security Framework for the Internet-of-Things in Industry 4.0. Available at: www.preprints.org.

Radanliev, P., Rowlands, H. and Thomas, A. (2014) ‘Supply Chain Paradox: Green-field Architecture for Sustainable Strategy Formulation’, in Setchi, R., Howlett, R. J., Naim, M., and Seinz, H. (eds) Cardiff: Sustainable Design and Manufacturing 2014, Part 2, International Conference. Cardiff: Future Technology Press, pp. 839–850.

Taylor, P., Allpress, S., Carr, M., Lupu, E., Norton, J., Smith, L., Blackstock, J., Boyes, H., Hudson-Smith, A., Brass, I., Chizari, H., Cooper, R., Coulton, P., Craggs, B.,Davies, N., De Roure, D., Elsden, M., Huth, M., Lindley, J., Maple, C., Mittelstadt, B., Nicolescu, R., Nurse, J., Procter, R., Radanliev, P., Rashid, A., Sgandurra, D., Skatova, A., Taddeo, M., Tanczer, L., Vieira-Steiner, R., Watson, J.D.M., Wachter, S., Wakenshaw, S., Carvalho, G., T. and R.J., Westbury, P. S. (2018) Internet of Things realising the potential of a trusted smart world. London. Available at: www.raeng.org.uk/internetofthings (Accessed: 31 March 2018).