The student Ángel Longueira Romero obtained an OUTSTANDING qualification with 'CUM LAUDE' mention

Back

The student Ángel Longueira Romero obtained an OUTSTANDING qualification with 'CUM LAUDE' mention

THESIS

The student Ángel Longueira Romero obtained an OUTSTANDING qualification with 'CUM LAUDE' mention

2022·09·08

$titulo.getData()

Thesis title: Cybersecurity Evaluation Methodology based on Metrics for Industrial Embedded Systems

Court:

  • Chairmanship: Eduardo Fernández-Medina Patón (Universidad de Castilla La Mancha)
  • Vocal: Ion Igor Armendariz Huici (Ikerlan, S. Coop.)
  • Vocal: Raúl Orduna Urrutia (VICOMTECH)
  • Vocal: Roberto Magán Carrión (Universidad de Granada)
  • Secretary: Urko Zurutuza Ortega (Mondragon Unibertsitatea)

Abstract:

Embedded Systems (ESs) have evolved from isolated systems into fully connected devices. For this reason, there is an increasing number of security threats over ESs, and a successful attack could have severe economical or physical consequences, including the loss of human lives. This dissertation studied cibersecurity in ESs from three different perspectives: (1) Analysis of existing security metrics, (2) Vulnerability analysis, and (3) Aggregation of security metrics. As a result, we proposed a new taxonomy to classify security metrics based on the properties of ESs. We also developed an Extended Dependency Graph (EDG) model to analyze known vulnerabilities of ESs over time. Finally, we proposed a CVSS aggregation algorithm based on the context where the ES is deployed. This work aims to lay the foundations for constructing a security evaluation methodology that uses standardized metrics to quantify the security level of an ES.