The Internet of Things and The Web of Things

International audienceThe Internet of Things is creating a new world, a quantifiable and measureable world, where people and businesses can manage their assets in better informed ways, and can make more timely and better informed decisions about what they want or need to do. This new con-nected world brings with it fundamental changes to society and to consumers. This special issue of ERCIM News thus focuses on various relevant aspects of the Internet of Things and the Web of Things

Internal interface diversification as a security measure in sensor networks

More actuator and sensor devices are connected to the Internet of Things (IoT) every day, and the network keeps growing, while software security of the devices is often incomplete. Sensor networks and the IoT in general currently cover a large number of devices with an identical internal interface structure. By diversifying the internal interfaces, the interfaces on each node of the network are made unique, and it is possible to break the software monoculture of easily exploitable identical systems. This paper proposes internal interface diversification as a security measure for sensor networks. We conduct a study on diversifiable internal interfaces in 20 IoT operating systems. We also present two proof-of-concept implementations and perform experiments to gauge the feasibility in the IoT environment. Internal interface diversification has practical limitations, and not all IoT operating systems have that many diversifiable interfaces. However, because of low resource requirements, compatibility with other security measures and wide applicability to several interfaces, we believe internal interface diversification is a promising and effective approach for securing nodes in sensor networks.</p

Supporting the grow-and-prune model for evolving software product lines

207 p.Software Product Lines (SPLs) aim at supporting the development of a whole family of software products through a systematic reuse of shared assets. To this end, SPL development is separated into two interrelated processes: (1) domain engineering (DE), where the scope and variability of the system is defined and reusable core-assets are developed; and (2) application engineering (AE), where products are derived by selecting core assets and resolving variability. Evolution in SPLs is considered to be more challenging than in traditional systems, as both core-assets and products need to co-evolve. The so-called grow-and-prune model has proven great flexibility to incrementally evolve an SPL by letting the products grow, and later prune the product functionalities deemed useful by refactoring and merging them back to the reusable SPL core-asset base. This Thesis aims at supporting the grow-and-prune model as for initiating and enacting the pruning. Initiating the pruning requires SPL engineers to conduct customization analysis, i.e. analyzing how products have changed the core-assets. Customization analysis aims at identifying interesting product customizations to be ported to the core-asset base. However, existing tools do not fulfill engineers needs to conduct this practice. To address this issue, this Thesis elaborates on the SPL engineers' needs when conducting customization analysis, and proposes a data-warehouse approach to help SPL engineers on the analysis. Once the interesting customizations have been identified, the pruning needs to be enacted. This means that product code needs to be ported to the core-asset realm, while products are upgraded with newer functionalities and bug-fixes available in newer core-asset releases. Herein, synchronizing both parties through sync paths is required. However, the state of-the-art tools are not tailored to SPL sync paths, and this hinders synchronizing core-assets and products. To address this issue, this Thesis proposes to leverage existing Version Control Systems (i.e. git/Github) to provide sync operations as first-class construct

Feature Papers "Age-Friendly Cities & Communities: State of the Art and Future Perspectives"

The "Age-Friendly Cities & Communities: States of the Art and Future Perspectives" publication presents contemporary, innovative, and insightful narratives, debates, and frameworks based on an international collection of papers from scholars spanning the fields of gerontology, social sciences, architecture, computer science, and gerontechnology. This extensive collection of papers aims to move the narrative and debates forward in this interdisciplinary field of age-friendly cities and communities

Resilience The 2nd International Workshop on Modelling of Physical Economic and Social Systems for Resilience Assessment

JRC Directorate E – Space, Security and Migration has organized the 2nd international workshop on Modelling of Physical, Economic and Social Systems for Resilience Assessment in Ispra that will consist in more than ten sessions for three days of full immersion into this topic. Interest in resilience has been rising rapidly during the last twenty years, both among policy makers and academia, as a response to increasing concern about the potential effect of shocks to individuals, civil infrastructure, regions, countries and social, economic and political institutions. The objective of the workshop is to bring together the scientific community and policy makers towards developing better policies and practices incorporating the element of resilience in various fields. This workshop has been organized in close collaboration with NIST and Colorado State University who organized in Washington on 19-21 October 2016 the 1st International workshop on the same subject. This is a follow-up of several similar events in this field. The JRC already organized a higher level event, the JRC-EPSC annual conference "Building a Resilient Europe in a Globalised World" in September 2015. These workshops aimed at identifying more strategic needs and provide an outlook of future actions. In addition, the JRC organized the first plenary session during the IDRC Davos 2016 conference entitled “Implementing resilience in a world of interconnectedness and emerging challenges” in which the JRC, NIST, Rotterdam city, the Dutch authorities and researchers from Japan presented their views and best practices on resilience implementation. Such an event constitutes an excellent opportunity for positioning JRC among the top institutions in resilience modelling with the capability to influence and steer the work of this community in close collaboration with recognized institutions around the globe.JRC.E.2-Technology Innovation in Securit