论文标题
系统分析和安全建议作为数据集的比较
Systematic Analysis and Comparison of Security Advice as Datasets
论文作者
论文摘要
已提供了一长串文件作为安全建议，实践守则以及用于构建和使用安全产品（包括物联网（IoT）设备）的安全指南。迄今为止，在建议数据集本身上几乎没有进行系统的分析。为了解决这个问题，通过物联网作为案例研究，我们首先对两个文档进行非正式分析，提供与物联网安全有关的建议 - ETSI规定和英国DCMS指南 - 然后进行我们认为是对这些建议数据集的首次系统分析。我们的分析解释了ETSI规定是英国DCMS指南的积极演变的哪些方式。我们还建议提供安全建议的人的安全建议的各个方面。这样的当事方可能会发现系统分析方法将建议分类为预定义的类别，这是物联网本身以外的一般兴趣。
A long list of documents have been offered as security advice, codes of practice, and security guidelines for building and using security products, including Internet of Things (IoT) devices. To date, little or no systematic analysis has been carried out on the advice datasets themselves. Towards addressing this, with IoT as a case study, we begin with an informal analysis of two documents offering advice related to IoT security -- the ETSI Provisions and the UK DCMS Guidelines -- and then carry out what we believe is the first systematic analysis of these advice datasets. Our analysis explains in what ways the ETSI Provisions are a positive evolution of the UK DCMS Guidelines. We also suggest aspects of security advice warranting special attention by those offering security advice. Such parties may find the systematic analysis method, which categorizes advice into predefined categories, to be of general interest beyond IoT itself.
