The rapid expansion of the Internet of Things (IoT) has introduced critical vulnerabilities at the sensor layer, as conventional cybersecurity measures often fail to address data integrity at its source, creating significant risks in modern cyber-physical systems. This research addresses the urgent need for a verifiable method to ensure the trustworthiness of sensor data. The primary aim of this paper is to propose and validate a novel framework for the metrological assurance of IoT sensors, designed to mitigate cybersecurity risks by treating data manipulations as quantifiable measurement anomalies. The proposed framework integrates two foundational technologies: Digital Calibration Certificates (DCC) to establish a trusted metrological baseline and Distributed Ledger Technology (DLT) to ensure its immutable traceability. A mathematical model is developed to formalize attack vectors and introduce the Dynamic Trust Corridor (DTC) criterion for real-time verification. The core result is the development of the Metrological Trust Index (MTI), a continuous metric for data trustworthiness. Through numerical simulation of an industrial sensor, the framework demonstrated a 98.7% detection rate for bias injection attacks and a 94.1% rate for subtle drift manipulation attacks, significantly outperforming traditional methods. Theoretically, this work establishes a new paradigm for IoT security rooted in the principles of measurement science. Practically, the framework provides a concrete, auditable pathway for manufacturers and operators to comply with emerging regulatory standards such as the EU Cyber Resilience Act (CRA), enhancing the overall resilience of critical IoT ecosystems.
Keywords
Internet of ThingsCybersecurityMetrologyStandardizationRisk Management
References
T. Gundu, “Internet of Things: Sensor Layer Security Risk Mitigation Framework,” in 2023 Int. Conf. Electr. Comput. Energy Technol. (ICECET), Cape Town, South Africa, 2023, [Online]. Available: https://doi.org/10.1109/ICECET58911.2023.10389252.
M. A. Almaiah and R. B. Sulaiman, “Cyber Risk Management in the Internet of Things: Frameworks, Models, and Best Practices,” J. Sens. Actuator Netw., vol. 13, no. 1, 2024.
B. T. Geetha, D. Bhuva, and A. Bhuva, “Fortifying IoT: A Cybersecurity Model for Secure Implementation,” in 2024 Int. Conf. Intell. Comput. Inf. Ind. (IC3I), 2024, [Online]. Available: https://doi.org/10.1109/IC3I61595.2024.10829198.
M. Bhole, W. Kästner, and T. Sauter, “Towards Unveiling Vulnerabilities and Securing IoT Devices: An Ontology-Based Approach,” in 2024 IEEE 29th Int. Conf. Emerg. Technol. Factory Autom. (ETFA), 2024, [Online]. Available: https://doi.org/10.1109/ETFA61755.2024.10710882.
K. Kandasamy, S. Srinivas, and K. Achuthan, “IoT cyber risk: A holistic analysis of cyber risk assessment frameworks, risk vectors, and risk ranking process,” EURASIP J. Inf. Secur., vol. 2020, no. 1, 2020, [Online]. Available: https://doi.org/10.1186/S13635-020-00111-0.
ISO/IEC 17025:2017, “General requirements for the competence of testing and calibration laboratories,” International Organization for Standardization, Geneva, Switzerland, 2017.
H. Aranha, M. Masi, and T. Pavleska, “Securing the metrological chain in IoT environments: An architectural framework,” in 2021 IEEE Int. Workshop Metrol. Ind. 4.0 IoT, Rome, Italy, 2021, pp. 1-6, [Online]. Available: https://doi.org/10.1109/METROIND4.0IOT51437.2021.9488526.
T. Mustapaa et al., “Digital Metrology for the Internet of Things,” in 2020 Global Internet Things Summit (GIoTS), Dublin, Ireland, 2020, pp. 1-6, [Online]. Available: https://doi.org/10.1109/GIOTS49054.2020.9119603.
S. Eichstädt, M. Gruber, and A. P. Vedurmudi, “Integrating metrological principles into the Internet of Things: A digital maturity model for sensor network metrology,” Techn. Messen, vol. 90, no. 1, pp. 12-24, 2023, [Online]. Available: https://doi.org/10.1515/teme-2023-0103.
JCGM 100:2008, “Evaluation of measurement data - Guide to the expression of uncertainty in measurement (GUM),” Joint Committee for Guides in Metrology, 2008.
K. Zhou, J. Wu, and K. B. Lee, “Security for IEEE P1451.0-Based IoT Sensor Networks,” in IECON 2021 - 47th Annu. Conf. IEEE Ind. Electron. Soc., Toronto, ON, Canada, 2021, [Online]. Available: https://doi.org/10.1109/IECON48115.2021.9589277.
A. J. Jara, I. C. Martinez, and J. S. Sanchez, “CyberSecurity Resilience Act (CRA) in Practice for IoT Devices: Getting Ready for the NIS2,” in 2024 IEEE Int. Smart Cities Conf. (ISC2), 2024, [Online]. Available: https://doi.org/10.1109/SCFC62024.2024.10698057.
E. Madaliev et al., “Numerical study of axisymmetrical transsonic impact based on the SST turbulence model,” BIO Web Conf., vol. 145, p. 03034, Jan. 2024, [Online]. Available: https://doi.org/10.1051/bioconf/202414503034.
S. W. Roberts, “Control Chart Tests Based on Geometric Moving Averages,” Technometrics, vol. 1, no. 3, pp. 239-250, 1959.
E. S. Page, “Continuous inspection schemes,” Biometrika, vol. 41, no. 1/2, pp. 100-115, 1954, [Online]. Available: https://doi.org/10.2307/2333009.