Um estudo sobre os componentes de segurança da plataforma Fiware

Abstract

The growing adoption of the Internet of Things (IoT) has brought to light the critical importance of cybersecurity in connected environments. With this concern in mind, the European Union has fostered the creation of an open and decentralized ecosystem named FIWARE. This ecosystem has become known for its flexibility and scalability in creating IoT solutions, placing a strong emphasis on security as well. Through its Security Generic Enablers (GEs), the FIWARE platform plays an essential role in building secure and reliable IoT solutions. Each GE addresses specific aspects of security, ensuring the integrity, confidentiality, and availability of the platform's data and resources. This work abstracts and explores the security approach of the FIWARE platform, using security principles as criteria to evaluate each GE, as proposed by Ananias (2022), enabling an effective comparison. Official platform documentation and academic articles are also used, identifying potential documented security risks and flaws. To understand vulnerabilities in GEs with limited documentation, the security report provided by the Artifact Hub was necessary to analyze potential vulnerabilities. This theoretical analysis contributes to understanding, proposing recommendations for platform improvement, and recognizing potential vulnerabilities, enhancing the available knowledge about the security GEs of the platform.