The DOSS – Secure-By-Design IoT Operation With Supply Chain Control – project aims to improve the security and reliability of IoT operations by introducing an integrated monitoring and validation framework to IoT Supply Chains, including all the relevant stakeholders. DOSS elaborates on a secure-by-design methodology and implements related technology based on formalized data exchange, component testing, and architecture modeling.
DOSS
DESIGN AND OPERATION OF SECURE IoT SUPPLY CHAIN
The Concept
USPs outline
What is this solution offering that’s different?
End-to-end communication
The DOSS “Supply Trust Chain” connects all relevant stakeholders with a formalized communication flow to facilitate monitoring of the movement of IoT devices from manufacturers all the way to decommissioning.
Multi-level security testing
DOSS establishes a comprehensive testing model covering all IoT components, including the binary testing of IoT devices, black-box analysis of 3rd party applications, vulnerability assessment on open-source applications, and internal developments the result of which will provide solid evidence of the existence or absence of vulnerabilities.
Security modeling in digital twin
DOSS will use an AI-assisted, flexibly configurable cybersecurity digital twin to simulate already in the design phase the architecture of selected IoT operations to identify potential attack scenarios, to analyze their impact, and to elaborate the necessary countermeasures.
Security feedback from operation
The DOSS IoT “Supply Trust Chain” also comprises the highly protected IoT operation itself, which is integrated into the communication loop to provide relevant security-related information to other actors of the IoT supply chain.
Latest news
A mix of research updates, insights, and scientific publications
Professor Erol Gelenbe was Invited Panelist at the INFOCOM2025
We are proud to share that on 20 May, 2025, Professor Erol Gelenbe served as an Invited Panelist on the topic "Towards 6G" at the prestigious INFOCOM 2025 Conference, one of the world’s leading forums in computer and telecommunications research. Professor Gelenbe addressed key cybersecurity challenges, including risks in supply…
UK “Call for Views on the Cyber Security of Enterprise Connected Devices”
The UK government is evaluating legislation to enhance cybersecurity for enterprise IoT devices, as it did for consumer devices via its Product Security and Telecommunications Infrastructure (PSTI) Act. This move follows concerns over the vulnerability of industrial and business-critical IoT systems, which are increasingly targeted in cyberattacks. The UK government announced…
ENISA launches European vulnerability database
The European Vulnerability Database (EUVD) launched by ENISA on 13. May 2025 is a major step toward a more coordinated vulnerability management ecosystem in the EU. The DOSS Device Security Passport (DSP) is ready to take part. Built with support for external threat intelligence, the DSP can naturally incorporate EUVD…
