METHODS FOR FAULT-TOLERANT AND CYBER-RESILIENT CLOUD-ORIENTED IoT PLATFORMS UNDER EMBEDDED DEVICE CONSTRAINTS

Volodymyr Voitovych, Roman Lys

Abstract


Background. Cloud-oriented Internet of Things (IoT) platforms integrate embedded sensing/actuation devices, edge nodes, and cloud services. Within these distributed cyber-physical architectures, cyber-attacks and operational faults frequently co-propagate, critically degrading availability, data integrity, and physical safety. Achieving fault tolerance and cyber resilience under severe embedded constraints remains a fundamental scientific challenge.

Materials and Methods. This review targets device–edge–cloud deployments constrained by limited energy, computational capacity, memory, and intermittent connectivity. It consolidates systems engineering guidance from ISO/IEC 30141, NIST SP 800-160, ETSI EN 303 645, NISTIR 8259A, and secure update frameworks (e.g., SUIT and TUF). We construct a joint taxonomy of attacks and failures, systematize resilience patterns for identity, observability, and recovery, and integrate current research on sensor degradation monitoring. The theoretical framework introduces formal mathematical metrics for resilience loss, Markovian state transitions, and dynamic evidence budgeting.

Results. The review synthesizes a generalized cyber-resilience model in which fault tolerance and cybersecurity are treated as a single adaptive observe-detect-decide-recover loop. The model is derived from the reviewed literature and combines hierarchical instrumentation, provenance-aware lifecycle control, evidence budgeting, risk-adaptive attestation, and latency-aware edge orchestration. Key gaps identified include the lack of unified metrics linking cybersecurity and dependability properties, fleet-scale attestation challenges, and resource-aware detection on constrained microcontroller endpoints.

Conclusion. Fault-tolerant cyber-resilience should be considered as an adaptive observe-detect-decide-recover control loop optimized for embedded resource bounds. The review summarizes a literature-based analytical model that can serve as a basis for future experimental validation of risk-adaptive remote attestation and locality-aware orchestration in constrained IoT environments.

Keywords: cyber resilience, fault tolerance, cloud-oriented IoT, edge computing, secure updates, self-healing.


Full Text:

PDF

References


[1] Roman, R., Lopez, J., & Mambo, M. (2018). Mobile edge computing, fog computing and IoT security: A survey and analysis. Future Generation Computer Systems, 78, 680–698. https://doi.org/10.1016/j.future.2016.11.009

[2] Gkonis, P., Giannopoulos, A., Trakadas, P., et al. (2023). A Survey on IoT-Edge-Cloud Continuum Systems: Status, Challenges, Use Cases and Open Issues. Future Internet, 15(12), 383. https://doi.org/10.3390/fi15120383

[3] ISO/IEC. (2024). ISO/IEC 30141:2024 Internet of Things (IoT) – Reference Architecture. https://cdn.standards.iteh.ai/samples/88800/e545dddaf5474251a0fb9af0e2109b9e/ISO-IEC-30141-2024.pdf

[4] ETSI. (2024). ETSI EN 303 645 V3.1.3: Cyber Security for Consumer Internet of Things: Baseline Requirements. https://www.etsi.org/deliver/etsi_en/303600_303699/303645/03.01.03_60/en_303645v030103p.pdf

[5] Ross, R. S., McEvilley, M., & Oren, J. C. (2018). Systems security engineering: Considerations for a multidisciplinary approach in the engineering of trustworthy secure systems [including updates as of 1-03-2018].
https://doi.org/10.6028/NIST.SP.800-160v1

[6] Kuang, B., Fu, A., Susilo, W., Yu, S., & Gao, Y. (2022). A survey of remote attestation in Internet of Things: Attacks, countermeasures, and prospects. Computers & Security, 112, 102498. https://doi.org/10.1016/j.cose.2021.102498

[7] Lezzi, M., Corallo, A., Lazol, M, Nimis, A. (2025). Measuring cyber resilience in industrial IoT: a systematic literature review. Management Review Quarterly. https://doi.org/10.1007/s11301-025-00495-8

[8] Epiphaniou, G., Hammoudeh, M., Yuan, G., et al. (2023). Digital twins in cyber effects modelling of IoT/CPS points of low resilience. Simulation Modelling Practice and Theory, 125, 102744. https://doi.org/10.1016/j.simpat.2023.102744

[9] Kim, S.-H., & Kim, T. (2023). Local Scheduling in KubeEdge-Based Edge Computing Environment. Sensors, 23(3), 1522. https://doi.org/10.3390/s23031522

[10] National Institute of Standards and Technology. (2022). Secure Software Development Framework (SSDF) Version 1.1 (NIST SP 800-218). https://doi.org/10.6028/NIST.SP.800-218

[11] Nocera, S., et al. (2025). On the adoption of software bill of materials in open-source software projects. Journal of Systems and Software, 230, 112540. https://doi.org/10.1016/j.jss.2025.112540

[12] Catuogno, L., & Galdi, C. (2023). Secure Firmware Update: Challenges and Solutions. Cryptography, 7(2), 30. https://doi.org/10.3390/cryptography7020030

[13] Samuel, J., Mathewson, N., Cappos, J., & Dingledine, R. (2010). Survivable key compromise in software update systems. Proceedings of the 17th ACM Conference on Computer and Communications Security, 61–72. https://doi.org/10.1145/1866307.1866315

[14] Moran, B., Tschofenig, H., Brown, D., & Meriac, M. (2021). A Firmware Update Architecture for Internet of Things (RFC 9019). Internet Engineering Task Force. https://doi.org/10.17487/RFC9019

[15] IEEE-ISTO. (2022). IEEE-ISTO 6100.1.0.0 Uptane Standard for Design and Implementation of Secure Update Systems. https://uptane.org/papers/ieee-isto-6100.1.0.0.uptane-standard.pdf

[16] Stalnaker, T., Wintersgill, N., Chaparro, O., Di Penta, M., German, D. M., & Poshyvanyk, D. (2024). BOMs Away! Inside the Minds of Stakeholders: A Comprehensive Study of Bills of Materials for Software Systems. Proceedings of the 46th ACM/IEEE International Conference on Software Engineering, 1–13. https://doi.org/10.1145/3597503.3623347




DOI: http://dx.doi.org/10.30970/eli.35.12

Refbacks

  • There are currently no refbacks.