Security Issues In Internet Of Things Research Articles

Validating the Adoption of Heterogeneous Internet of Things with Blockchain

Emerging technologies such as Internet of Things (IoT) and blockchain have affected the digital transformation. Blockchain, on the one hand, was initially developed for the purpose of financial trading due to its robustness especially for fault tolerance and cryptographic security in addition to its decentralized architecture. IoT, on the other hand, is an open interconnected network of smart devices able to communicate simultaneously. This arises a challenge in privacy and security, specifically for the data being exchanged. To overcome this, studies have focused on the blockchain to resolve the security and privacy issues of IoT. Indeed, limited studies have proposed to assess blockchain’s viability for IoT and the associated challenges. In this paper, a conceptual model has proposed to identify the crucial factors affecting the adoption of blockchain in IoT. The model consists of four dimensions of factors that we assume will affect the adoption of the two technologies. The dimensions are: attitude-related factors, social influence related factors, data-related factors, and security-related factors. This model is validated through a survey that was distributed between professionals in blockchain and IoT. The findings show a significant impact of data-related factors on the adoption of blockchain in IoT and the intention to use them. The model can play an important role in the development of strategies, standards, and performance assessment.

Fuzzy logic and Fog based Secure Architecture for Internet of Things (FLFSIoT)

Motivated by the recent explosion of interest around the Internet of Things (IoT), this paper is focused on the dynamics of its security. It is a fact that at present, there is a dearth of consolidated and methodical visions for assuring the security of IoT. This owes to its unique characteristics like interdependence of IoT devices and services, device heterogeneity, mobility, affinity to owners, pervasiveness, and unattended nature. The constraints of energy, memory, bandwidth and computability further complicate this picture. The strategies available in the literature today do not entirely consider this intricate nature of IoT environments. Moreover, uncertainty is not adequately acknowledged by the researchers while designing the security procedures for IoT, even though most of the IoT related security problems stem from an uncertain environment. This paper focuses on addressing this uncertainty, along with the other major security issues of IoT. It gives detailed categorization of the attacks in IoT. To this end, a Fuzzy Logic and Fog based Secure Architecture for IoT (FLFSIoT) has been proposed in this paper that works in real-time. In FLFSIoT, fuzzy logic has been used to alleviate the uncertainty of belonging to one crisp cluster of an edge node and for detecting various classical attacks. The Fog supported IoT architecture has been used to make FLFSIoT intrinsically more secure in comparison to the cloud-supported IoT by omitting the latency and other issues. As such, this work feeds the benefits of fuzzy log and fog computing into the carving of a generic solution to the IoT’s security problem. The efficiency of FLFSIoT has been evaluated against the Distributed Denial of Service (DDoS) and Collusion attacks, and it has been observed that it gives more accurate results than the existing benchmarks.

A Comprehensive and Systematic Survey on the Internet of Things: Security and Privacy Challenges, Security Frameworks, Enabling Technologies, Threats, Vulnerabilities and Countermeasures

The Internet of Things (IoT) has experienced constant growth in the number of devices deployed and the range of applications in which such devices are used. They vary widely in size, computational power, capacity storage, and energy. The explosive growth and integration of IoT in different domains and areas of our daily lives has created an Internet of Vulnerabilities (IoV). In the rush to build and implement IoT devices, security and privacy have not been adequately addressed. IoT devices, many of which are highly constrained, are vulnerable to cyber attacks, which threaten the security and privacy of users and systems. This survey provides a comprehensive overview of IoT in regard to areas of application, security architecture frameworks, recent security and privacy issues in IoT, as well as a review of recent similar studies on IoT security and privacy. In addition, the paper presents a comprehensive taxonomy of attacks on IoT based on the three-layer architecture model; perception, network, and application layers, as well as a suggestion of the impact of these attacks on CIA objectives in representative devices, are presented. Moreover, the study proposes mitigations and countermeasures, taking a multi-faceted approach rather than a per layer approach. Open research areas are also covered to provide researchers with the most recent research urgent questions in regard to securing IoT ecosystem.

Enhancing IoT Security for Smart Energy Meter using Blockchain

Internet of Things (IoT) is growing rapidly in recent days and increasing of IoT devices day by day producing vast amount of data, to store this data security is a major challenge in IoT. To avoid these security challenges, blockchain is the perfect solution. With its security by design, immutable nature, transparent nature and encryption methodology blockchain will solve architectural issues of IoT. In these days, the energy meters in our homes are not able send the information to the cloud and man power also needed to update readings every month, and manually errors also taken place some times to avoid these, in the paper a smart energy meter is proposed, that will measure the power consumption and that readings will be stored in to the blockchain to secure the data from the fraudsters and also to make the payment without any third parties like banks, in the blockchain technology amount can be transferred from one to one without any third parties using crypto currencies like bitcoin, ether.., etc. The user will be able to check the bills in the blockchain and do the payments. By using the blockchain technology the user data will be more secure and the IoT security issues also solvable.

Security and Privacy Issues in IoT Environment

Internet of Things (IoT) is becoming an emerging trend superseding other technologies and researchers considered it as the future of internet. As now the connectivity to the World Wide Web is becoming highly available cost is drastically decreasing so everyone can afford the technology. As Internet of Things provides a great opportunity to develop an important industrial systems and applications with the help of various kind of sensors that can sense out the environment using number of devices that is connected to the internet, usage of IoT is drastically increasing and becoming a common thing. With this sky-rocketed usage and the demand, Communication and storing of the information faces serious security issues as the security of IoT devices become just an afterthought when manufacturing most of the devices. This study tries to summarize this IoT security issues in terms of primary information security concepts confidentiality, integrity and availability with regards to its architecture.

Realizing an Internet of Secure Things: A Survey on Issues and Enabling Technologies

Since the term first coined in 1999, the Internet of Things (IoT) has gained significant momentum in connecting physical objects to the Internet and facilitating machine-to-human and machine-to-machine communications. By offering the capability to connect and integrate both digital and physical entities, IoT becomes an important paradigm that enables a whole new class of applications and services. Security is one of the most challenging issues that need to be addressed before these IoT applications and services can be fully embraced. In this survey, we investigate the major research efforts over the period of 2013–2019 that address IoT security and privacy issues. We provide extensive discussions on securing cloud-based IoT solutions. The main focus of these discussions is on securing the information in transit between IoT devices and IoT applications, where most of the data processing and modelling tasks take place. These discussions include all security aspects and challenges facing the data in transit. Specifically, a number of common attacks that target IoT solutions are first discussed, while presenting the main challenges of IoT security (e.g., the resource limitation of IoT devices, which hinder the ability of such devices to do expensive computations for securing the data). Then we present the main security requirements needed by IoT systems, which include access control, integrity, and authentication. We review recent research work in providing security and privacy services, which delegate the expensive computations to an edge or cloud, to cope with the low computations restrictions in IoT devices. Open research issues and possible research directions in securing cloud-based IoT systems are discussed, while proposing some possible solutions.

ЗАХИЩЕНА СИСТЕМА РОЗУМНОГО БУДИНКУ З ВИКОРИСТАННЯМ INTERNET OF THINGS

Urgency of the research. Today, the Internet of Things (IoT) is firmly entrenched in the lives of billions of people around the world. IoT is used in many areas of human activity - industry, everyday life, medicine, education, urban management and others. However, the increase in the number of connected devices leads to an increase in safety risks - from causing physical harm to humans with these devices to damage to complex technological equipment. That is why the issues of ensuring the protection of IoT systems are relevant. Target setting. Comprehensive protection of IoT systems is possible only with reliable network, software and technical protection of devices, equipment and communications of which these systems consist. Given that the above objects and methods of their protection can be combined into a separate secure system of a smart home, its development is an important theoretical and practical task of cybersecurity. Actual scientific researches and issues analysis. Today, there are many publications that analyze IoT security issues and suggest ways to solve them, but there is no work that would develop a separate model of IoT protection on the example of a smart home. Uninvestigated parts of general matters defining. Analyzing the multilevel architecture of IoT systems and features of cloud platforms of the Internet of Things, highlighting potentially vulnerable components of these complex solutions (access control system to IoT device and cloud platform; clouds, mobile applications and web interfaces of devices; software updates; device memory ; local data warehouses; hardware and software interfaces of devices; network services of devices; ecosystem of communications, including network traffic) it can be argued that building a secure system of a smart home using IoT will increase the level of security of these systems. . The research objective of this article is to build a secure system using IoT on the example of a smart home. The statement of basic materials. The basic concepts of IoT are defined, the main spheres of IoT use are investigated, the secure system of smart house with use of IoT in which the basic ways of protection of the information which is expedient to implement in networks of smart house - VPN, firewall, ACL and passwords for reliable protection is developed. The main IoT vulnerabilities and ways to eliminate them are analyzed. Different architectures of IoT systems are considered. An algorithm for setting up a secure smart home system using IoT is proposed Conclusions. The work developed a secure system using the Internet of Things on the example of a smart home. The advantages and disadvantages of using the Internet of Things are identified. It has been studied that the popularity of the Internet of Things is growing every second, so it is necessary to pay more attention to their protection. The main vulnerabilities of IoT can be considered the lack of standardization, traffic encryption, default passwords. The scheme of a secure system of a smart home using the Internet of Things built in Cisco Packet Tracer and a step-by-step algorithm for debugging its protection system using the ASA5505 firewall to filter incoming traffic were proposed. Strong passwords have been created for IoT device accounts. WPA2 / 3-PSK wireless protocols using the AES algorithm ensure the security of wireless data transmission. The home controller has a unique SSID. The created system can be implemented and safely used in homes and offices.

Extended RECTANGLE Algorithm Using 3D Bit Rotation to Propose a New Lightweight Block Cipher for IoT

The Internet of Things (IoT) is a broad range of applications enabled by the connection of devices such as sensors, actuators, and monitors accessible through the Internet. Massive IoT device connectivity and vast data transmission have made the information susceptible to various types of attacks. Therefore, encryption is required for secure communication in an IoT ecosystem. An IoT system is constrained by its complexities that require small computing power. Thus, lightweight block cipher is chosen as the solution to IoT security issues. RECTANGLE block cipher has very efficient encryption speed performance among the existing lightweight algorithms. Although RECTANGLE achieves such high efficiency, lack of focus on its security aspect needs to be addressed. The algorithm is short of confusion and diffusion characteristics that should be offered by a block cipher as one of the cryptographic security properties. Therefore, we extended RECTANGLE using a 3D cipher to improve its security features by enhancing the algorithm confusion and diffusion properties. Security analysis and performance tests were performed to verify the strength of the proposed 3D RECTANGLE. The results show that 3D RECTANGLE performs better than its original version in terms of the correlation between data input and output with an increase of 1.58% for non-linearity results, records approximately 50% bit error rate for sensitiveness against both modifications of plaintext and key, increase of passing rate in the randomness test by 22.22%, and achieves competitive performance results against existing algorithms with 0.9516 ms execution speed and 67.26 bit/ms throughput.

A survey on internet of things security: Requirements, challenges, and solutions

Internet of Things (IoT) is one of the most promising technologies that aims to enhance humans’ quality of life (QoL). IoT plays a significant role in several fields such as healthcare, automotive industries, agriculture, education, and many cross-cutting business applications. Addressing and analyzing IoT security issues is crucial because the working mechanisms of IoT applications vary due to the heterogeneity nature of IoT environments. Therefore, discussing the IoT security concerns in addition to available and potential solutions would assist developers and enterprises to find appropriate and timely solutions to tackle specific threats, providing the best possible IoT-based services. This paper provides a comprehensive study on IoT security issues, limitations, requirements, and current and potential solutions. The paper builds upon a taxonomy that taps into the three-layer IoT architecture as a reference to identify security properties and requirements for each layer. The main contribution of this survey is classifying the potential IoT security threat and challenges by an architectural view. From there, IoT security challenges and solutions are further grouped by the layered architecture for readers to get a better understanding on how to address and adopt best practices to avoid the current IoT security threats on each layer.

On the security aspects of Internet of Things: A systematic literature review

Internet of Things (IoT) has gained increasing visibility among emerging technologies and undoubtedly changing our daily life. Its adoption is strengthened by the growth of connected devices (things) as shown in recent statistics. However, as the number of connected things grows, responsibility related to security aspects also needs to increase. For instance, cyberattacks might happen if simple authentication mechanisms are not implemented on IoT applications, or if access control mechanisms are weakly defined. Considering the relevance of the subject, we performed a systematic literature review (SLR) to identify and synthesize security issues in IoT discussed in scientific papers published within a period of 8 years. Our literature review focused on four main security aspects, namely authentication, access control, data protection, and trust. We believe that a study considering these topics has the potential to reveal important opportunities and trends related to IoT security. In particular, we aim to identify open issues and technological trends that might guide future studies in this field, thus providing useful material both to researchers and to managers and developers of IoT systems. In this paper, we describe the protocol adopted to perform the SLR and present the state-of-the-art on the field by describing the main techniques reported in the retrieved studies. To the best of our knowledge, ours is the first study to compile information on a comprehensive set of security aspects in IoT. Moreover, we discuss the placement, in terms of architectural tiers, for deploying security techniques, in an attempt to provide guidelines to help design decisions of security solution developers. We summarize our results showing security trends and research gaps that can be explored in future studies.

Program Analysis of Commodity IoT Applications for Security and Privacy

Recent advances in Internet of Things (IoT) have enabled myriad domains such as smart homes, personal monitoring devices, and enhanced manufacturing. IoT is now pervasive—new applications are being used in nearly every conceivable environment, which leads to the adoption of device-based interaction and automation. However, IoT has also raised issues about the security and privacy of these digitally augmented spaces. Program analysis is crucial in identifying those issues, yet the application and scope of program analysis in IoT remains largely unexplored by the technical community. In this article, we study privacy and security issues in IoT that require program-analysis techniques with an emphasis on identified attacks against these systems and defenses implemented so far. Based on a study of five IoT programming platforms, we identify the key insights that result from research efforts in both the program analysis and security communities and relate the efficacy of program-analysis techniques to security and privacy issues. We conclude by studying recent IoT analysis systems and exploring their implementations. Through these explorations, we highlight key challenges and opportunities in calibrating for the environments in which IoT systems will be used.

A Survey on Internet of Things and Cloud Computing for Healthcare

The fast development of the Internet of Things (IoT) technology in recent years has supported connections of numerous smart things along with sensors and established seamless data exchange between them, so it leads to a stringy requirement for data analysis and data storage platform such as cloud computing and fog computing. Healthcare is one of the application domains in IoT that draws enormous interest from industry, the research community, and the public sector. The development of IoT and cloud computing is improving patient safety, staff satisfaction, and operational efficiency in the medical industry. This survey is conducted to analyze the latest IoT components, applications, and market trends of IoT in healthcare, as well as study current development in IoT and cloud computing-based healthcare applications since 2015. We also consider how promising technologies such as cloud computing, ambient assisted living, big data, and wearables are being applied in the healthcare industry and discover various IoT, e-health regulations and policies worldwide to determine how they assist the sustainable development of IoT and cloud computing in the healthcare industry. Moreover, an in-depth review of IoT privacy and security issues, including potential threats, attack types, and security setups from a healthcare viewpoint is conducted. Finally, this paper analyzes previous well-known security models to deal with security risks and provides trends, highlighted opportunities, and challenges for the IoT-based healthcare future development.

PTAS: Privacy-preserving Thin-client Authentication Scheme in blockchain-based PKI

Recent years have witnessed tremendous academic efforts and industry growth in Internet of Things (IoT). Security issues of IoT have become increasingly prominent. Public Key Infrastructure (PKI) can provide authentication service to IoT devices which is a crucial element to the security of IoT. However, the conventional PKIs are organized as a tree-like centralized structure which has demonstrated serious usability and security shortcomings such as the single point of failure. Blockchain has numerous desirable properties, such as decentralized nature, cryptographic technology and unalterable transaction record, these properties make it a potential tool to build a decentralized blockchain-based PKI. Nevertheless, the latest proposals for blockchain-based PKI did not take thin-clients into consideration where thin-clients indicate those users who cannot download the entire blockchain due to the limited storage capacity of their equipment (most IoT devices fall into this category). To settle this problem, we firstly present a Privacy-preserving Thin-client Authentication Scheme (PTAS) employing the idea of private information retrieval (PIR), which enables thin-clients to run normally like full node users and protect their privacy simultaneously. Furthermore, in order to enhance security, we further propose a (m-1)-private PTAS which means thin-client’s information can be protected against a collusion of at most (m-1) full node users. Besides, security analysis and functional comparison are performed to demonstrate high security and comprehensive functionality of our schemes. Finally, extensive experiments are conducted to compare computational overhead and communication overhead of PTAS and (m-1)-private PTAS.

An efficient authentication and key agreement scheme for e-health applications in the context of internet of things

E-health applications are one of the most promising applications in the context of internet of things (IoT). Nevertheless, resource constraints and security issues in IoT are the main barriers for their deployment. Among security issues, authentication and data confidentiality are required to secure e-health applications. In this paper, we propose a new authentication and key agreement scheme for e-health applications in the context of IoT. This scheme allows a sensor node, a gateway node, and a remote user to authenticate each other and secure the collection of health-related data. The proposed scheme is based on lightweight symmetric cryptography since it uses nonces, exclusive-or operations, and simple hash functions. Besides, it takes into consideration the sensors location to provide an efficient authentication. To assess the proposed scheme, we conduct a theoretical and an automated security analysis using AVISPA tool. The results show that our scheme preserves the security properties, and ensures resilience against different types of attacks. In addition, we evaluate and compare both communication and computational costs with some existing authentication schemes. The obtained results prove that it provides authentication with low energy cost.

An efficient authentication and key agreement scheme for e-health applications in the context of Internet of Things

E-health applications are one of the most promising applications in the context of internet of things (IoT). Nevertheless, resource constraints and security issues in IoT are the main barriers for their deployment. Among security issues, authentication and data confidentiality are required to secure e-health applications. In this paper, we propose a new authentication and key agreement scheme for e-health applications in the context of IoT. This scheme allows a sensor node, a gateway node, and a remote user to authenticate each other and secure the collection of health-related data. The proposed scheme is based on lightweight symmetric cryptography since it uses nonces, exclusive-or operations, and simple hash functions. Besides, it takes into consideration the sensors location to provide an efficient authentication. To assess the proposed scheme, we conduct a theoretical and an automated security analysis using AVISPA tool. The results show that our scheme preserves the security properties, and ensures resilience against different types of attacks. In addition, we evaluate and compare both communication and computational costs with some existing authentication schemes. The obtained results prove that it provides authentication with low energy cost.

A Survey: Review of Cloud IoT Security Techniques, Issues and Challenges

The Internet of things (IoT) has become a new buzzword in the emerging field of computation and research as it integrates various objects (things) to exchange data with one another without human intervention. The need for the extensive deployment of the cloud based IoT are rapidly increasing with a major security related threats. This work basically outlines existing security threats and vulnerabilities along with some of the existing security mechanisms by a comprehensive survey of existing works in the area of cloud based IoT security. This paper also outlines a brief taxonomy of the current security threats in cloud based IoT applications, architecture, and communication. In this work, we also presented a comparative analysis of various security mechanisms for IoT environment as well as compared possible security threats in the IoT. And, at the end, we presented open research issues and security implementation challenges in IoT security. This work aims to provide detailed discussion on various security mechanisms proposed as well as a useful manual of existing security threats and vulnerabilities of the cloud based IoT heterogeneous environment and proposes guidelines for improving the cloud based IoT security.

Internet of Things Security Issues and Countermeasures

Internet of Things Security Issues and Countermeasures

Guest Editorial: Privacy, Data Assurance, Security Solutions for Internet of Things (PASS4IoT)

The emerging Internet of Things (IoT) is unleashing the next wave of innovations due to its inherent capability of connecting billions of devices together, which bridges the gap between the physical world and cyber world. In recent years, the successful applications of IoT have demonstrated the massive potential benefits that IoT can make for global social economy. Coming along with the benefits, the IoT is facing an increasingly number of security and privacy challenges, including data encryption, privacy, secure machine-to-machine (M2M) communications, device security, cyber-attack, cloud security in IoT environment, and more. These challenges must be fixed quickly and effectively. To address these challenges, this special issue was proposed to bring recent research progress in theories and applications in privacy, data assurance, security issues in IoT that may help put together a clear picture for the security of IoT.

IoT Elements, Layered Architectures and Security Issues: A Comprehensive Survey.

The use of the Internet is growing in this day and age, so another area has developed to use the Internet, called Internet of Things (IoT). It facilitates the machines and objects to communicate, compute and coordinate with each other. It is an enabler for the intelligence affixed to several essential features of the modern world, such as homes, hospitals, buildings, transports and cities. The security and privacy are some of the critical issues related to the wide application of IoT. Therefore, these issues prevent the wide adoption of the IoT. In this paper, we are presenting an overview about different layered architectures of IoT and attacks regarding security from the perspective of layers. In addition, a review of mechanisms that provide solutions to these issues is presented with their limitations. Furthermore, we have suggested a new secure layered architecture of IoT to overcome these issues.

Security, privacy and trust of different layers in Internet-of-Things (IoTs) framework

Internet of Things (IoT) is playing an important role after its showing up, it covers from traditional equipment to general household objects such as WSNs and RFID. With the great potential of IoT, there come all kinds of challenges. This paper focuses on the security problems among all other challenges. As IoT is built on the basis of the Internet, security problems of the Internet will also show up in IoT. Moreover, as IoT contains three layers: perception layer, transportation layer and application layer, this paper will analyze the security problems of each layer separately and try to find new problems and solutions. This paper also analyzes the cross-layer heterogeneous integration issues and security issues in detail and discusses the security issues of IoT as a whole and tries to find solutions to them. In the end, this paper compares security issues between IoT and traditional network, and discusses opening security issues of IoT.