A Survey on Internet-of-Things Security: Threats and Emerging Countermeasures

Swessi, Dorsaf; Idoudi, Hanen

doi:10.1007/s11277-021-09420-0

Cited by 57 publications

(21 citation statements)

References 93 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Together with the challenges confronted by the Internet, IoT faces substantial challenges (including scalability, mobility, and resource limitations) due to a mas-sive number of interconnected devices, and heterogeneity of exchanged data [37]. Researchers and practitioners have delved into various OSI layers to scrutinize security concerns within the IoT software development process, a crucial aspect of the DevSecOps pipeline.…”

Section: Related Workmentioning

confidence: 99%

IoTvulCode - AI-enabled vulnerability detection in software products designed for IoT applications

Bhandari,

Assres,

Gavric

et al. 2023

Preprint

View full text Add to dashboard Cite

The proliferation of the Internet of Things (IoT) paradigm has ushered in a new era of connectivity and convenience. Consequently, rapid IoT expansion has introduced unprecedented security challenges, among which source code vulnerabilities present a significant risk. Recently, machine learning (ML) has been increasingly used to detect source code vulnerabilities. However, there has been a lack of attention to IoT-specific frameworks, in terms of both tools and datasets. In this paper, we address potential source code vulnerabilities in some of the most commonly used IoT frameworks. Hence, we introduce IoTvulCode - a novel framework consisting of a dataset-generating tool, and ML-enabled methods for the detection of source code vulnerabilities and weaknesses as well as the initial release of an IoT vulnerability dataset. Our framework contributes to improving the existing coding practices, leading to a more secure IoT infrastructure. Additionally, IoTvulCode provides a solid basis for the IoT research community to further explore the topic.

show abstract

Section: Related Workmentioning

confidence: 99%

IoTvulCode - AI-enabled vulnerability detection in software products designed for IoT applications

Bhandari,

Assres,

Gavric

et al. 2023

Preprint

View full text Add to dashboard Cite

show abstract

“…We have reviewed and analyzed several papers related to IoT security, especially application layer security [8] [6] [23] [56] [71] [85] [95], etc. However, in all of these papers, there is no thorough framework that guarantees security and/or privacy in IoT for a wide range of use cases.…”

Section: A the Lack Of Comprehensive Security-and/or Privacy-protecti...mentioning

confidence: 99%

“…Due to the fact that these systems are increasingly used in diverse aspects, fundamental questions bring up about the security of such systems. Many investigations have provided proof of security and privacy vulnerabilities such as authentication, authorization, Denial-of-Service (DoS) attacks, and information leakage in IoT-powered systems [7], [8], [9]. Indeed, not only the number of IoT security threats is growing, but also their complexity [10].…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Security in the Internet of Things Application Layer: Requirements, Threats, and Solutions

et al. 2022

View full text Add to dashboard Cite

Communication systems and networks are evolving as an integral part of not only of our everyday life but also as a part of the industry, fundamental infrastructures, companies, etc. Current directions and concepts, such as the Internet of Things (IoT), promise enhanced quality of life, greater business opportunities, cost-effective manufacturing, and efficient operation management through ubiquitous connectivity and deployment of smart physical objects. IoT networks are able to collect, preprocess, and transmit a huge amount of data. A considerable portion of this data is security-and privacycritical data, which makes IoT networks a tempting option for attackers. Given that these networks deal with the actual aspects of our lives and fundamental infrastructures (e.g. smart grids), cybersecurity in such networks is crucial. The large scale of these networks and their unique characteristics and complexity bring further vulnerabilities. In this study we give an introduction to IoT, focusing on the IoT application layer, security requirements, threats, and countermeasures in this layer, and some of the open issues and future research lines.

show abstract

“…As smart applications collect sensitive data, it is important to consider security and privacy issues at different levels of the architecture while designing and implementing these applications [8]. One of these security concerns is securing data transmission between IoT devices by ensuring confidentiality, authentication, and integrity in data routing [9]- [11].…”

Section: Introductionmentioning

confidence: 99%

Replay Attacks in RPL-Based Internet of Things: Survey and Empirical Comparative Study

Albinali,

Azzedin

2023

Preprint

View full text Add to dashboard Cite

RPL was developed as a routing protocol in low-power and lossy network contexts to connect many applications using IP-based communication. However, RPL has been subjected to several attacks, including replay attacks. Replay attacks pose significant challenges as any node can initiate the attack by replaying control messages. These messages play a vital role in establishing and sustaining network topology. However, studies that discourse replay attacks are severely limited. To address this issue, we conducted a comprehensive study on replay attack forms and their impact on RPL networks. Our study includes the latest security countermeasures. According to the literature, most RPL replay attacks rely on replaying DIO messages leading to neighbor, DIO suppression, or copycat attacks. DAO messages are also utilized to launch a replay attack. Nevertheless, the literature lacks any study that analyzes DAO replay attacks. To the best of our knowledge, this is the first study that evaluates DAO replay attacks and includes the route table falsification attack.We conduct a comparative study of these attacks and empirically investigate their impact on networks through extensive evaluation experiments. Our findings verify the harm of replay attacks in terms of packet delivery and latency. The average local delivery ratio dropped to less than 60% under DIO suppression and copycat attacks, and the communication latency increased by 50% under neighbor attacks. These results confirm the threat of replay attacks on RPL networks and the need to design countermeasures to mitigate them.

show abstract

A Survey on Internet-of-Things Security: Threats and Emerging Countermeasures

Cited by 57 publications

References 93 publications

IoTvulCode - AI-enabled vulnerability detection in software products designed for IoT applications

IoTvulCode - AI-enabled vulnerability detection in software products designed for IoT applications

Security in the Internet of Things Application Layer: Requirements, Threats, and Solutions

Replay Attacks in RPL-Based Internet of Things: Survey and Empirical Comparative Study

Contact Info

Product

Resources

About