Defending DDoS in the Insecure Internet of Things: A Survey

Malik, Manisha; Kamaldeep,; Dutta, Maitreyee

doi:10.1007/978-981-10-7868-2_22

Cited by 7 publications

(4 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Integrating blockchain with IoT technology can provide an effective solution for securityand privacy-related issues and the challenges of IoT gadgets. Many researchers [3,8,15,20,28,34,37,39,43] also address the collaboration of these technologies and provide a robust solution. Table 2 presents some work done by researchers in recent years to address IoT security threats and attacks.…”

Section: Intrusion Detection System 03 2020mentioning

confidence: 99%

A Review of Security and Privacy Concerns in the Internet of Things (IoT)

et al. 2022

View full text Add to dashboard Cite

The recent two decades have witnessed tremendous growth in Internet of things (IoT) applications. There are more than 50 billion devices connected globally. IoT applications’ connectivity with the Internet persistently victimized them with a divergent range of traditional threats, including viruses, worms, malware, spyware, Trojans, malicious code injections, and backdoor attacks. Traditional threats provide essential services such as authentication, authorization, and accountability. Authentication and authorization are the process of verifying that a subject is bound to an object. Traditional authentication and authorization mechanisms use three different factors to identity a subject to verify if the subject has the right capability to access the object. Further, it is defined that a computer virus is a type of malware. Malware includes computer viruses, worms, Trojan horses, spyware, and ransomware. There is a high probability that IoT systems can get infected with a more sophisticated form of malware and high-frequency electromagnetic waves. Purpose oriented with distinct nature IoT devices is developed to work in a constrained environment. So there is a dire need to address these security issues because relying on existing traditional techniques is not good. Manufacturers and researchers must think about resolving these security and privacy issues. Most importantly, this study identifies the knowledge and research gap in this area. The primary objective of this systematic literature review is to discuss the divergent types of threats that target IoT systems. Most importantly, the goal is to understand the mode of action of these threats and develop the recovery mechanism to cover the damage. In this study, more than 170 research articles are systematically studied to understand security and privacy issues. Further, security threats and attacks are categorized on a single platform and provide an analysis to explain how and to what extent they damage the targeted IoT systems. This review paper encapsulates IoT security threats and categorizes and analyses them by implementing a comparative study. Moreover, the research work concludes to expand advanced technologies, e.g., blockchain, machine learning, and artificial intelligence, to guarantee security, privacy, and IoT systems.

show abstract

Section: Intrusion Detection System 03 2020mentioning

confidence: 99%

A Review of Security and Privacy Concerns in the Internet of Things (IoT)

et al. 2022

View full text Add to dashboard Cite

show abstract

“…DDoS is one of the types of attack that has been a significant challenge in the IoT environment. It comes in different types: flooding attacks (e.g., UDP flood or HTTP flood), amplification and IP spoofing, selective forwarding, hello floods, overloading, sinkholes, wormhole attacks, packet fragmentation attacks, exhaustive attacks and jamming attacks [89]. Figure 9 explains the DDoS attack mechanism.…”

Section: Denial Of Service (Dos/ddos) Attacksmentioning

confidence: 99%

Internet of Things Botnet Detection Approaches: Analysis and Recommendations for Future Research

et al. 2021

View full text Add to dashboard Cite

Internet of Things (IoT) is promising technology that brings tremendous benefits if used optimally. At the same time, it has resulted in an increase in cybersecurity risks due to the lack of security for IoT devices. IoT botnets, for instance, have become a critical threat; however, systematic and comprehensive studies analyzing the importance of botnet detection methods are limited in the IoT environment. Thus, this study aimed to identify, assess and provide a thoroughly review of experimental works on the research relevant to the detection of IoT botnets. To accomplish this goal, a systematic literature review (SLR), an effective method, was applied for gathering and critically reviewing research papers. This work employed three research questions on the detection methods used to detect IoT botnets, the botnet phases and the different malicious activity scenarios. The authors analyzed the nominated research and the key methods related to them. The detection methods have been classified based on the techniques used, and the authors investigated the botnet phases during which detection is accomplished. This research procedure was used to create a source of foundational knowledge of IoT botnet detection methods. As a result of this study, the authors analyzed the current research gaps and suggest future research directions.

show abstract

“…IEEE 802.15.4 suffers from MAC layer attacks like collision attacks and back-off manipulation attack and also from physical layer attacks like power analysis attacks, jamming and exhaustion attacks. Jamming and exhaustion attacks are types of Denial-of-Service (DoS) attack which easily target IoT devices since they are resource constrained [15].…”

Section: A Paper Outlinementioning

confidence: 99%

“…For example, in the transport layer, the attacker can send superfluous connection requests to the victim node. A detailed classification of DDoS attacks in IoT is given in [15]. In such attacks, attackers gain control of the system by exploiting a number of software flaws.…”

Section: ) On the Basis Of Validation Strategymentioning

confidence: 99%

Towards a Secure Internet of Things: A Comprehensive Study of Second Line Defense Mechanisms

2020

Self Cite

View full text Add to dashboard Cite

The Internet of Things (IoT) exemplifies a large network of sensing and actuating devices that have penetrated into the physical world enabling new applications like smart homes, intelligent transportation, smart healthcare and smart cities. Through IoT, these applications have consolidated in the modern world to generate, share, aggregate and analyze large amount of security-critical and privacy sensitive data. As this consolidation gets stronger, the need for security in IoT increases. With first line of defense strategies like cryptography being unsuited due to the resource constrained nature, second line of defense mechanisms are crucial to ensure security in IoT networks. This paper presents a comprehensive study of existing second line of defense mechanisms for standardized protocols in IoT networks. The paper analyzes existing mechanisms in three aspects: Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS) and Intrusion Response Systems (IRS). We begin by providing an overview of standardized protocol stack, its layers and defensive security systems in IoT. From there, we build our narrative by presenting an extended taxonomy of IDS, IPS and IRS classifying them on their techniques, deployment, attacks, datasets, evaluation metrics and data pre-processing methods. We then thoroughly review, compare and analyze the research proposals in this context, considering the unique characteristics involved in these systems. Based on the extensive analysis of the existing defensive security systems, the paper also identifies open research challenges and directions for effective design of such systems for IoT networks, which could guide future research in the area.

show abstract

Defending DDoS in the Insecure Internet of Things: A Survey

Cited by 7 publications

References 22 publications

A Review of Security and Privacy Concerns in the Internet of Things (IoT)

A Review of Security and Privacy Concerns in the Internet of Things (IoT)

Internet of Things Botnet Detection Approaches: Analysis and Recommendations for Future Research

Towards a Secure Internet of Things: A Comprehensive Study of Second Line Defense Mechanisms

Contact Info

Product

Resources

About