Introduction to IoT Security

Abstract

In a world with “things” and devices interconnected at every level, from wearables to home and building automation, to smart cities and infrastructure, to smart industries, and to smart‐everything, the Internet of Things (IoT) security plays a central role with no margin for error or shortage on supply. Securing, including authentication of these devices, will become everyone's priority, from manufacturers to silicon vendors (or IP developers), to software and application developers, and to the final consumer, the beneficiaries of the security “recipe” that will accompany these IoT products. Together, all consumers of these products need to adapt to the market demands, innovate, and improve processes, grasp new skills and learn new methods, raise awareness and embrace new training and curricula programs. In this article, we provide a thorough survey and classification of the existing vulnerabilities, exploitable attacks, possible countermeasures as well as access control mechanisms including authentication and authorization. These challenges are addressed in detail considering both the technologies and the architecture used. Furthermore, this work also focuses also on IoT intrinsic vulnerabilities as well as the security challenges at every layer. In addition, solutions for remediation of the compromised security, as well as methods for risk mitigation, with prevention and suggestions for improvement are discussed.

Survey on Multi-Access Edge Computing Security and Privacy

“…Confidentiality is the act of preventing unauthorized entities from reading or accessing sensitive materials [48]. This aspect of security obscures information by encrypting the payload with a considerable level of cryptography.…”

Intrusion Detection in Internet of Things Systems: A Review on Design Approaches Leveraging Multi-Access Edge Computing, Machine Learning, and Datasets

“…However, the development of IoT technologies is still in transition and has not fully matured in terms of security protection. The IoT systems have several security challenges [ 16 ], such as non-uniform manufacturing standards and update management problems caused by IoT software developers. Physical handling of the security issues and users’ ignorance due to their lack of awareness of security problems associated with the IoT systems are also critical problems.…”

“…Unfortunately, traditional network security systems are not applicable in IoT systems due to the nature of the resource constraints. Furthermore, different network attacks have also emerged due to the rapid development and wide application of the IoT system applications [ 16 , 37 ]. The amount of attacks will continue to rise as the IoT use cases expands.…”

“…Several surveys have been published in diverse research areas related to IoT security, including security frameworks [ 12 ], security in context of eHealth [ 12 ], privacy issues [ 13 ], state of the art and security challenges [ 14 ], models, techniques, and tools [ 15 ], and attacks [ 16 ]. Some of these papers were published during the early stage of IoT system evolution.…”

Security Considerations for Internet of Things: A Survey

“…In cryptography, the terminology of a weak key refers to the key phrase that is used with a specific cryptographic Ransomware A malware once installed to a system demands a ransom (typically financial) from the owner Denied access to a part or entire system or threatens to publish sensitive information until the ransom is settled [102,135] Man-in-the-middle (MitM) Attempting to access the traversing information of a communication link in between the sender and the receiver Revealing the information and protocol, injecting false/malicious content [31,73] Side-channel attack (SCA) Analyses a physical property of a device via tampering Information, keys, or even a protocol could be revealed [75,154] algorithm or a cipher that is exposed with brute force (exhaustive key search), or guessing. Weak keys usually represent a tiny fraction of the overall keyspace, the set of the whole possible permutations of a key.…”