IoT Network Security: Requirements, Threats, and Countermeasures

Abstract

IoT devices are increasingly utilized in critical infrastructure, enterprises, and households. There are several sophisticated cyberattacks that have been reported and many networks have proven vulnerable to both active and passive attacks by leaking private information, allowing unauthorized access, and being open to denial of service attacks.This paper aims firstly, to assist network operators to understand the need for an IoT network security solution, and then secondly, to survey IoT network attack vectors, cyber threats, and countermeasures with a focus on improving the robustness of existing security solutions. Our first contribution highlights viewpoints on IoT security from the perspective of stakeholders such as manufacturers, service providers, consumers, and authorities. We discuss the differences between IoT and IT systems, the need for IoT security solutions, and we highlight the key components required for IoT network security system architecture. For our second contribution, we survey the types of IoT attacks by grouping them based on their impact . We discuss various attack techniques, threats, and shortfalls of existing countermeasures with an intention to enable future research into improving IoT network security.

Network Security Problems and Countermeasures of Hospital Information System after Going to the Cloud

“…Based on the analysis of practice, it can be seen that in the past hospital management practice, an important reason for the frequent occurrence of network security problems is that the hospital ignores the importance of network security in the process of using information systems; so, many work arrangements exist. There are omissions in cybersecurity [11][12][13]. Based on this, it is necessary to change cognition and pay attention to network security.…”

Cyber-Security of Industrial Internet of Things in Electric Power Systems

“…In another type of battery draining attack, the hostile node sends only as many queries to the victim node as are required to keep the target node awake and drain its battery. In this attack, however, the energy consumption of the victim device is not increased significantly in order to keep the attack stealthy [64].…”

“…Spoofing occurs when an attacker succeeds to pretend itself as a legitimate source and gains control over a data stream, such as GPS and network time protocol (NTP) [64]. This attack is carried out by disguising the attacker's identity and pretending as a trusted source instead.…”

Towards an Assurance Framework for Edge and IoT Systems

“…• (R2) Distributed: it MUST adopt a distributed architecture based on a hybrid cloud/edge deployment. • (R3) Flexibility: it MUST support parameterized evaluation according to the target system, with flexible scheduling policies (e.g., repeated, one shot) [11]. • (R4) 5G-readiness: it MUST support the interaction with devices over mobile networks, in particular 5G, which is one of the IoT-enabling technologies [12].…”