Security Framework for IoT Devices against Cyber-attacks

Abstract

Internet of Things (IoT) is the interconnection of heterogeneous smart devices through the Internet with diverse application areas. The huge number of smart devices and the complexity of networks has made it impossible to secure the data and communication between devices. Various conventional security controls are insufficient to prevent numerous attacks against these information-rich devices. Along with enhancing existing approaches, a peripheral defence, Intrusion Detection System (IDS), proved efficient in most scenarios. However, conventional IDS approaches are unsuitable to mitigate continuously emerging zero-day attacks. Intelligent mechanisms that can detect unfamiliar intrusions seems a prospective solution. This article explores popular attacks against IoT architecture and its relevant defence mechanisms to identify an appropriate protective measure for different networking practices and attack categories. Besides, a security framework for IoT architecture is provided with a list of security enhancement techniques.

A Survey Study of Common Security Failures and Mitigations for the Internet of Things (IoT)

“…2) Routing Attacks Well established routing attacks [smith] on the network layer have become common due to the fact the routing configurations of network gateways and switches are unencrypted [9]. Malicious attackers may alter these configurations [9], [25] creating looping communications [9]. Routing attacks break the connection between the device layer and other layers within the IoT architecture.…”

Deploying Man-In-the-Middle Attack on IoT Devices Connected to Long Range Wide Area Networks (LoRaWAN)

“…The authors postulate that one of the ways to prevent the attacks is to understand how vulnerable spots on IoT devices are exploited to trace back to the weakest link of the network [10]. Regarding intelligent mechanisms that can detect unfamiliar intrusions and find unusual activities, Tabassum & Lebda, consider the Helium hotspot and its complexities in smart IoT, giving the possibility to attackers to turn devices such as T.V., watches, CCTV cameras, and even smart pet collars into harmful botnets to be attacked [11]. Biswajit reviewed LoRaWAN architecture by exploring the various network features and the different LoRa from wireless technologies in long-range transmissions with low power consumption [8].…”

Quality of Life, Quality of Experience, and Security Perception in Web of Things: An Overview of Research Opportunities

“…Further on, the comprehensive search of IoT security perception resulted in many (nearly one thousand) quality review conference and journal papers as well as book chapters dealing with IoT security and privacy such as Hwang [40], Abomhara et al [41], Sicari et al [42], Sadeghi et al [43], Roman et al [44], Maple [45], Sivaraman et al [46], Giraldo et al [47], Makherjee et al [48], Yang et al [49], Lin et al [50], Stergiou et al [51], Zhou et al [52], Frustaci et al [53], Miorandi et al [54], Hasan et al [55], Mawgoud et al [56], Tabassum et al [57], Ataç et al [58], Silaghi et al [59], Guan et al [60], etc. They provide overviews of current state in this domain and provide open research challenges and issues to be solved by future research, but all that is out of the scope of this paper, i.e., they do not address the impact of security perception on QoE in the IoT environment.…”