A Survey of IoT Security Based on a Layered Architecture of Sensing and Data Analysis

Abstract

<jats:p>The Internet of Things (IoT) is leading today’s digital transformation. Relying on a combination of technologies, protocols, and devices such as wireless sensors and newly developed wearable and implanted sensors, IoT is changing every aspect of daily life, especially recent applications in digital healthcare. IoT incorporates various kinds of hardware, communication protocols, and services. This IoT diversity can be viewed as a double-edged sword that provides comfort to users but can lead also to a large number of security threats and attacks. In this survey paper, a new compacted and optimized architecture for IoT is proposed based on five layers. Likewise, we propose a new classification of security threats and attacks based on new IoT architecture. The IoT architecture involves a physical perception layer, a network and protocol layer, a transport layer, an application layer, and a data and cloud services layer. First, the physical sensing layer incorporates the basic hardware used by IoT. Second, we highlight the various network and protocol technologies employed by IoT, and review the security threats and solutions. Transport protocols are exhibited and the security threats against them are discussed while providing common solutions. Then, the application layer involves application protocols and lightweight encryption algorithms for IoT. Finally, in the data and cloud services layer, the main important security features of IoT cloud platforms are addressed, involving confidentiality, integrity, authorization, authentication, and encryption protocols. The paper is concluded by presenting the open research issues and future directions towards securing IoT, including the lack of standardized lightweight encryption algorithms, the use of machine-learning algorithms to enhance security and the related challenges, the use of Blockchain to address security challenges in IoT, and the implications of IoT deployment in 5G and beyond.</jats:p>

Resistance of IoT Sensors against DDoS Attack in Smart Home Environment

“…In addition, even a valid client that checked for port congestion during a SYN flood attack was able to establish a connection with that port. Given that SYN flood attack is one of the simplest and most common attacks seen on the Internet there are a number of defense mechanisms against it, e.g., SYN cookies [ 42 ]. Therefore, it can be expected that certain protection mechanisms are already implemented in IoT devices and so the devices are resistant to SYN flood attack.…”

A Heterogeneous Layer-Based Trustworthiness Model for Long Backhaul NVIS Challenging Networks and an IoT Telemetry Service for Antarctica

“…In addition, the authors of [ 36 ] presented a data intrusion detection system to trigger false data from malicious attacks; Network Trustworthiness: It can be defined as the probability that a packet will reach its destination unaltered despite the adversities (e.g., link failure, link saturation, malicious attacks), and it is a crucial factor of low-power and lossy networks (LLNs) [ 37 ]. Improving network trustworthiness and performance is a challenge that has been addressed from different perspectives such as transmission coding [ 38 , 39 , 40 , 41 ], load balancing and redundancy protocols [ 42 ], transport protocols [ 43 ], dynamic routing and topology control protocols [ 44 , 45 ], cybersecurity mechanisms [ 46 ], and delay tolerant network (DTN) architectures and protocols [ 47 ]. In the case of routing, both proactive routing protocols (e.g., the IPv6 Routing Protocol for low-power and lossy networks (RPL) and optimized link state routing (OLSR)) and reactive routing protocols (e.g., ad hoc on-demand distance vector (AODV) and link-quality source routing (LQSR)) have been proposed in the literature to solve the drawbacks of LLNs and MANETs [ 44 , 45 ]; Social Trustworthiness: This trend has gained more attention since the irruption of the Social Internet of Things (SIoT) concept [ 48 , 49 ].…”

Security challenges of Internet of Underwater Things: A systematic literature review

“…18 Although UIoT is a related concept to the IoUT (Internet of Underwater Things); it focuses on the combination of powerful and advanced technology geared towards achieving the smart ocean. 18 Another recent survey on IoT security by Mrabet et al 19 provides an insight on the protocols, hardware and networking of IoT and their security threats and solutions. However, this article does not cover the unique challenges of IoUT in specific.…”