A survey on security in internet of things with a focus on the impact of emerging technologies

Williams, Phillip; Dutta, Indira Kaylan; Daoud, Hisham; Bayoumi, Magdy

doi:10.1016/j.iot.2022.100564

Cited by 71 publications

(33 citation statements)

References 67 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The techniques were found to be relatively accurate with a high detection rate. However, the advanced blockchain technique was also successfully implemented for smart metering security against classical and quantum attacks; though with limitations of high latency/delay [28,108,109]. All these advanced techniques for securing AMI are open to improvements for future work.…”

Section: Open Issues/future Researchmentioning

confidence: 99%

Privacy and security of advanced metering infrastructure (AMI) data and network: a comprehensive review

Ajiboye,

Agyekum,

Frimpong

2024

J. Eng. Appl. Sci.

View full text Add to dashboard Cite

The traditional electrical grid has to be digitally improved as digitalization and effective integration of renewable energy bring better efficiency, intelligence, and safety into the grid; hence, the transition from the traditional grid to a smart grid. A smart grid is a modernized and digitalized standard electrical infrastructure that has a key component known as the advanced metering infrastructure (AMI). AMI, also known as smart metering, is a key technological enabler of the smart grid that allows automatic collection and reporting of power-consumed data via two-way communication networks. However, the collected power consumption data is confidential; hence, its privacy must be maintained. Similarly, for the benefit of the smart grid to be consistently maximized, the AMI data and network security must always be intact despite the evolving threats and attacks targeted at it.This paper provides a comprehensive review of the existing vulnerabilities/attacks, security and privacy challenges associated with the smart metering data and network system, its open issues, and future direction. The major contributions of this review paper lie in the AMI vulnerabilities, AMI state-of-the-art security schemes with their pros and cons, its communication protocols analysis, and its emerging security measures. This gave enumerated recommendations for the efficiency improvement of AMI security in terms of its latency reduction while implementing efficient security measures in its future work.

show abstract

Section: Open Issues/future Researchmentioning

confidence: 99%

Privacy and security of advanced metering infrastructure (AMI) data and network: a comprehensive review

Ajiboye,

Agyekum,

Frimpong

2024

J. Eng. Appl. Sci.

View full text Add to dashboard Cite

show abstract

“…IoT devices commonly operate under resource constraints, featuring limited processing power, memory capacity, and energy resources. Consequently, they become susceptible to various side‐channel attacks, including power analysis attacks, timing attacks, electromagnetic attacks, fault attacks, cache attacks, side‐channel attacks related to radio frequency (RF) communication and so forth 17–20 Power analysis attacks: These attacks exploit a device's power consumption variations during cryptographic operations.…”

Section: Iot Botnet Attacksmentioning

confidence: 99%

Botnet‐based IoT network traffic analysis using deep learning

Singh,

Hoque,

Singh

et al. 2023

Security and Privacy

View full text Add to dashboard Cite

IoT networks are increasingly being connected to a wide range of devices, and the number of devices connected has significantly increased in recent years. As a consequence, the number of vulnerabilities to IoT networks has also been increasing tremendously. In IoT networks, botnet‐based Distributed Denial of Service attack is challenging due to its dynamic behavior. The sensors and actuators connected to IoT networks are low‐powered and have less memory. Because of their inherent vulnerability, IoT devices can always be compromised by an attacker and be used to form a large botnet. A detailed analysis of IoT botnet attacks is presented in this article, along with statistics and the architectures of the botnet. We also survey the existing literature on IoT botnet traffic analysis and present a taxonomy of attack detection methods. We particularly focus on deep learning‐based methods and conduct a comparative study to evaluate their performance on IoT traffic analysis. We identify the current issues and research challenges in this field, and we conclude by highlighting some future research directions.

show abstract

“…The security of IoT-based smart home consumer devices is an important problem [55][56][57][58][59]. Although our experiments in this work have focused on IKEA products to demonstrate vulnerabilities, the security of other IoT-based smart home devices has been ranked in other works [60].…”

Section: Reflection On the Experimentsmentioning

confidence: 99%

Living in the Dark: MQTT-Based Exploitation of IoT Security Vulnerabilities in ZigBee Networks for Smart Lighting Control

Hussein

Nhlabatsi

2022

IoT

View full text Add to dashboard Cite

The Internet of Things (IoT) has provided substantial enhancements to the communication of sensors, actuators, and their controllers, particularly in the field of home automation. Home automation is experiencing a huge rise in the proliferation of IoT devices such as smart bulbs, smart switches, and control gateways. However, the main challenge for such control systems is how to maximize security under limited resources such as low-processing power, low memory, low data rate, and low-bandwidth IoT networks. In order to address this challenge the adoption of IoT devices in automation has mandated the adoption of secure communication protocols to ensure that compromised key security objectives, such as confidentiality, integrity, and availability are addressed. In light of this, this work evaluates the feasibility of MQTT-based Denial of Service (DoS) attacks, Man-in-the-Middle (MitM), and masquerade attacks on a ZigBee network, an IoT standard used in wireless mesh networks. Performed through MQTT, the attacks extend to compromise neighboring Constrained Application Protocol (CoAP) nodes, a specialized service layer protocol for resource-constrained Internet devices. By demonstrating the attacks on an IKEA TRÅDFRI lighting system, the impact of exploiting ZigBee keys, the basis of ZigBee security, is shown. The reduction of vulnerabilities to prevent attacks is imperative for application developers in this domain. Two Intrusion Detection Systems (IDSs) are proposed to mitigate against the proposed attacks, followed by recommendations for solution providers to improve IoT firmware security. The main motivation and purpose of this work is to demonstrate that conventional attacks are feasible and practical in commercial home automation IoT devices, regardless of the manufacturer. Thus, the contribution to the state-of-the-art is the design of attacks that demonstrate how known vulnerabilities can be exploited in commercial IoT devices for the purpose of motivating manufacturers to produce IoT systems with improved security.

show abstract

A survey on security in internet of things with a focus on the impact of emerging technologies

Cited by 71 publications

References 67 publications

Privacy and security of advanced metering infrastructure (AMI) data and network: a comprehensive review

Privacy and security of advanced metering infrastructure (AMI) data and network: a comprehensive review

Botnet‐based IoT network traffic analysis using deep learning

Living in the Dark: MQTT-Based Exploitation of IoT Security Vulnerabilities in ZigBee Networks for Smart Lighting Control

Contact Info

Product

Resources

About