Assessing risks and threats with layered approach to Internet of Things security

Abstract

Internet of Things is the next-generation Internet network created by intelligent objects with software and sensors, employed in a wide range of fields such as automotive, construction, health, textile, education and transportation. With the advent of Industry 4.0, Internet of Things has been started to be used and it has led to the emergence of innovative business models. The processing and production capabilities of Internet of Things objects in hidden and critical data provide great advantages for the next generation of Internet. However, the integrated features of Internet of Things objects cause vulnerabilities in terms of security, making them the target of cyber threats. In this study, a security model which offers an integrated risk-based Internet of Things security approach for the Internet of Things vulnerabilities while providing detailed information about Internet of Things and the types of attacks targeting Internet of Things is proposed. In addition, in this study, the vulnerabilities of Internet of Things were explained by classifying attack types threatening the physical layer, network layer, data processing layer and application layer. Moreover, the risk-based security model has been proposed by examining the vulnerabilities and threats of smart objects that generate the Internet of Things. The proposed Internet of Things model is a holistic security model that separately evaluates the Internet of Things layers against vulnerabilities and threats based on the risk-level approach.

A Comprehensive Study of the IoT Cybersecurity in Smart Cities

“…Table 5 shows specific attacks on technologies used with IoT solutions. Building on this, Aydos et al [85] propose a classification of the attacks according to the layers defined in the IoT architecture. Burhan et al [86] mention that security is a critical issue in IoT applications and describe some security mechanisms that can be used in the technologies that enable IoT, as shown in Table 6.…”

“…al. [85] propose a risk-based layered security approach based on the following four stages: (i) securing the layers; (ii) understanding and evaluating layered threats; (iii) measuring the likelihood of layered threats; and (iv) determining the layered risk by combining the probability and impact of the layered threat.…”

Smart Home Monitoring System Using ESP32 Microcontrollers

“…Smart Home Monitoring System Using ESP32 Microcontrollers DOI: http://dx.doi.org /10.5772/intechopen.94589 Article [17] describes the design of a Smart home IoT system and notes the trade-off between scalability, security and data collection efficiency for the Internet-of-Things sensor networks. The article [18] discusses security risks in detail and states that IoT systems carry risks in terms of security and privacy. Without eliminating these risks, the IoT requirements are not adequately fulfilled.…”

Current Research Trends in IoT Security: A Systematic Mapping Study

“…Topic 5 is related to risk assessment and prioritization of IoT security threats. For a secure IoT environment, various Mobile Information Systems studies have prioritized security threats by applying approaches such as product-development life cycle, decisionmaking trial-and-evaluation laboratory, analytic network processing, and graph theory to develop risk assessment and management frameworks [200][201][202][203][204][205][206][207].…”