IoT Security & Privacy

Abstract

The era of the Internet of Things (IoT) has already started and it will profoundly change our way of life. While IoT provides us many valuable benefits, IoT also exposes us to many different types of security threats in our daily life. Before the advent of IoT, most security threats were just related to information leakage and the loss of service. With IoT, security threats have become closely related to our nonvirtual lives and they can directly influence physical security risk.The Internet of Things consists of various platforms and devices with different capabilities, and each system will need security solutions depending on its characteristics. There is a demand for security solutions that are able to support multi-profile platforms and provide equivalent security levels for various device interactions. In addition, user privacy will become more important in the IoT environment because a lot of personal information will be delivered and shared among connected things. Therefore, we need mechanisms to protect personal data and monitor their flow from things to the cloud. In this talk, we describe threats and concerns for security and privacy arising from IoT services, and introduce approaches to solve these security and privacy issues in the industrial field. SECURITY THREATS IN IOTFor the Internet of Things (IoT) services, there are numerous types of things from light to rich devices; the communication between things occurs through various networks . It means that there are security risks in each device/network layer and the user privacy can be exposed from diverse routes. Therefore, all kinds of attack scenarios in the previous IT environment should be re-considered more seriously. SECURITY THREATS IN IOTWe introduce the concerns and the high-level approaches to provide secure IoT environment. Secure Things OrchestrationThings in IoT are organically operated by connecting with other things, and the connected things are dynamically changed. In such a situation, the connected things should be able to keep the required security level. For instance, local devices and sensors used in home should communicate securely with each other, and should be securely managed to support multi-things orchestration. In addition, when they communicate with external thing, all things should be operated under the same security policy.

IoTCrawler: Challenges and Solutions for Searching the Internet of Things

“…Hwang [22] also raises the well-known concern regarding the security threats related to IoT, for example the possibility to overwhelm a system by means of a few IoT attackers using Denial-of-Service (DoS)-based attacks [23]. The most remarkable point from this paper's perspective is that, as Hwang states, a demand exists for security solutions capable of supporting multi-profile platforms with different security levels.…”

Analysis of Security Issues and Countermeasures for the Industrial Internet of Things

“…In a centralized IIoT system, a user's confidential data are stored inside a traditional server,; however, in the case of a large-scale IIoT system, sensitive information can also be stored in distributed locations. Therefore, IIoT systems experence issues, e.g., protecting business's confidential information and individual confidential information [105,106] One of the common ways to get a user's confidential and private information (e.g., username, password, bank details, etc.) unlawfully is a phishing attack.…”

Vulnerability Assessment of Ubiquitous Cities Using the Analytic Hierarchy Process

“…Any natural hazard that affects the functionality of data handling or any man-made intervention can cause a high risk of U-cities normal functionality. For example, any untrusted information is a potential risk from the privacy security of individuals, to company finance or even the economy of global markets [91], [92]. Cyberattacks on the IoT network can make physical damage and it can be fatal, especially the applications in the industrial sector [50].…”