Security in the Internet of Things Application Layer: Requirements, Threats, and Solutions

Abbasi, Mahmoud; Plaza-Hernández, Marta; Prieto, Javier; Corchado, Juan M.

doi:10.1109/access.2022.3205351

Cited by 14 publications

(11 citation statements)

References 167 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Temporary Disabling Attack (TDA) [50,51] The malware injected into an IoT system by an attacker can compromise its integrity and allow for the theft of sensitive information or the implementation of additional attacks. Furthermore, if vendors do not guarantee proper software protection, certain systems might be compromised with viruses' right out of the box.…”

Section: Attack Portrayal Purposementioning

confidence: 99%

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

Tariq

Ahmed

Bashir

et al. 2023

Sensors

View full text Add to dashboard Cite

The emergence of the Internet of Things (IoT) technology has brought about tremendous possibilities, but at the same time, it has opened up new vulnerabilities and attack vectors that could compromise the confidentiality, integrity, and availability of connected systems. Developing a secure IoT ecosystem is a daunting challenge that requires a systematic and holistic approach to identify and mitigate potential security threats. Cybersecurity research considerations play a critical role in this regard, as they provide the foundation for designing and implementing security measures that can address emerging risks. To achieve a secure IoT ecosystem, scientists and engineers must first define rigorous security specifications that serve as the foundation for developing secure devices, chipsets, and networks. Developing such specifications requires an interdisciplinary approach that involves multiple stakeholders, including cybersecurity experts, network architects, system designers, and domain experts. The primary challenge in IoT security is ensuring the system can defend against both known and unknown attacks. To date, the IoT research community has identified several key security concerns related to the architecture of IoT systems. These concerns include issues related to connectivity, communication, and management protocols. This research paper provides an all-inclusive and lucid review of the current state of anomalies and security concepts related to the IoT. We classify and analyze prevalent security distresses regarding IoT’s layered architecture, including connectivity, communication, and management protocols. We establish the foundation of IoT security by examining the current attacks, threats, and cutting-edge solutions. Furthermore, we set security goals that will serve as the benchmark for assessing whether a solution satisfies the specific IoT use cases.

show abstract

Section: Attack Portrayal Purposementioning

confidence: 99%

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

Tariq

Ahmed

Bashir

et al. 2023

Sensors

View full text Add to dashboard Cite

show abstract

“…Another works [35,4,78,44,125] predominantly focus on communication protocols and security in IoT. Gerodimos et al [35] discuss the fundamentals of IoT architecture and present an analysis of security threats.…”

Section: Related Iot Surveysmentioning

confidence: 99%

“…Gerodimos et al [35] discuss the fundamentals of IoT architecture and present an analysis of security threats. Abbasi [4] et al and Nebbione and Calzarossa [78] delve deep into security requirements, threats, and countermeasures in the IoT application layer. Schmitz and Sto-janovié [44] delve into the application of formal methods to IoT, specifically focusing on MQTT and CoAP protocols.…”

Section: Related Iot Surveysmentioning

confidence: 99%

“…Datasets should be expanded to include these types of attacks to better train ML algorithms [98]; -Benchmarking and Comparative Studies: A comprehensive evaluation and comparison of ML algorithms for IoT security, possibly facilitated by a unified benchmarking framework, could offer valuable insights into the strengths and weaknesses of different approaches [113,100,102]; -Lightweight Security Algorithms: As IoT devices are often constrained in terms of computational power and memory, there is a pressing need for security algorithms that are both effective and lightweight. Traditional security algorithms are generally not well-suited for these devices due to their high computational and memory demands [99,4]. Therefore, research is focusing on developing lightweight cryptographic methods and efficient ML models for security.…”

Section: Research Opportunitiesmentioning

confidence: 99%

See 1 more Smart Citation

A survey on IoT application layer protocols, security challenges, and the role of explainable AI in IoT (XAIoT)

Quincozes,

Kazienko

et al. 2024

Int. J. Inf. Secur.

View full text Add to dashboard Cite

The Internet of Things (IoT) plays a fundamental role in contemporary society, necessitating an in-depth comprehension of its application layer protocols, intertwined technologies, security issues, and effective countermeasures. This survey delivers an exhaustive analysis of these protocols, emphasizing the escalating significance of Explainable Artificial Intelligence in IoT (XAIoT). To elucidate its practical implications, we conducted a case study examining a real-world scenario where XAIoT significantly bolstered IoT security. This case study demonstrated XAIoT's potential to enhance transparency and trustworthiness in IoT systems. Furthermore, the survey critically evaluates existing literature, pinpointing specific opportunities and gaps in the present state of IoT application layer security. For instance, our analysis revealed a pressing need for more robust security protocols and the integration of advanced machine learning techniques for anomaly detection in IoT applications. This survey, designed to provide a comprehensive perspective, seeks to stimulate additional innovation and research in the realm of secure and intelligent IoT applications. In doing so, it contributes to the ongoing dialogue on improving IoT security, offering valuable insights for researchers and practitioners alike.

show abstract

“…Within the IoT architecture, the application layer resides at the top level. This layer provides the user interface, which includes services such as healthcare, smart homes, and connected cars [125], [126]. It recognizes spam and filters out the malicious content [127].…”

Section: ) Application Layermentioning

confidence: 99%

Machine Learning for Healthcare-IoT Security: A Review and Risk Mitigation

Khatun,

Memon,

Eising

et al. 2023

IEEE Access

View full text Add to dashboard Cite

The Healthcare Internet-of-Things (H-IoT), commonly known as Digital Healthcare, is a datadriven infrastructure that highly relies on smart sensing devices (i.e., blood pressure monitors, temperature sensors, etc.) for faster response time, treatments, and diagnosis. However, with the evolving cyber threat landscape, IoT devices have become more vulnerable to the broader risk surface (e.g., risks associated with generative AI, 5G-IoT, etc.), which, if exploited, may lead to data breaches, unauthorized access, and lack of command and control and potential harm. This paper reviews the fundamentals of healthcare IoT, its privacy, and data security challenges associated with machine learning and H-IoT devices. The paper further emphasizes the importance of monitoring healthcare IoT layers such as perception, network, cloud, and application. Detecting and responding to anomalies involves various cyber-attacks and protocols such as Wi-Fi 6, Narrowband Internet of Things (NB-IoT), Bluetooth, ZigBee, LoRa, and 5G New Radio (5G NR). A robust authentication mechanism based on machine learning and deep learning techniques is required to protect and mitigate H-IoT devices from increasing cybersecurity vulnerabilities. Hence, in this review paper, security and privacy challenges and risk mitigation strategies for building resilience in H-IoT are explored and reported.

show abstract

Security in the Internet of Things Application Layer: Requirements, Threats, and Solutions

Cited by 14 publications

References 167 publications

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

A survey on IoT application layer protocols, security challenges, and the role of explainable AI in IoT (XAIoT)

Machine Learning for Healthcare-IoT Security: A Review and Risk Mitigation

Contact Info

Product

Resources

About