State-of-the-Art Review on IoT Threats and Attacks: Taxonomy, Challenges and Solutions

Abstract

The Internet of Things (IoT) plays a vital role in interconnecting physical and virtual objects that are embedded with sensors, software, and other technologies intending to connect and exchange data with devices and systems around the globe over the Internet. With a multitude of features to offer, IoT is a boon to mankind, but just as two sides of a coin, the technology, with its lack of securing information, may result in a big bane. It is estimated that by the year 2030, there will be nearly 25.44 billion IoT devices connected worldwide. Due to the unprecedented growth, IoT is endangered by numerous attacks, impairments, and misuses due to challenges such as resource limitations, heterogeneity, lack of standardization, architecture, etc. It is known that almost 98% of IoT traffic is not encrypted, exposing confidential and personal information on the network. To implement such a technology in the near future, a comprehensive implementation of security, privacy, authentication, and recovery is required. Therefore, in this paper, the comprehensive taxonomy of security and threats within the IoT paradigm is discussed. We also provide insightful findings, presumptions, and outcomes of the challenges to assist IoT developers to address risks and security flaws for better protection. A five-layer and a seven-layer IoT architecture are presented in addition to the existing three-layer architecture. The communication standards and the protocols, along with the threats and attacks corresponding to these three architectures, are discussed. In addition, the impact of different threats and attacks along with their detection, mitigation, and prevention are comprehensively presented. The state-of-the-art solutions to enhance security features in IoT devices are proposed based on Blockchain (BC) technology, Fog Computing (FC), Edge Computing (EC), and Machine Learning (ML), along with some open research problems.

Artificial Intelligence Deployment to Secure IoT in Industrial Environment

“…Based on the scenarios from a specific industry and the infrastructure to which IoT is being applied to, the requirements and consequent security measures may be changed or adjusted. Nevertheless, the common security requirements [10][11][12][13] of IoT systems can be summarized as given in Table 2.…”

“…In the above sub-section, some empirical based solutions have been listed in Table 2 corresponding to the given threat or attack. Based on the studies performed in [11,[45][46][47], it is observed that some ubiquitous state-of-the-art technologies such as Blockchain, Fog Computing, Edge Computing, SDN, Artificial Intelligence can be used to enhance the security in an IoT environment. These technologies are vital and have enormous potential for addressing the IoT ecosystem's security concerns.…”

Blockchain-Enabled Smart Grid Applications: Architecture, Challenges, and Solutions

“…However, such data, typically referred to as synchrophasor data, can be exploited by cyber-attacks such as denial of service (DoS), distributed denial of service (DDoS), false data injection, spoofing, data tampering, etc. [33]. These attacks put the WAMS at risk, and its efficacy becomes questionable.…”

Comparative study among constrained application protocol extensible messaging and presence protocol of IoT

“…Inside the model, the distributer's undertaking is to gather the information and send data to endorsers through the intercession layer which is the agent. The part of the merchant, then again, is to guarantee security through cross-checking the distributers' and supporters' authorization [35]. MQTT offers three methods of accomplishing this (Service Quality), on account of that the distributer has the likelihood to characterize the nature of its message: (i) QoS0 (At most once): The most un-dependable mode yet in addition the quickest.…”