A lightweight attribute-based encryption scheme for the Internet of Things

The Internet of Things (IoT) has experienced constant growth in the number of devices deployed and the range of applications in which such devices are used. They vary widely in size, computational power, capacity storage, and energy. The explosive growth and integration of IoT in different domains and areas of our daily lives has created an Internet of Vulnerabilities (IoV). In the rush to build and implement IoT devices, security and privacy have not been adequately addressed. IoT devices, many of which are highly constrained, are vulnerable to cyber attacks, which threaten the security and privacy of users and systems. This survey provides a comprehensive overview of IoT in regard to areas of application, security architecture frameworks, recent security and privacy issues in IoT, as well as a review of recent similar studies on IoT security and privacy. In addition, the paper presents a comprehensive taxonomy of attacks on IoT based on the three-layer architecture model; perception, network, and application layers, as well as a suggestion of the impact of these attacks on CIA objectives in representative devices, are presented. Moreover, the study proposes mitigations and countermeasures, taking a multi-faceted approach rather than a per layer approach. Open research areas are also covered to provide researchers with the most recent research urgent questions in regard to securing IoT ecosystem.

Cloud storage is a useful service of cloud computing which allows users to upload their data in the cloud and share it with others. Although, this new service is affordable and practical, but it is associated with several privacy and security challenges. Nowadays, Attribute Based Encryption (ABE) is widely used to provide secure data sharing in the distributed environment such as cloud computing. Unfortunately, most of the existing ABE schemes are not suitable for resource- constraint cloud systems, because they use expensive bilinear pairing operation and thus they cause a very high encryption and decryption computation overhead. In this paper, we propose an efficient no-pairing and revocable ABE data sharing scheme based on Elliptic Curve Cryptography (ECC) for cloud storage systems. Moreover, a comprehensive security and performance analysis shows that our scheme is both secure and efficient.

Key regeneration-free ciphertext-policy attribute-based encryption and its application

Elderly population in the Asian countries is increasing at a very fast rate. Lack of healthcare resources and infrastructure in many countries makes the task of provding proper healthcare difficult. Internet of things (IoT) in healthcare can address the problem effectively. Patient care is possible at home using IoT devices. IoT devices are used to collect different types of data. Various algorithms may be used to analyse data. IoT devices are connected to the internet and all the data of the patients with various health reports are available online and hence security issues arise. IoT sensors, IoT communication technologies, IoT gadgets, components of IoT, IoT layers, cloud and fog computing, benefits of IoT, IoT-based algorithms, IoT security issues, and IoT challenges are discussed in the chapter. Nowadays global epidemic COVID19 has demolished the economy and health services of all the countries worldwide. Usefulness of IoT in COVID19-related issues is explained here.

The term Internet of Things (IoT) refers to a broad class of devices used by business entities as well as consumers to provide or consume a broad array of services. All these devices share their need to connect to the internet to deliver their native functionality. This connection requirement exposes the devices to the cybersecurity threats found on the internet. Existing literature on IoT cybersecurity solution models has shown that different technologies, such as communication technologies, mobile-app based authorization framework, graph-theoretic approach or blockchain technologies, have been majorly proposed to solve IoT security issues. However, these studies only focus on some specific IoT security issues like data theft or security issues on some specific layer across the whole IoT architecture. Therefore, there is a lack of systematic framework to solve IoT cybersecurity issues. This paper presents a framework for assessing such risks. In the qualitative analysis results, the device threats seem more severe than data confidentiality and privacy issues. This surprising finding highlights the significances of security taxonomy because both issues are based on different technical requirements. Our study has important managerial and practical implications for users, managers, and policymakers.

Attribute-based encryption (ABE) for cloud computing access control is reviewed in this article. A taxonomy and comprehensive assessment criteria of ABE are first proposed. In the taxonomy, ABE schemes are assorted into key-policy ABE (KP-ABE) schemes, ciphertext-policy ABE (CP-ABE) schemes, anti-quantum ABE schemes, and generic constructions. In accordance with cryptographically functional features, CP-ABE is further divided into nine subcategories with regard to basic functionality, revocation, accountability, policy hiding, policy updating, multi-authority, hierarchy, offline computation, and outsourced computation. In addition, a systematical methodology for discussing and comparing existing ABE schemes is proposed. For KP-ABE and each type of CP-ABE, the corresponding access control scenario is presented and explained by concrete examples. Specifically, the syntax of ABE is given followed by the adversarial model and security goals. ABE schemes are discussed according to the design strategies and special features and are compared in the light of the proposed assessment criteria with respect to security and performance. Compared to related state-of-the-art survey papers, this article not only provides a broader 12 categories of ABE schemes, but also makes a more comprehensive and holistic comparison. Finally, a number of open research challenges in ABE are pointed out.

Since the Internet of Things (IoT) will be entwined with everything we use in our daily life, the consequence of security flaws escalates. Smart objects will govern most of the home appliances and car engines yielding potential disaster scenarios. In this context, successful attacks could lead to chaos and scary scenarios (www.darkreading.com). Unprotected personal information may expose sensitive and embarrassing data to the public and attacks may threaten not only our computers and smart devices, but our intimacy and perhaps our lives too. Because persons and objects will be bonded with each other, user consent becomes critical. Therefore, thing, object, and user Identity will be the focus of future IoT security solutions, yielding a Trust, Security, and Privacy (TSP) paradigm, which may constitute the Achilles' heel of IoT. While security issues are quite straightforward, mainly from background knowledge, privacy issues are far more complex. Privacy constitutes a rather challenging task, even for the m...

The paper describes security issues of Internet of Things (IoT)-based applications like healthcare application systems. In recent years, because of increased usage of IoT devices the IoT networks are becoming prone to various security attacks. In this paper, a comprehensive study on security and privacy issues in IoT networks is provided. The IoT which has become a popular technology in recent days is a concept reflecting a connected set of anyone, anything, anytime, anyplace, any service and any network. The IoT builds smart objects, the ultimate devices in the development of healthcare information system. The usage of IoT technologies is a boon to the modern healthcare environment. Since IoT is the next stage of technological revolution, it has become a necessity to incorporate it in the medical field for the convenience it provides. Further, this paper surveys intelligent collaborative security model to minimise security risk. As opposed to the traditional Internet, in addition to humans, an IoT connects a large number of machines mobile, tablet, pc, resource-constrained devices and sensors using heterogeneous wired and wireless networks. An IoT typically has three conceptual layers consisting of perception, network and application layers.

Internet of Things (IoT) provides the connectivity, interaction and exchange of data among electronic devices, vehicles and home appliances. IoT provides connectivity to internet enabled smart devices as well as non-internet-enabled dumb devices. By using technology; communication and interaction is possible among these devices and make it possible to control and monitor these devices remotely. For creating any IoT enabled application, sensors are being used to have an interaction between the real and digital world. This review study is taken into account for analysis in the time period between 2010–2021 from three databases SCOPUS, SCI and IEEE. The selected literature has been grouped into four categories IoT in healthcare, IoT security issues, IoT security possible solutions and IoT messaging protocols. The main objective of this paper is to review and analyze the existing work related to use of IoT in healthcare, issues and challenges of IoT deployment. This review could benefit the IoT researchers and developers by providing an overview regarding the use of IoT, applications, security issues and opportunities for future research.

Most data nowadays are stored in the cloud; therefore, cloud computing and its extension—fog computing—are the most in-demand services at the present time. Cloud and fog computing platforms are largely used by Internet of Things (IoT) applications where various mobile devices, end users, PCs, and smart objects are connected to each other via the internet. IoT applications are common in several application areas, such as healthcare, smart cities, industries, logistics, agriculture, and many more. Due to this, there is an increasing need for new security and privacy techniques, with attribute-based encryption (ABE) being the most effective among them. ABE provides fine-grained access control, enables secure storage of data on unreliable storage, and is flexible enough to be used in different systems. In this paper, we survey ABE schemes, their features, methodologies, benefits/drawbacks, attacks on ABE, and how ABE can be used with IoT and its applications. This survey reviews ABE models suitable for IoT platforms, taking into account the desired features and characteristics. We also discuss various performance indicators used for ABE and how they affect efficiency. Furthermore, some selected schemes are analyzed through simulation to compare their efficiency in terms of different performance indicators. As a result, we find that some schemes simultaneously perform well in one or two performance indicators, whereas none shines in all of them at once. The work will help researchers identify the characteristics of different ABE schemes quickly and recognize whether they are suitable for specific IoT applications. Future work that may be helpful for ABE is also discussed.

Internet of Things (IoT) is playing a more and more important role after its showing up, it covers from traditional equipment to general household objects such as WSNs and RFID. With the great potential of IoT, there come all kinds of challenges. This paper focuses on the security problems among all other challenges. As IoT is built on the basis of the Internet, security problems of the Internet will also show up in IoT. And as IoT contains three layers: perception layer, transportation layer and application layer, this paper will analyze the security problems of each layer separately and try to find new problems and solutions. This paper also analyzes the cross-layer heterogeneous integration issues and security issues in detail and discusses the security issues of IoT as a whole and tries to find solutions to them. In the end, this paper compares security issues between IoT and traditional network, and discusses opening security issues of IoT.

Wireless communication networks are highly prone to security threats. The major applications of wireless communication networks are in military, business, healthcare, retail, and transportations. These systems use wired, cellular, or adhoc networks. Wireless sensor networks, actuator networks, and vehicular networks have received a great attention in society and industry. In recent years, the Internet of Things (IoT) has received considerable research attention. The IoT is considered as future of the internet. In future, IoT will play a vital role and will change our living styles, standards, as well as business models. The usage of IoT in different applications is expected to rise rapidly in the coming years. The IoT allows billions of devices, peoples, and services to connect with others and exchange information. Due to the increased usage of IoT devices, the IoT networks are prone to various security attacks. The deployment of efficient security and privacy protocols in IoT networks is extremely needed to ensure confidentiality, authentication, access control, and integrity, among others. In this paper, an extensive comprehensive study on security and privacy issues in IoT networks is provided.

The Internet of Things (IoT) has become one of the most widely utilized technologies in the recent decade, particularly in healthcare systems. With the usage of wearable and mobile devices, IoT-based healthcare systems have significantly increased the value of the healthcare sector, resulting in the effective use of health data exchange for enhanced, accurate, and quick diagnosis. These devices communicate, process, compute and monitor real-time scenarios via wireless or wired connections. Such devices are heterogeneous, having limited memory and computational power. The adoption of the IoT system in healthcare raises security and privacy concerns. Healthcare records containing sensitive patient data complicate this system since there is a danger of a privacy breach, privacy leakage, tampering, and so on. Blockchain technology has recently emerged as a promising solution to such breaches and problems. In this study, we consider various challenges to healthcare IoT implementation for widespread practical use, considering the security concerning the IoT layered architecture. We have categorized various layered security issues faced by IoT and specific attacks and security issues faced in communication, computation, and authentication IoT-based healthcare systems. Then we demonstrate how blockchain technology can be a key enabler in resolving numerous healthcare IoT security issues. We concluded that blockchain provides a secure and efficient way to resolve healthcare issues.

Since the beginning of crypto currency in 2008, blockchain technology rise as progressive technology. Despite the fact that blockchain began off as a core technology of Bitcoin, its utilization cases are growing to numerous fields such as, security of Internet of Things (IoT), banking sector, industries and medical etc. In recent years IoT has gained popularity due to its usage in smart homes and smart city projects around the world. Unfortunately, IoT devices possess limited computing power, low storage capability and network capacity therefore they are more prone to attacks than other endpoint devices such as cell phones, tablets, or PCs. This paper focus on significant security issues for IoT, security prerequisites for IoT alongside the current attacks and maps IoT security issues against existing solutions found in the literature. Blockchain technology can be a key empowering influence to take care of numerous IoT security issues. Finally describe the future work directions.

Nowadays, the Internet of Things technology has become a global hot topic. With the widespread applications of the Internet of Things, security issues attract people's attention. Firstly, the article introduces the concept, three layers and functions of the Internet of Things. Secondly, the article analyze and study the Internet of Things security issues from the angle of perceiving layer, network layer, application layer, and illustrate some domestic existing solutions. Finally, summarizing and imagining the development of the Internet of Things in the future.