IOT PRIVACY AND SECURITY

It is our great pleasure to welcome you to the 2015 ACM Workshop on IoT Privacy, Trust, and Security -- IoTPTS'15. At a basic level, the Internet of Things (IoT) refers simply to networked devices, but the IoT vision consists of a complex ecosystem that ranges from cloud backend services and big-data analytics to home, public, industrial, and wearable sensor devices and appliances. Architectures for these systems are in the formative stages, and IoTPTS 2015 gives researchers and practitioners a unique opportunity ensure privacy, trust, and security are designed into these systems from the beginning. This is the inaugural year of the IoTPTS Workshop and the call for papers attracted 13 submissions worldwide from 12 countries and 4 continents. The final program contained 5 papers (representing an acceptance rate of 38%) and a keynote IoT Security and Privacy: Threats and Challenges by Dr. Yong Ho Hwang from the Software R&D Center at Samsung Electronics.

Recently, two terms, namely Big Data and Internet of Things (IoT) have gained popularity individually. However, their interconnections are not fully explored and understood. It is expected that the fusion of Big Data and IoT would create many complex systems for smart cities. While the data from IoT lies in Big Data, the scale of operations are completely different in terms of providing the required real-time analytics for such smart systems. Even though NoSQL databases and other next generation solutions could be deployed to achieve real-time responses, the major security challenges need to be understood as mission critical and sensitive data intertwines Big Data and IoT. In this paper, we identify the security challenges shared by the closely-knit Big Data and IoT in three main risk areas: i) NoSQL security vulnerabilities, ii) mobile IoT (M-IoT) security and privacy constraints and iii) encryption key security threats. We perform a comparative study of security vulnerabilities of NoSQL databases and identify the security and privacy constraints of M-IoT networks. Encryption key attacks for resource constrained IoT devices are also illustrated mathematically. Overall, this paper explores new research directions in these prime areas of security and privacy that would result in solution opportunities for a meaningful fusion of Big Data and IoT for a smart environment.

The Internet of Things (IoT) has experienced constant growth in the number of devices deployed and the range of applications in which such devices are used. They vary widely in size, computational power, capacity storage, and energy. The explosive growth and integration of IoT in different domains and areas of our daily lives has created an Internet of Vulnerabilities (IoV). In the rush to build and implement IoT devices, security and privacy have not been adequately addressed. IoT devices, many of which are highly constrained, are vulnerable to cyber attacks, which threaten the security and privacy of users and systems. This survey provides a comprehensive overview of IoT in regard to areas of application, security architecture frameworks, recent security and privacy issues in IoT, as well as a review of recent similar studies on IoT security and privacy. In addition, the paper presents a comprehensive taxonomy of attacks on IoT based on the three-layer architecture model; perception, network, and application layers, as well as a suggestion of the impact of these attacks on CIA objectives in representative devices, are presented. Moreover, the study proposes mitigations and countermeasures, taking a multi-faceted approach rather than a per layer approach. Open research areas are also covered to provide researchers with the most recent research urgent questions in regard to securing IoT ecosystem.

Ensuring data security and privacy in Internet of Things (IoT) is increasingly critical due to the growing interconnectedness of devices and the sensitivity of the data they handle. This paper presents a novel approach to enhancing data security in IoT through the integration of homomorphic encryption and blockchain technology. We conduct simulations using the Kaggle Smart Home Dataset to evaluate the effectiveness of our proposed methodology on smart home devices and wearable technology. Our approach not only secures data transmission but also guarantees data integrity and privacy through decentralized verification and secure aggregation techniques. Specifically, our evaluation demonstrates an encrypted data transmission rate exceeding 99.5%, a complete absence of unauthorized access instances in the simulated environment, and a verified data integrity rate of over 99.8%. Additionally, our method supports real-time processing and scalability, making it suitable for various IoT applications, including smart contract applications in IoT for privacy and security in supply chain transactions. The study highlights the robustness of combining homomorphic encryption and blockchain to protect sensitive data throughout its lifecycle.

The convergence of the Internet of Things (IoT), fog computing, and block chain technology has revolutionized contemporary digital ecosystems by making data management decentralized, efficient, and scalable. Nonetheless, this integration poses serious security and privacy threats. IoT devices produce enormous amounts of sensitive data, making them easy targets for cyber attacks, unauthorized access, and data breaches. Classic cloud-based solutions tend to be challenged by latency, bandwidth limitations, and centralized attacks, making the use of fog computing inevitable to decentralize data processing for better responsiveness and decreased dependency on remote cloud servers. While fog computing offers advantages, it also poses new security threats through possible insider attacks and data integrity issues. Block chain technology solves these problems by presenting a tamper-resistant, decentralized ledger that improves trust, security, and transparency for IoT networks. Block chain, via cryptographic authentication, consensus protocols, and smart contracts, ensures the secure transaction of data while alleviating risks against unauthorized data manipulation. Scalability, computational complexity, and energy efficiency are still challenges that need to be met for widespread IoT adoption. This chapter discusses the complex security and privacy problems in IoT, fog, and blockchain networks and examines current threats and countermeasures. Advanced cryptographic methods, secure communication schemes, and access control techniques for strengthening the security of these connected systems are mentioned. It further presents future research directions and trends that will improve a safer, more efficient, and privacy-augmented digital infrastructure.

The integration of Internet of Things (IoT) technologies within smart healthcare systems has revolutionized medical diagnostics, patient monitoring, and treatment personalization, the widespread deployment of interconnected medical devices introduces a complex landscape of security and privacy risks, exposing sensitive health data to cyber threats and unauthorized access. As healthcare systems generate vast volumes of real-time data across distributed environments, traditional security mechanisms fall short in ensuring end-to-end protection, especially under the resource constraints of IoT devices. Artificial intelligence (AI) has emerged as a transformative force, enabling proactive threat detection, intelligent risk scoring, and adaptive mitigation strategies that operate in dynamic healthcare ecosystems. This chapter presents a comprehensive analysis of IoT security architectures in smart healthcare, examining vulnerabilities at each system layer and highlighting AI-driven frameworks for intrusion detection, anomaly recognition, and privacy-preserving data analytics. Advanced methods such as federated learning, differential privacy, homomorphic encryption, and secure multi-party computation are explored as essential tools for safeguarding patient information while maintaining model utility and interoperability. The convergence of AI and cybersecurity offers a resilient approach to managing evolving threats without compromising clinical efficiency or regulatory compliance. Key challenges, including scalability, explainability, and cross-border data governance, are critically assessed, along with future directions for building robust, ethical, and intelligent healthcare infrastructures.

The growing number of Internet of Things (IoT) objects and the operational and security challenges in IoT systems are encouraging researchers to design suitable IoT architecture. Enormous data generated in the IoT environment face several kinds of security and privacy challenges. IoT system generally suffers from several issues like data storage, safety, privacy, integrity, transparency, trust, and single point of failure. IoT environment is emerging with several solutions to resolve these problems. The main objective of this paper is to design a cloud-blockchain-based secure IoT architecture that provides advanced and efficient storage and security solutions to IoT ecosystem. Blockchain technology appears to be a decent choice to resolve such kinds of problems. Blockchain technology uses a hash-based cryptographic technique for information security and integrity. Cloud computing provides advanced storage solutions with several remote services to store, compute and analyze the data. The proposed IoT architecture is based on the integration of cloud and blockchain services, which aim to provide transparent, decentralized, and trustworthy and secure storage solutions. In addition to the standard layers (perception layer, network layer, processing layer, and application layer) the proposed IoT architecture in the present paper includes a service layer, a security layer, and a parallel management and control layer, which focus on the security and management of the entire IoT infrastructure.

Internet of things (IoT) is becoming increasingly important and ubiquitous in home and industries. It makes object a part of the Internet and fuses the digital and physical world together. However, if not properly secured, IoT device can be vulnerable to tampering that can change the content of the data stored in the network. Blockchain, a technology used in cryptocurrency, can be used for addressing the security and privacy challenges in IoT. Blockchain can be beneficial to IoT by adding more security layer and reducing dependency on a central authority. This paper proposed to develop a blockchain based platform for IoT application. Blockchain technology can be utilized to provide a decentralized network, creating a more secured IoT system. The proposed blockchain network will be based on Ethereum blockchain network allowing the use smart contract application for management of IoT devices. Experiment is conducted to show the feasibility of the blockchain based platform. The proposed blockchain based platform is capable of managing several IoT devices connected to the network.

The Internet of Things (IoT) constitutes a sophisticated network that interconnects devices, optimizing functionality across various domains of human activity. Recent literature projections anticipate a significant increase, with estimates exceeding 50 billion connected devices by 2025. Despite its transformative potential, the IoT landscape confronts formidable privacy and security challenges, encompassing intricate issues such as data acquisition, anonymization, retention, sharing practices, and behavioural profiling. Effectively addressing these challenges mandates the development of scalable solutions, innovative management strategies, and adaptable policy frameworks. In this paper, we conduct an exhaustive examination of major IoT applications, alongside associated privacy and security concerns. We systematically categorize prevalent privacy, security, and interoperability issues within the context of the IoT layered architecture. The review highlights current research initiatives focused on developing energy-efficient devices, optimizing microprocessors, and fostering interdisciplinary collaborations to address the challenges in the IoT landscape. To efficaciously manage risks in this dynamic landscape, stakeholders must implement comprehensive strategies that span stringent data protection legislation, extensive user education initiatives, and the deployment of robust authorization and authentication frameworks. This paper aims to empower industry leaders, policymakers, and researchers by providing actionable solutions, not just insights, to navigate the complexities of the IoT landscape effectively. Future research initiatives should prioritize the fortification of security measures for large-scale IoT deployments, the formulation of user-centric privacy solutions, and the standardization of interoperability protocols. By establishing a robust foundational framework, our paper endeavours to spearhead the discourse on IoT applications, privacy paradigms, and security frameworks, paving the way towards a resilient and interconnected future.

Technology advancements blend to masses with diverse and heterogeneous environments. The Internet of Things (IoT) and Cloud Computing has broken through reachability and availability of services. The security, privacy requirements and challenges manifest with the heterogeneity and the wide range of application domains posing a major concern in adoption of IoT. The literature addresses these changing requirements individually. The paper presents a top-down survey starting with general security challenges in IoT moving to security and privacy challenges, and later exploring security frameworks of IoT. The millions of wide range of devices produce a huge amount of data. Identifying and authenticating these devices and allowing them to process their data locally improves the performance, reduces the bandwidth usage, increases the battery usage and reduces the security risk of attacks making the devices self reliant. The survey identifies the less explored research gaps to group them and address the concerns related to device management, user management, key management, trust management and data management. The surveyed secured frameworks in IoT address the multiple dimensions of security concerns and their aspects.

Internet of Things (IoT): From awareness to continued use

In the era heavily influenced by Internet of Things (IoT), prioritizing strong security and the protection of user privacy is of utmost importance. This comprehensive review paper embarks on a meticulous examination of the multifaceted challenges and risks facing IoT security and privacy. It encompasses the hardware, software, and data‐in‐transit domains, shedding light on potential vulnerabilities and associated threats. In response to these concerns, this paper puts forth recommendations for effective strategies to mitigate these risks. Providing a road‐map for enhancing security and privacy in IoT environments. Furthermore, this review thoroughly assesses a multitude of solutions proposed by various authors, with the primary aim of enhancing security and privacy within the IoT landscape. The analysis provides insights into the strengths and limitations of these solutions. This is aiding in the development of a holistic comprehension of the existing status of IoT security and privacy. Moreover, the paper delves into the complexities surrounding integrating emerging technologies into the IoT framework. It explores the obstacles and challenges inherent in this process and proposes potential strategies to address these hurdles. By doing so, the review provides a holistic perspective on existing security and privacy enhancement technologies and offers guidance on navigating the dynamic landscape of emerging technologies within the IoT domain. Publications included in the review consist of journal articles, conference papers, and book chapters from reputable sources indexed in SCI (Science Citation Index), Scopus, and Web of Science.

The development of Internet of Things (IoT) industries has raised significant questions in terms of accountability of smart devices and user privacy. The advent of European General Data Protection Regulation (GDPR) in such industries enabled users to control their collected data and be informed about the collecting devices. This paper by using blockchain technology provides the audit trail of IoT devices under GDPR rules. It translates a set of such rules into smart contracts to protect personal data in a transparent and automatic way. By proposing an abstract model and designing some business processes, the paper shows how the integration of GDPR and blockchain can appear in the design patterns of IoT devices to achieve a greater transparency of privacy.

The Internet of Things (IoT) has had a considerable influence on our daily lives by enabling enhanced connection of devices, systems, and services that extends beyond machine-to-machine interactions and encompasses a wide range of protocols, domains, and applications. However, despite privacy concerns shown by IoT users, little has been done to reduce and protect individual information exposure. It is extremely difficult to mitigate IoT devices from reidentification threats which is why it is still a major challenge for IoT users to securely protect their information. The trust controls how we regulate privacy in our IoT platforms in the same way that it governs personal relationships. As IoT devices become increasingly linked, more data is shared across individuals, businesses, governments, and ecosystems. Technologies, sensors, machines, data, and cloud connections all rely largely on trust relationships that have been formed. With the rapid growth of additional types of IoT devices that are being introduced, it, therefore, expands privacy concerns and is difficult to develop trust with an IoT system or device without the option to regulate information privacy settings. Privacy has always been a barrier for many devices as they race for the early adoption of IoT technologies. Several Internet of Things devices or systems will continue to pose privacy threats. As a result, the main objective of this study was to examine the individual understanding of privacy and to promote information privacy protection awareness not only to IoT users but also to organizations that use IoT devices or platforms to run their day-to-day business operations. Furthermore, the objective extends to compare user knowledge and concerns about IoT privacy, as well as to identify any common attitudes and variances. However, in terms of enhancing individuals’ knowledge, an artifact was developed to educate and enhance information privacy awareness among IoT users. A pre- and postquestionnaire was generated to test and validate user knowledge regarding information privacy protection in IoT. The study was conducted using a quantitative research method. Findings indicate that IoT users’ awareness of information privacy protection turned out to be average, suggesting a need for education and awareness. Several participants stated that information privacy protection awareness is required within the community to educate, raise awareness, eliminate human error, and enable individuals to be conscious of their privacy when surfing the Internet.

Recent emerging technologies are being utilized for the quench of connectivity in real time scenarios. A push is coming to make the information available to humans from the real-time environmental data collected through small sensing devices. Wireless ad-hoc network is a base architecture for Internet of Things (IoT), Unmanned Arial Vehicle (UAV) and drones etc. In this series, IoDTIoDT (Internet of Drone Things) came as the future of drones backend via the Internet of Things, smart vision, cloud computing, enhanced communication, big data, and advanced security approaches. Rapid growth in sensing devices connected to the Internet with intelligence and capabilities also opens the door for attackers because more devices are connected means more chances of security vulnerabilities. Since data authentication is handled only by the central station, which may lead to the chances of device spoofing and false authentication brings less reliability after all. Blockchain (BC) technology is introduced to address such security concerns by eliminating the role of central authority. Blockchain Technology gives decentralized and non-tamperable solutions for the most demanding security service i.e. Authentication. This paper starts with unique characteristics and security challenges in such IOT environment and further covers the authentication process by blockchain with its potential benefits. The multilayer ecosystem is illustrated to fulfill the requirement of the UAV IoT environment, where multiple devices are equally working in a cooperative manner to perform an authorized action. The paper presented a complete study about the integration of blockchain in IoT enabled UAV.