Security Issues and Challenges in IoT

Technology advancements blend to masses with diverse and heterogeneous environments. The Internet of Things (IoT) and Cloud Computing has broken through reachability and availability of services. The security, privacy requirements and challenges manifest with the heterogeneity and the wide range of application domains posing a major concern in adoption of IoT. The literature addresses these changing requirements individually. The paper presents a top-down survey starting with general security challenges in IoT moving to security and privacy challenges, and later exploring security frameworks of IoT. The millions of wide range of devices produce a huge amount of data. Identifying and authenticating these devices and allowing them to process their data locally improves the performance, reduces the bandwidth usage, increases the battery usage and reduces the security risk of attacks making the devices self reliant. The survey identifies the less explored research gaps to group them and address the concerns related to device management, user management, key management, trust management and data management. The surveyed secured frameworks in IoT address the multiple dimensions of security concerns and their aspects.

The Internet of Things (IoT) has begun transforming our digital space, in which everyday objects are interconnected and capable of communicating with each other. This transformation not only simplifies our lives but also creates unprecedented opportunities and enhances efficiency in areas such as smart homes, healthcare, industrial manufacturing, and urban management. However, as with any technological breakthrough, IoT requires a careful and well-planned implementation. The large-scale and unregulated deployment of IoT devices raises significant security concerns that must be mitigated.At the core of IoT devices lies the ability to autonomously collect, process, and transmit information independently of human intervention. While this autonomy is the primary innovation, it also introduces numerous security vulnerabilities. For instance, IoT devices often operate on private and public networks, increasinf the attack surface for malicious actors capable of compromising data confidentiality and integrity. However, security is not the sole concern. The reliability and availability of the critical functions these devices provide are equally crucial. From thermostats and smartwatches to autonomous vehicles and urban infrastructure, compromised IoT devices can cause anything from minor inconveniences to catastrophic failures affecting millions.IoT devices typically have limited computational power and memory. These constraints often render the implementation of traditional security measures, such as complex encryption algorithms, impractical. Given these limitations and the explosive growth in the number of IoT devices, the potential for unauthorized interference with systems also increases. According to Cybersecurity Ventures, the number of IoT devices worldwide is expected to reach 25.1 billion by 2025. Each device represents a potential entry point for attackers. This widespread proliferation creates a vast, often poorly secured, network of interconnected devices susceptible to exploitation by malicious actors for data theft, DDoS attacks, and other cyber threats.The infrastructure surrounding IoT devices can be divided into four levels: perception (node capture, node impersonation, replay attack, timing attack, sleep deprivation attack), network (eavesdropping, DoS/DDoS attacks, Man-in-the-Middle attacks), data processing (resource exhaustion, exploits), and application (exploits). Therefore, key security challenges in IoT include unauthorized access to devices and data, communication interception, data manipulation, and depletion of system and device resources.The purpose of this article is to describe a comprehensive proposed solution for securing IoT systems. There is an urgent need for scalable and reliable solutions. Our approach considers the unique characteristics of IoT ecosystems, particularly their diversity, limited computational resources, and the physical nature of the devices.

Elderly population in the Asian countries is increasing at a very fast rate. Lack of healthcare resources and infrastructure in many countries makes the task of provding proper healthcare difficult. Internet of things (IoT) in healthcare can address the problem effectively. Patient care is possible at home using IoT devices. IoT devices are used to collect different types of data. Various algorithms may be used to analyse data. IoT devices are connected to the internet and all the data of the patients with various health reports are available online and hence security issues arise. IoT sensors, IoT communication technologies, IoT gadgets, components of IoT, IoT layers, cloud and fog computing, benefits of IoT, IoT-based algorithms, IoT security issues, and IoT challenges are discussed in the chapter. Nowadays global epidemic COVID19 has demolished the economy and health services of all the countries worldwide. Usefulness of IoT in COVID19-related issues is explained here.

Internet of things (IoT) is becoming increasingly important and ubiquitous in home and industries. It makes object a part of the Internet and fuses the digital and physical world together. However, if not properly secured, IoT device can be vulnerable to tampering that can change the content of the data stored in the network. Blockchain, a technology used in cryptocurrency, can be used for addressing the security and privacy challenges in IoT. Blockchain can be beneficial to IoT by adding more security layer and reducing dependency on a central authority. This paper proposed to develop a blockchain based platform for IoT application. Blockchain technology can be utilized to provide a decentralized network, creating a more secured IoT system. The proposed blockchain network will be based on Ethereum blockchain network allowing the use smart contract application for management of IoT devices. Experiment is conducted to show the feasibility of the blockchain based platform. The proposed blockchain based platform is capable of managing several IoT devices connected to the network.

The Internet of Things (IoT) as an important technology consists of a heterogeneous and huge number of devices that generates an enormous amount of data in various applications. However, generating and transmitting huge amount of data in the IoT makes it crucial to implement a secure and safe data transmission scheme. Cryptography methods can secure the confidentiality, data integrity, access control, and authentication. Due to constrained resources in IoT devices, providing classical cryptography schemes isn’t efficient for IoT applications, so a lightweight cryptography scheme is one of the most important solutions to overcome security challenges in IoT. In this paper, a new security scheme called ECCCSASHA256 based on Elliptic Curve Cryptography (ECC) and Secure Hash Algorithm (SHA-256) using Crow Search Algorithm (CSA) has been proposed for secure data transmission in IoT devices. The ECCCSASHA256 model uses the CSA for generating a private key to encode the elliptic curve. Furthermore, the proposed scheme uses SHA-256 model for hashing the incoming encoded data using ECC. The simulation results indicate that the average throughput of the proposed model was about 8.22% and 8.97% higher in encryption and 8.72% and 9.81% higher in decryption compared to 3DES&ECC&SHA-256 and RC4&ECC&SHA-256, respectively.

More and more gadgets are getting internet access as a result of advances in technology, collectively known as the "Internet of Things" (IoT). In common parlance, the network of physical and digital components that make up commonplace objects is referred to as the "Internet of Things" (IoT). The Internet of Things is a new and exciting area of research thanks to the worldwide proliferation of advanced technologies. One example is the Internet of Things (IoT), which lets almost any object, user, service, network, location, or set of circumstances connect with each other. Since Io$\mathrm{T}^{\prime}$s popularity has skyrocketed in the last several years, so have security concerns. AI is at the top of the list because it makes it possible to create complex algorithms, which are needed to protect critical infrastructure like networks, systems, and the Internet of Things (IoT). Even so, hackers have learned to use AI to their advantage, and some of them even use AI to do bad things. This article aims to do just that by presenting and summarising the relevant literature in these areas. In order to do this, it gathers information about Internet of Things devices, AI systems, AI attacks, and AI defenses.

Recently, two terms, namely Big Data and Internet of Things (IoT) have gained popularity individually. However, their interconnections are not fully explored and understood. It is expected that the fusion of Big Data and IoT would create many complex systems for smart cities. While the data from IoT lies in Big Data, the scale of operations are completely different in terms of providing the required real-time analytics for such smart systems. Even though NoSQL databases and other next generation solutions could be deployed to achieve real-time responses, the major security challenges need to be understood as mission critical and sensitive data intertwines Big Data and IoT. In this paper, we identify the security challenges shared by the closely-knit Big Data and IoT in three main risk areas: i) NoSQL security vulnerabilities, ii) mobile IoT (M-IoT) security and privacy constraints and iii) encryption key security threats. We perform a comparative study of security vulnerabilities of NoSQL databases and identify the security and privacy constraints of M-IoT networks. Encryption key attacks for resource constrained IoT devices are also illustrated mathematically. Overall, this paper explores new research directions in these prime areas of security and privacy that would result in solution opportunities for a meaningful fusion of Big Data and IoT for a smart environment.

The Internet of Things is an emerging technology across the world, which helps to connect sensors, vehicles, hospitals, industries and consumers through internet connectivity. This type of architecture leads to Smart Cities, Smart home, Smart agriculture and Smart World. Architecture of IoT is very complex because of the large number of devices, link layer technology and services that are involved in this system. However, security in IoT is the most important parameter. In this paper, we give an overview of the architecture of IoT with the help of Smart World. In the second phase of this paper, we discuss the security challenges in IoT followed by the security measures in IoT. Finally, these challenges, which are discussed in the paper, could be research direction for future work in security for IoT.

Privacy preserving Internet of Things: From privacy techniques to a blueprint architecture and efficient implementation

Software-defined Naming, Discovery and Session Control for IoT Devices and Smart Phones in the Constraint Networks

The Internet of Things (IoT) is leading today’s digital transformation. Relying on a combination of technologies, protocols, and devices such as wireless sensors and newly developed wearable and implanted sensors, IoT is changing every aspect of daily life, especially recent applications in digital healthcare. IoT incorporates various kinds of hardware, communication protocols, and services. This IoT diversity can be viewed as a double-edged sword that provides comfort to users but can lead also to a large number of security threats and attacks. In this survey paper, a new compacted and optimized architecture for IoT is proposed based on five layers. Likewise, we propose a new classification of security threats and attacks based on new IoT architecture. The IoT architecture involves a physical perception layer, a network and protocol layer, a transport layer, an application layer, and a data and cloud services layer. First, the physical sensing layer incorporates the basic hardware used by IoT. Second, we highlight the various network and protocol technologies employed by IoT, and review the security threats and solutions. Transport protocols are exhibited and the security threats against them are discussed while providing common solutions. Then, the application layer involves application protocols and lightweight encryption algorithms for IoT. Finally, in the data and cloud services layer, the main important security features of IoT cloud platforms are addressed, involving confidentiality, integrity, authorization, authentication, and encryption protocols. The paper is concluded by presenting the open research issues and future directions towards securing IoT, including the lack of standardized lightweight encryption algorithms, the use of machine-learning algorithms to enhance security and the related challenges, the use of Blockchain to address security challenges in IoT, and the implications of IoT deployment in 5G and beyond.

The developers and users of Internet of Things (IoT) systems and devices bear a collective obligation to ensure that IoT systems and devices do not make the Internet and other users vulnerable to any potential harm. This chapter proposes a novel network secure framework that can be adapted to the future IoT and finally gives details for the security verification system design. This framework should focus on enhancing the efficacy, dependability, accountability, and regulation in the overall structure that checks the security issues. The chapter discusses the structuring of a security authentication system in the field of IoT. It presents the factors that pose a threat to the IoT security. These include Unprotected Network services, Cloud, mobile and an absence of security configuration. The chapter illustrates the essential components of IoT security and lists the potential challenges in terms of IoT security. It also discusses the concepts representing the risks that increase the probability of intrusions in the IoT devices.

<span lang="EN-US">Cloud computing is a new technology which refers to an infrastructure where both software and hardware application are operate for the network with the help of internet. Cloud computing provide these services with the help of rule know as you pay as you go on. Internet of things (IoT) is a new technology which is growing rapidly in the field of telecommunications. The aim of IoT devices is to connect all things around us to the Internet and thus provide us with smarter cities, intelligent homes and generally more comfortable lives. The combation of cloud computing and IoT devices make rapid development of both technologies. In this paper, we present information about IoT and cloud computing with a focus on the security issues of both technologies. Concluding we present the contribution of cloud computing to the IoT technology. Thus, it shows how the cloud computing technology improves the function of the IoT. Finally present the security challenges of both technologies IoT and cloud computing.</span>

Internet of Things is a fast growing technology. Home appliances, clothes, traffic lights, cars, cameras, and more things used by human are prone to be connected to the IoT. Any new technology has its own challenges. Security is one of the greatest challenges of IoT. Security has been a challenge about the Internet, but in IoT domain, security is wider problem. For instance, manipulating the system of traffic lights will disrupt the security and public discipline. The daily life of human being is involved in the IoT, always and anytime is carried or controlled by users, therefore a vital role is going to be played in human interactions by IoT. Influencing the social interactions of individuals and their everyday lives can mean the penetration in the IoT and challenging the security. Social engineering is not a new concept; SE is an old category that is growing steadily with no end in its vision. SE is effective because human prefer to trust naturally. Social engineers target human factors and use the trust to thieve the purposed information. Generally, SE influences social interactions. Using SE against IoT and lack of knowledge among society will be able to cause a tragedy. SE is introduced in this paper and then security challenges of IoT will be discussed. People’s behaviors to keep their security will be discussed in this paper.

The Internet of things (IoT) is widely used to implement different applications like smart home, smart health care, smart city, and smart farming system. The development of large smart devices/sensors enables smart technologies making it possible to implement the smart application in real time. The IoT system has security challenges like authentication, data privacy, access control, and intrusion detection system. Similarly, the computation of the sensed information from the environment is a challenging task. The computation must perform using distributed or decentralized architecture to overcome the centralized system difficulty. In a distributed/decentralized system when multiple nodes participate in a computational process, there is the risk of mutual consensus problem, malicious node detection, or data modification attacks. In this paper, the authors have identified machine learning as a solution to address some of the existing security and computational challenges. The paper also explained the implementation platform available for the integration of IoT with machine learning.KeywordsSecurityComputationMachine learningSecure communicationIoT