Comprehensive Study Of security of IoT

A Comprehensive Study of Security
of Internet-of-Things
POOJA YADAV
(2014KUCP1029)

TABLE OF CONTENTS
● INTRODUCTION
● OBJECTIVE
● IOT REFERENCE MODELS
● SCOPE OF APPLICATIONS
● POTENTIAL ATTACKERS AND THEIR MOTIVATIONS
● DEFINITION OF SECURITY IN THE SCOPE OF IOT
● VULNERABILITIES OF IOT
● SOLUTIONS FOR SECURITY ISSUES
● CONCLUSION

INTRODUCTION
We first briefly describe three widely-known IoT reference models and define security in the context of IoT.
Second, we discuss the possible applications of IoT and potential motivations of the attackers who target this new
paradigm.
Third, we discuss different attacks and threats. Fourth, we describe possible countermeasures against these attacks.
Finally, we introduce two emerging security challenges not yet explained in detail in previous literature.

OBJECTIVE
The main objective of the paper is to give the reader the opportunity to explore which attacks have been launched, how
they have been addressed, and which threats still lurk.

IoT REFERENCE MODELS
The three-level model is an extended version of wireless sensor networks (WSNs).IoT as a combination of WSNs and
cloud servers, which offer different services to the user.[1]
The five-level model is an alternative that has been proposed to facilitate interactions among different sections of an
enterprise by decomposing complex systems into simplified applications consisting of an ecosystem of simpler and well-
defined components [1].

Figure 1. Three-level model[3] Figure 2. Five-level model[3]

Figure 3. CISCO Sevel-Level Model[1]

SCOPE OF APPLICATIONS
● Smart vehicles
● Smart buildings
● Health monitoring
● Energy management
● Environmental monitoring
● Construction management
● Food supply chain

POTENTIAL ATTACKERS AND THEIR MOTIVATIONS
Potential attackers might be interested in stealing sensitive information, e.g., credit card numbers, location data, financial
accounts’ passwords, and health-related information, by hacking IoT devices.
Moreover, they might try to compromise IoT components, e.g., edge nodes, to launch attacks against a third-party entity.

DEFINITION OF SECURITY IN THE SCOPE OF IOT
Security requirements are broken down into three main categories:
● confidentiality,
● integrity,
● availability
They provide a comprehensive list of security requirements by analyzing and examining a variety of information,
assurance, and security.

VULNERABILITIES OF IOT
Analysis of possible attacks and vulnerabilities at each level of the edge-side layer.
1. Edge Nodes Level
2. Communication Level
3. Edge Computing Level

Figure 3 . Summary of attacks and countermeasures [1].

● Confidentiality - C
● Integrity - I
● Availability -A
● Accountability -AC
● Auditability - AU
● Trustworthiness -TW
● Non-repudiation - NR
● Privacy -P
Abbreviations

EMERGING SECURITY CHALLENGES
● Exponential increase in the number of weak links
● Unexpected use of data

CONCLUSION
The emergence of the IoT paradigm in the last decade has led (and will continue to lead) to several threats and possible
attacks against security or privacy of things or individuals.
This survey attempted to summarize several IoT security attacks or concerns and countermeasures against them in a
level-by-level fashion.

BIBLIOGRAPHY
1. ARSALAN MOSENIA , (Student Member, IEEE) AND NIRAJ K. JHA, (Fellow, IEEE),”A Comprehensive Study
of Security of Internet-of-Things”,pp 1-17,2016.
2. L. Atzori, A. Iera, and G. Morabito, “The Internet of Things: A survey,” Comput. Netw., vol. 54, no. 15, pp.
2787–2805, 2010.
3. “R. Khan, S. U. Khan, R. Zaheer, and S. Khan, “Future internet: The Internet of Things architecture, possible
applications and key challenges,” in Proc. IEEE 10th Int. Conf. Frontiers Inf. Technol., 2012, pp. 257–260.

Comprehensive Study Of security of IoT

More Related Content

What's hot (20)

Similar to Comprehensive Study Of security of IoT (20)

Recently uploaded (20)

Comprehensive Study Of security of IoT