Consumer IoT: Security Vulnerability Case Studies and Solutions
Abstract
As consumer Internet of Things (IoT) devices become increasingly pervasive in our society, there is a need to understand the underpinning security risks. Therefore, in this article, we describe the common attacks faced by consumer IoT devices and suggest potential mitigation strategies. We hope that the findings presented in this article will inform the future design of IoT devices.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Early industrial control systems employed proprietary fieldbus protocols PROFIBUS, Modbus, and DNP3 over dedicated hardware links largely inaccessible to adversaries without physical proximity.
“Early industrial control systems employed proprietary fieldbus protocols PROFIBUS, Modbus, and DNP3 over dedicated hardware links largely inaccessible to adversaries without physical proximity.[29], [12]”
From Zero Trust Architecture for Smart Factories: Securing Digital Twins and Cyber-Physical OT Systems (2026) · cites this paper as [12]
Alladi et al. documented a structural shift toward targeted, multi-stage campaigns that exploit OT-IT integration pathways rather than attacking OT systems directly.
“Alladi et al. documented a structural shift toward targeted, multi-stage campaigns that exploit OT-IT integration pathways rather than attacking OT systems directly a pattern that the proposed ZTA directly addresses by hardening the OT-IT boundary.[12]”
From Zero Trust Architecture for Smart Factories: Securing Digital Twins and Cyber-Physical OT Systems (2026) · cites this paper as [12]
Operational Technology security has historically relied on the physical isolation paradigm.
“Operational Technology security has historically relied on the physical isolation paradigm.”
From Zero Trust Architecture for Smart Factories: Securing Digital Twins and Cyber-Physical OT Systems (2026) · cites this paper as [12]
Alladi et al. documented IT-to-OT pivot as the dominant multi-stage attack progression in ICS incidents from 2017 onward.
“Alladi et al. specifically documented IT-to-OT pivot as the dominant multi-stage attack progression in ICS incidents from 2017 onward.[12]”
From Zero Trust Architecture for Smart Factories: Securing Digital Twins and Cyber-Physical OT Systems (2026) · cites this paper as [12]
Each scenario is mapped to its corresponding MITRE ATT&CK for ICS technique, providing a taxonomy-grounded and reproducible basis for evaluation.
“Each scenario is mapped to its corresponding MITRE ATT&CK for ICS technique, providing a taxonomy-grounded and reproducible basis for evaluation.[1], [7], [12], [39]”
From Zero Trust Architecture for Smart Factories: Securing Digital Twins and Cyber-Physical OT Systems (2026) · cites this paper as [12]
Many existing OT devices lack the computational resources to implement TPM-based attestation or mutual TLS, and many communicate using legacy fieldbus protocols that do not natively support authentication or encryption.
“Many existing OT devices lack the computational resources to implement TPM-based attestation or mutual TLS, and many communicate using legacy fieldbus protocols Modbus RTU, DNP3, PROFIBUS DP that do not natively support authentication or encryption.[5], [12]”
From Zero Trust Architecture for Smart Factories: Securing Digital Twins and Cyber-Physical OT Systems (2026) · cites this paper as [12]
In environments without cryptographic firmware verification, a compromised update package may be applied without detection.
“In environments without cryptographic firmware verification, the compromised update package may be applied without detection.[12], [28]”
From Zero Trust Architecture for Smart Factories: Securing Digital Twins and Cyber-Physical OT Systems (2026) · cites this paper as [12]
No citation lists for this paper
No citation lists for this paper yet — checked again daily.
References 10 · Cited by 344
- Authors
- Alladi, T., Chamola, V., Sikdar, B., & Choo, K.-K. R.
- Affiliations
- Birla Institute of Technology and Science, Pilani (IN)
- National University of Singapore (SG)
- The University of Texas at San Antonio (US)
- Venue
- IEEE Consumer Electronics Magazine
- Published
- 2020-03-01
- Volume
- 9
- Issue
- 2
- Pages
- 17-25
- ISSN
- 2162-2248 (ISSN-L)
- 2162-2256
- OpenAlex
- W3004171232
- Cited by
- 344
- References
- 10
- Citations by year
- 2026: 14 · 2025: 33 · 2024: 60 · 2023: 65 · 2022: 56 · 2021: 55 · 2020: 57 · 2019: 3 · 2018: 1
- FWCI
- 27.37
- Type
- journal article
- Language
- en
- Open access
- closed
- Licence
- Locations
- IEEE Consumer Electronics Magazine (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
- Keywords
- consumer IoT devices, Internet of Things security, security vulnerabilities, attack vectors, security mitigation strategies, IoT device design
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
