CoChat
Sign Up
Cited by 219IoT and Edge/Fog ComputingInternet of Things and AIAdvanced Authentication Protocols Security

Understanding Security Requirements and Challenges in Internet of Things (IoT): A Review

Open access
Hameed, Sufian, Khan, Faraz Idris, Hameed, Bilal·2019·Journal of Computer Networks and Communications
DOI 10.1155/2019/9629381
Open this paper in CoChat — free accountOpen PDF

Abstract

Internet of things (IoT) is realized by the idea of free flow of information amongst various low-power embedded devices that use the Internet to communicate with one another. It is predicted that the IoT will be widely deployed and will find applicability in various domains of life. Demands of IoT have lately attracted huge attention, and organizations are excited about the business value of the data that will be generated by deploying such networks. On the contrary, IoT has various security and privacy concerns for the end users that limit its proliferation. In this paper, we have identified, categorized, and discussed various security challenges and state-of-the-art efforts to resolve these challenges.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1155/2019/9629381

Cites

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • There is a substantial gap between existing IT and OT domains which makes the IIoT environment more vulnerable to existing security issues.

    “There is a substantial gap between the existing information technology and operational technology (IT/OT) domains which makes the IIoT environment more vulnerable to existing security issues [5,6,7,8,9,10].”

    From Industrial IoT, Cyber Threats, and Standards Landscape: Evaluation and Roadmap (2021) · cites this paper as [10]

    Section 4.1 (page not provided) says that bringing Modbus and SCADA systems into IP-based networks is expected to increase attacks, supporting the claim of increased security risk in industrial systems. It does not identify a substantial gap between IT and OT domains as the cause. (LLM, conf=0.84)

    Experimental — accuracy not yet measured

  • With increased usage of IoT-based devices, assessing, monitoring, and securing endpoints is subject to various security-based challenges including lack of standard regulations for all IoT devices from different vendors and trusting third-party cloud vendors.

    “With the increased usage of IoT-based devices, assessing, monitoring, and securing the endpoints of these devices is subject to various security-based challenges (e.g., lack of standard regulations for all IoT devices from different vendors [9,10], trusting third-party cloud vendors).”

    From Industrial IoT, Cyber Threats, and Standards Landscape: Evaluation and Roadmap (2021) · cites this paper as [10]

    Split into 2 atoms — 0 confirmed, 2 partially supported, 0 disputed, 0 misattributed, 0 unverifiable. Expand the claim to see per-atom verdicts.

    Experimental — accuracy not yet measured

  • There are a number of other risks associated with securing the M2M communication environment such as poorly configured devices, malicious IoT node injection, and standardization of M2M communications.

    “Besides this, there are a number of other risks associated with securing the M2M communication environment such as [10,18,19,20] poorly configured devices, malicious IoT node injection, and standardization of M2M communications (IoT, cloud, edge, etc.).”

    From Industrial IoT, Cyber Threats, and Standards Landscape: Evaluation and Roadmap (2021) · cites this paper as [10]

    Section 4.2 (Challenges; page unavailable) says malicious nodes can be introduced into IoT networks with relative ease, supporting the node-injection risk. Section 5.3 (Existing Solution and Discussion; page unavailable) mentions M2M standardization activities but does not identify standardization as a security risk. The passages do not identify poorly configured devices as a risk. (LLM, conf=0.86)

    Experimental — accuracy not yet measured

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

The citation lists haven’t been fetched yet

References 34 · Cited by 219

Research works printed but not linked: 64

  1. X. Xiaohui, "Study on security problems and key technologies of the internet of things," in Proceedings of IEEE Fifth In- ternational Conference Computational and Information Sci- ences (ICCIS), Hubei, China, June 2013.
  2. A. Kanuparthi, K. Ramesh, and S. Addepalli, "Hardware and embedded security in the context of internet of things," in Proceedings of the 2013 ACM Workshop on Security, Privacy & Dependability for Cyber Vehicles, pp. 61-64, Berlin, Germany, November 2013.
  3. N. Aleisa and K. Renaud, "Privacy of the internet of things: a systematic literature review," in Proceedings of 50th Hawaii International Conference on System Sciences, Waikoloa, HI, USA, 2017.
  4. J. Veijalainen, D. Kozlov, and Y. Ali, "Security and privacy threats in IoT architectures," in Proceedings of 7th In- ternational Conference on Body Area Networks, Oslo, Norway, September 2012.
  5. D. Evans and D. M. Eyers, "Efficient data tagging for man- aging privacy in the internet of things," in Proceedings of 2012 IEEE International Conference on Green Computing and Communications, pp. 244-248, Besancon, France, November 2012.
  6. B. Khoo, "RFID as an enabler of the internet of things: issues of security and privacy," in Proceedings of 4th International Conference on Cyber, Physical and Social Computing, pp. 709-712, Dalian, China, 2011.
  7. F. V. Meca, J. H. Ziegeldorf, P. M. Sanchez, O. G. Morchon, S. S. Kumar, and S. L. Keoh, "HIP security architecture for the IP-based internet of things," in Proceedings of IEEE Advanced Information Networking and Applications Workshops (WAINA), Barcelona, Spain, March 2013.
  8. O. Garcia-Morchon and K. Wehrle, "Modular context-aware access control for medical sensor networks," in Proceedings of 15th ACM Symposium on Access Control Models and Technologies, Pittsburgh, PA, USA, June 2010.
  9. D. Christin, A. Reinhardt, and M. Hollick, "On the efficiency of privacy-preserving path hiding for mobile sensing applica- tions," in Proceedings of IEEE LCN, Sydney, NSW, Australia, 2013.
  10. S. Gutwirth, R. Leenes, P. De Hert, and Y. Poullet, European Data Protection: Coming of age, Springer Science & Business Media, Berlin, Germany, 2012.
  11. O. Garcia-Morchon, S. L. Keoh, S. Kumar, P. Moreno-San- chez, F. Vidal-Meca, and J. H. Ziegeldorf, "Securing the IP- based internet of things with HIP and DTLS," in Proceedings of Sixth ACM Conference on Security and Privacy in Wireless and Mobile Networks, Budapest, Hungary, April 2013.
  12. D. Christin, M. Hollick, and M. Manulis, "Security and privacy objectives for sensing applications in wireless com- munity networks," in Proceedings of ICCCN, pp. 1-6, Zurich, Switzerland, August 2010.
  13. M. R. Schurgot, D. A. Shinberg, and L. G. Greenwald, "Ex- periments with security and privacy in IoT networks," in Proceedings of IEEE World of Wireless, Mobile and Multimedia Networks (WoWMoM), Boston, MA, USA, June 2015.
  14. T. U. Darmstadt, "Security and privacy challenges in in- dustrial internet of things," in Proceedings of 52nd Annual Design Automation Conference, pp. 1-6, San Francisco, CA, USA, June 2015.
  15. J. Daubert, W. Alexander, and P. Kikiras, "A view on privacy & trust in IoT," in Proceedings of IOT/CPS-Security Workshop IEEE International Conference on Communications (ICC), London, UK, June 2015.
  16. X. Lu, Q. Li, Z. Qu, and P. Hui, "Privacy information security classification study in internet of things," in Proceedings of 2014 International Conference on Identification, Information and Knowledge in the Internet of ings, pp. 162-165, Beijing, China, October 2014.
  17. S. Sciancalepore, A. Capossele, G. Piro, G. Boggia, and G. Bianchi, "Key management protocol with implicit certif- icates for IoT systems," in Proceedings of Workshop on IoT challenges in Mobile and Industrial Systems-IoT-Sys, pp. 37- 42, Florence, Italy, May 2015.
  18. M. Brachmann, S. L. Keoh, O. G. Morchon, and S. S. Kumar, "End-to-End transport security in the IP-based internet of things," in Proceedings of 21st International Conference on Computer Communications and Networks (ICCCN), pp. 1-5, Munich, Germany, July-August 2012.
  19. O. Garcia-Morchon, D. Gomez-Perez, J. Gutierrez, R. Rietman, B. Schoenmakers, and L. Tolhuizen, "HIMMO-a lightweight collusion resistant key predistribution scheme," in Proceedings of IACR 2015, Mumbai, India, 2015.
  20. O. Garcia-Morchon, R. Rietman, L. Tolhuizen, D. Gomez, and J. Gutierrez, " e MMO problem," in Proceedings of the 39th International Symposium on Symbolic and Algebraic Computation, New York, NY, USA, July 2014.
  21. O. Garcia-Morchon, L. Tolhuizen, D. Gomez, and J. Gutierrez, "Towards fully collusion-resistant ID-based es- tablishment of pairwise keys," in Proceedings of Extended Abstracts of the ird Workshop on Mathematical Cryptology (WMC 2012) and the ird International Conference on Symbolic Computation and Cryptography (SCC 2012), pp. 30-36, Castro Urdiales, Spain, July 2012.
  22. O. Morchon, H. Baldus, and D. Sanchez, "Resource-efficient security for medical body sensor networks," in Proceedings of Wearable and Implantable Body Sensor Networks, BSN 2006, pp. 80-83, Cambridge, MA, USA, April 2006.
  23. G. Peretti, V. Lakkundi, and M. Zorzi, "BlinkToSCoAP: an end-to-end security framework for the internet of things," in Proceedings of Communication Systems and Networks (COMSNETS), pp. 1-6, Bangalore, India, January 2015.
  24. D. Dinu, A. Biryukov, and J. Großsch, "FELICS fair evaluation of lightweight cryptographic systems," in Proceedings of NIST Workshop on Lightweight Cryptography, Gaithersburg, MD, USA, April 2015.
  25. L. Seitz, G. Selander, and C. Gehrmann, "Authorization framework for the internet-of-things," in Proceedings of World of Wireless, Mobile and Multimedia Networks (WoWMoM), pp. 1-6, Sydney, Australia, June 2013.
  26. G. Piro, G. Boggia, and L. a. Grieco, "A standard compliant security framework for IEEE 802.15.4 networks," in Pro- ceedings of Internet of ings (WF-IoT), pp. 27-30, Seoul, South Korea, March 2014.
  27. T. Kothmayr, C. Schmitt, W. Hu, M. Brunig, and G. Carle, "A DTLS based end-to-end security architecture for the Internet of ings with two-way authentication," in Proceedings of Local Computer Networks, LCN (2012), pp. 956-963, Clear- water Beach, FL, USA, October 2012.
  28. J. Granjal, E. Monteiro, and J. S. Silva, "On the effectiveness of end-to-end security for internet-integrated sensing applica- tions," in Proceedings of 2012 IEEE International Conference on Green Computing and Communications, pp. 87-93, Besancon, France, November 2012.
  29. S. Hameed, B. Hameed, S. A. Hussain, and W. Khalid, "Lightweight security middleware to detect malicious content in NFC tags or smart posters," in Proceedings of 2014 IEEE 13th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), pp. 900-905, Beijing, China, September 2014.
  30. S. Hameed, U. M. Jamali, and A. Samad, "Integrity protection of NDEF message with flexible and enhanced NFC signature records," in 2015 IEEE Proceedings of Trustcom/BigDataSE/ ISPA, vol. 1, pp. 368-375, Helsinki, Finland, August 2015.
  31. S. Hameed, U. M. Jamali, and A. Samad, "Protecting NFC data exchange against eavesdropping with encryption record type definition," in Proceedings of 2016 IEEE/IFIP Network Op- erations and Management Symposium (NOMS), pp. 577-583, Taipei, Taiwan, April 2016.
  32. S. Yi, P. Naldurg, and R. Kravets, "Security-aware ad-hoc routing for wireless networks," in Proceedings of 2nd ACM International Symposium on Mobile Ad Hoc Networking & Computing, Long Beach, CA, USA, 2001.
  33. T. Heer, S. G¨otz, O. Morchon, and K. Wehrle, "Alpha: an adaptive and lightweight protocol for hop-by-hop authenti- cation," in Proceedings of ACM CoNEXT Conference, Madrid, Spain, December 2008.
  34. N. Lasla, A. Derhab, A. Ouadjaout, M. Bagaa, and Y. Challal, "SMART: secure multi-paths routing for wireless sensor networks," in Proceedings of International Conference on Ad- Hoc Networks and Wireless, Benidorm, Spain, June 2014.
  35. P. L. R. Chze and K. S. Leong, "A secure multi-hop routing for IoT communication," in Proceedings of IEEE World Forum of Internet of ings (WF-IoT), Reston, VA, USA, December 2014.
  36. R. Bonetto, N. Bui, V. Lakkundi, A. Olivereau, A. Serbanati, and M. Rossi, "Secure communication for smart IoT objects: protocol stacks, use cases and practical examples," in World of Wireless, Mobile and Multimedia Networks (WoWMoM), pp. 1-7, San Francisco, CA, USA, June 2012.
  37. K. Zhao and L. Ge, "A survey on the internet of things se- curity," in Proceedings of 2013 Ninth International Conference on Computational Intelligence and Security, pp. 663-667, Sichan Province, China, December 2013.
  38. M. G. Zapata and N. Asokan, "Securing ad hoc routing protocols," in Proceedings of ACM Workshop on Wireless Security, pp. 1-10, Atlanta, GA, USA, September 2002.
  39. C. Cervantes, D. Poplade, M. Nogueira, and A. Santos, "Detection of sinkhole attacks for supporting secure routing on 6LoWPAN for internet of things," in Proceedings of 2015 IFIP/IEEE International Symposium on Integrated Network Management (IM), pp. 606-611, Ottawa, ON, Canada, May 2015.
  40. N. B. Priyantha, A. Kansal, M. Goraczko, and F. Zhao, "Tiny web services : design and implementation of interoperable and evolvable sensor networks," in Proceedings of 6th ACM Conference on Embedded Network Sensor Systems, pp. 253- 266, Raleigh, NC, USA, November 2008.
  41. S. Br, S. Weißleder, and M. Malek, "A fault taxonomy for service-oriented architecture," in Proceedings of High Assur- ance Systems Engineering Symposium, pp. 367-368, Dallas, Texas, USA, November 2007.
  42. X. Wang, J. Wang, Z. Zheng, Y. Xu, and M. Yang, "Service composition in service-oriented wireless sensor networks with persistent queries," in Proceedings of 6th IEEE Consumer Communications and Networking Conference, pp. 1-5, Las Vegas, NV, USA, June 2009.
  43. D. Kuptsov, A. Gurtov, O. G. Morchon, and K. Wehrle, "Brief announcement: distributed trust management and revoca- tion," in Proceedings of 29th ACM SIGACT-SIGOPS Sympo- sium on Principles of Distributed Computing, pp. 233-234, Zurich, Switzerland, July 2010.
  44. O. Garcia-Morchon and K. Wehrle, "Efficient and context- aware access control for pervasive medical sensor networks," in Proceedings of 2010 8th IEEE International Conference on Pervasive Computing and Communications Workshops (PERCOM Workshops), pp. 322-327, Mannheim, Germany, 2010.
  45. V. Singhvi, A. Krause, C. Guestrin, J. Garrett, and H. S. Matthews, "Intelligent light control using sensor net- works," in Proceedings of SenSys 2005, San Diego, CA, USA, November 2005.
  46. S. Misra, A. Gupta, P. V. Krishna, H. Agarwal, and M. S. Obaidat, "An adaptive learning approach for fault- tolerant routing in internet of things," in Proceedings of 2012 IEEE Wireless Communications and Networking Con- ference (WCNC), pp. 815-819, Paris, France, April 2012.
  47. P. H. Su, C. S. Shih, J. Y. J. Hsu, K. J. Lin, and Y. C. Wang, "Decentralized fault tolerance mechanism for intelligent IoT/ M2M middleware," in Proceedings of IEEE World Forum on Internet of ings WF-IoT 2014, Seoul, Republic of Korea, March 2014.
  48. M. Rajan, P. Balamuralidhar, K. Chethan, and M. Swarnahpriyaah, "A self-reconfigurable sensor network management system for internet of things paradigm," in Proceedings of 2011 International Conference on Devices and Communications (ICDeCom), Ranchi, India, February 2011.
  49. K. An, "Resource management and fault tolerance principles for supporting distributed real-time and embedded systems in the cloud," in Proceedings of Doctoral Symposium on In- ternational Middleware Conference, pp. 1-6, Montreal, Canada, December 2012.
  50. J. Kim, S. Yu, and J. Lee, "Wireless sensor network man- agement for sustainable internet of things," in Proceedings of 2014 IEEE World Forum on Internet of ings (WF-IoT), pp. 177-178, Seoul, Republic of Korea, March 2014.
  51. T. N. Gia, A.-M. Rahmani, T. Westerlund, P. Liljeberg, and H. Tenhunen, "Fault tolerant and scalable IoT-based archi- tecture for health monitoring," in Proceedings of IEEE Sensors Applications Symposium, pp. 1-6, Catania, Italy, April 2015.
  52. C. Sommer, F. Hagenauer, and F. Dressler, "A networking perspective on self-organizing intersection management," in Proceedings of Internet of ings (WFIoT), pp. 230-234, Seoul, Republic of Korea, March 2014.
  53. V. Cackovic and Z. Popovic, "Management in M2M net- works," in Proceedings of 37th International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO), pp. 501-506, Opatija, Croatia, May 2014.
  54. C. P. Mayer, "Security and privacy challenges in the internet of things," Electronic Communication of the European Associa- tion of Software Science and Technology-ECEASST, vol. 17, pp. 1-12, 2009.
  55. F. Liu, X. Cheng, and D. Chen, "Insider attacker detection in wireless sensor networks," in Proceedings of INFOCOM, pp. 1937-1945, Anchorage, AK, USA, 2007.
  56. D. Juneja and N. Arora, "An ant based framework for pre- venting DDoS Attack in wireless sensor networks," In- ternational Journal of Advancements in Technology, vol. 1, no. 1, pp. 34-44, 2010.
  57. V. Nigam, S. Jain, and K. Burse, "Profile based scheme against DDoS attack in WSN," in Proceedings of Communication Systems and Network Technologies (CSNT), pp. 112-116, Bhopal, India, April 2014.
  58. A. D. Wood and J. A. Stankovic, "A taxonomy for denial-of- service attacks in wireless sensor networks," in Handbook of Sensor Networks: Compact Wireless and Wired Sensing Sys- tems, CRC Press, Boca Raton, FL, USA, 2004.
  59. D. Yang, A. Usynin, and J. Hines, "Anomaly-based intrusion detection for SCADA systems," in Proceedings of 5th Intl. Topical Meeting on Nuclear Plant Instrumentation, Control and Human Machine Interface Technologies (NPIC&HMIT 05), pp. 12-16, 2005.
  60. P. Kasinathan, C. Pastrone, M. A. Spirito, and M. Vinkovits, "Denial-of service detection in 6LoWPAN based internet of things," in Proceedings of International Conference on Wireless and Mobile Computing, Networking and Communications, pp. 600-607, Lyon, France, 2013.
  61. N. Ruan and Y. Hori, "DoS attack-tolerant TESLA-based broadcast authentication protocol in Internet of ings," in Proceedings of International Conference on Selected Topics in Mobile and Wireless Networking, Avignon, France, 2012.
  62. S. Misra, P. V. Krishna, H. Agarwal, A. Saxena, and M. S. Obaidat, "A learning automata based solution for preventing distributed denial of service in internet of things," in Proceedings of International Conference on Internet of ings and 4th International Conference on Cyber, Physical and Social Computing, pp. 114-122, Dalian, China, 2011.
  63. P. Kasinathan, G. Costamagna, H. Khaleel, C. Pastrone, and M. A. Spirito, "DEMO: an IDS framework for internet of things empowered by 6LoWPAN," in Proceedings of ACM SIGSAC Conference on Computer & Communications Security, Berlin, Germany, November 2013.
  64. P. Pongle and G. Chavan, "A survey: attacks on RPL and 6LoWPAN in IoT," in Proceedings of International Conference on Pervasive Computing (ICPC), 2015.

Authors
Hameed, S., Khan, F. I., & Hameed, B.
Affiliations
  • National University of Computer and Emerging Sciences (PK)
  • Bahria University (PK)
Corresponding author
Hameed, Sufian
ORCID
Hameed, Sufian
Venue
Journal of Computer Networks and Communications
Publisher
Wiley
Published
2019-01-10
Volume
2019
Pages
1-14
ISSN
  • 2090-7141 (ISSN-L)
  • 2090-715X
DOI
10.1155/2019/9629381
OpenAlex
W2889531475
Cited by
219
References
34
Citations by year
2026: 7 · 2025: 17 · 2024: 25 · 2023: 27 · 2022: 47 · 2021: 57 · 2020: 27 · 2019: 12
FWCI
19.58
Type
journal article
Language
en
Open access
Licence
Locations
  • Journal of Computer Networks and Communications (publishedVersion, cc-by)
  • DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
Topics
  • Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
  • Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
  • Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
Keywords
Internet of Things, Internet of Things security, security challenges, privacy, low-power embedded devices, IoT deployment, security requirements

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review