Cited by 193IoT and Edge/Fog ComputingNetwork Security and Intrusion DetectionInternet of Things and AI

A Comprehensive IoT Attacks Survey based on a Building-blocked Reference Model

Open access
Akram, Hezam, Konstantas, Dimitri, Mahyoub, Mohammed·2018·International Journal of Advanced Computer Science and Applications

Abstract

Internet of Things (IoT) has not yet reached a distinctive definition. A generic understanding of IoT is that it offers numerous services in many domains, utilizing conventional internet infrastructure by enabling different communication patterns such as human-to-object, object-to-objects, and object-to-object. Integrating IoT objects into the standard Internet, however, has unlocked several security challenges, as most internet technologies and connectivity protocols have been specifically designed for unconstrained objects. Moreover, IoT objects have their own limitations in terms of computation power, memory and bandwidth. IoT vision, therefore, has suffered from unprecedented attacks targeting not only individuals but also enterprises, some examples of these attacks are loss of privacy, organized crime, mental suffering, and the probability of jeopardizing human lives. Hence, providing a comprehensive classification of IoT attacks and their available countermeasures is an indispensable requirement. In this paper, we propose a novel four-layered IoT reference model based on building blocks strategy, in which we develop a comprehensive IoT attack model composed of four key phases. First, we have proposed IoT asset-based attack surface, which consists of four main components: 1) physical objects, 2) protocols covering whole IoT stack, 3) data, and 4) software. Second, we describe a set of IoT security goals. Third, we identify IoT attack taxonomy for each asset. Finally, we show the relationship between each attack and its violated security goals, and identify a set of countermeasures to protect each asset as well. To the best of our knowledge, this is the first paper that attempts to provide a comprehensive IoT attacks model based on a building-blocked reference model.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.14569/ijacsa.2018.090349

Cites

99 of 99 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 18

  1. E. Alsaadi and A. Tubaishat, "Internet of Things: Features, Challenges, and Vulnerabilities," International Journal of Advanced Computer Science and Information Technology (IJACSIT), vol. 4, no. 1, pp. 1-13, 2015.
  2. E&Y, "Cybersecurity and the Internet of Things," E&Y, no. March, pp. 1-15, 2015.
  3. Cisco, "The Internet of Things Reference Model," Internet of Things World Forum, pp. 1-12, 2014.
  4. J. Deogirikar, "Security Attacks inIoT : A Survey," International conference on I-SMAC, pp. 32-37, 2017.
  5. G. Hernandez, O. Arias, D. Buentello, and Y. Jin, "Smart Nest Thermostat : A Smart Spy in Your Home," Black Hat USA, pp. 1-8, 2014.
  6. M. M. Ahemd, M. A. Shah, and A. Wahid, "IoT security: A layered approach for attacks & defenses," 2017 International Conference on Communication Technologies (ComTech), pp. 104-110, 2017.
  7. E. Haselsteiner and K. Breitfuß, "Security in Near Near Field Com- munication (NFC) Strengths," Semiconductors, vol. 11, no. 71, p. 71, 2006.
  8. K. Masica, "Recommended Practices Guide For Securing ZigBee Wireless Networks in Process Control System Environments," 2007.
  9. M. Keijo and H. Senior, "Bluetooth network vulnerability to Disclo- sure, Integrity and Denial-of-Service attacks," vol. 17, 2005.
  10. J. Markert, M. Massoth, K.-P. Fischer-Hellmann, S. Furnell, and C. Bolan, "Attack Vectors to Wireless ZigBee Network Communi- cations -Analysis and Countermeasures," Proceedings of the Seventh Collaborative Research Symposium on Security, E-learning, Internet and Networking (SEIN 2011), Furtwangen, Germany, pp. 57-66, 2011.
  11. M. Asim, "IoT Operating Systems and Security Challenges," vol. 14, no. 7, p. 5500, 2016.
  12. K. Chugh, A. Lasebae, and J. Loo, "Case Study of a Black Hole Attack on 6LoWPAN-RPL," SECURWARE 2012, The Sixth Interna- tional Conference on Emerging Security Information, Systems and Technologies, no. c, pp. 157-162, 2012.
  13. Stéphane GARCIA, "Wireless Security and the IEEE 802.11
  14. S. Jucker, "Master ' s Thesis Securing the Constrained Application Protocol by Stefan Jucker," no. October, pp. 1-103, 2012.
  15. A. Choudhury and D. Mcgrew, "AES Galois Counter Mode (GCM) Cipher Suites for TLS Status," pp. 1-8, 2008.
  16. P. Du, "IoT Message Protocols: The Next Security Challenge for Service Providers? The State of IoT," pp. 2-4, 2017.
  17. S. Chandna, R. Singh, and F. Akhtar, "Data scavenging threat in cloud computing," no. August, pp. 17-22, 2014.
  18. R. Singh, J. Singh, and R. Singh, "ATTACKS IN WIRELESS SEN- SOR NETWORKS : A SURVEY," vol. 5, no. 5, pp. 10-16, 2016.

Cited by

Sorted by citations

Authors
Akram, H., Konstantas, D., & Mahyoub, M.
Affiliations
University of Geneva (CH)
Venue
International Journal of Advanced Computer Science and Applications
Published
2018
Volume
9
Issue
3
ISSN
  • 2156-5570 (ISSN-L)
  • 2158-107X
OpenAlex
W2794563095
Cited by
193
References
99
Citations by year
2026: 2 · 2025: 14 · 2024: 25 · 2023: 30 · 2022: 31 · 2021: 34 · 2020: 35 · 2019: 20 · 2018: 1 · 2017: 1
FWCI
13.90
Type
journal article
Language
en
Open access
Licence
cc-by
Locations
International Journal of Advanced Computer Science and Applications (publishedVersion, cc-by)
Topics
  • Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
  • Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
  • Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
Keywords
Internet of Things security, IoT attacks, attack taxonomy, attack surface, reference model, security objectives, countermeasures, IoT protocols, privacy loss

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review