IoVT: Internet of Vulnerable Things? Threat Architecture, Attack Surfaces, and Vulnerabilities in Internet of Things and Its Applications towards Smart Grids
Open accessAbstract
In recent years, people have witnessed numerous Internet of Things (IoT)-based attacks with the exponential increase in the number of IoT devices. Alongside this, the means to secure IoT-based applications are maturing slower than our budding dependence on them. Moreover, the vulnerabilities in an IoT system are exploited in chains to penetrate deep into the network and yield more adverse aftereffects. To mitigate these issues, this paper gives unique insights for handling the growing vulnerabilities in common IoT devices and proposes a threat architecture for IoT, addressing threats in the context of a three-layer IoT reference architecture. Furthermore, the vulnerabilities exploited at the several IoT attack surfaces and the challenges they exert are explored. Thereafter, the challenges in quantifying the IoT vulnerabilities with the existing framework are also analyzed. The study also covers a case study on the Intelligent Transportation System, covering road transport and traffic control specifically in terms of threats and vulnerabilities. Another case study on secure energy management in the Smart Grid is also presented. This case study covers the applications of Internet of Vulnerable Things (IoVT) in Smart energy Grid solutions, as there will be tremendous use of IoT in future Smart Grids to save energy and improve overall distribution. The analysis shows that the integration of the proposed architecture in existing applications alarms the developers about the embedded threats in the system.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The distributed architecture of an IoT application significantly impacts its performance.
“the distributed architecture of an IoT application also significantly impacts its performance [52].”
From QoE in IoT: a vision, survey and future directions (2021) · cites this paper as [52]
In the section labeled “X X X” (page not given), the paper reports that particular IoT architectures can reduce energy consumption or detect attacks with fewer overheads. It does not establish the broader claim that an IoT application's distributed architecture significantly affects its overall performance. (LLM, conf=0.76)
Experimental — accuracy not yet measuredData transfer between different networks in autonomic IoT applications renders a threat to the security aspects of the applications.
“This necessitates data transfer between different networks rendering threat to the security aspects of the applications [52].”
From QoE in IoT: a vision, survey and future directions (2021) · cites this paper as [52]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Internet of Things for Smart Cities
Zanella, A., Bui, N., Castellani, A. P., Vangelista, L., & Zorzi, M. (2014) · IEEE Internet of Things Journal · doi:10.1109/jiot.2014.2306328 · Cited by 6,385 · see citing works
DDoS in the IoT: Mirai and Other Botnets
Kolias, C., Kambourakis, G., Stavrou, A., & Voas, J. (2017) · Computer · doi:10.1109/mc.2017.201 · Cited by 1,892 · see citing works
On the features and challenges of security and privacy in distributed internet of things
Román, R., Zhou, J., & López, J. (2013) · Computer Networks · doi:10.1016/j.comnet.2012.12.018 · Cited by 1,471 · see citing works
Internet of Things security: A survey
Alaba, F. A., Othman, M., Hashem, M., & Alotaibi, F. A. (2017) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2017.04.002 · Cited by 1,348 · see citing works
Cyber-Physical Systems Security—A Survey
Humayed, A., Lin, J., Li, F., & Luo, B. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2703172 · Cited by 1,185 · see citing works
Neshenko, N., Bou‐Harb, E., Crichigno, J., Kaddoum, G., & Ghani, N. (2019) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2019.2910750 · Cited by 832 · see citing works
A Comprehensive Study of Security of Internet-of-Things
Mosenia, A., & Jha, N. K. (2016) · IEEE Transactions on Emerging Topics in Computing · doi:10.1109/tetc.2016.2606384 · Cited by 817 · see citing works
IoT: Internet of Threats? A Survey of Practical Security Vulnerabilities in Real IoT Devices
Meneghello, F., Calore, M., Zucchetto, D., Polese, M., & Zanella, A. (2019) · IEEE Internet of Things Journal · doi:10.1109/jiot.2019.2935189 · Cited by 812 · see citing works
Security of the Internet of Things: Vulnerabilities, Attacks, and Countermeasures
Bütün, İ., Osterberg, P., & Song, H. (2019) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2019.2953364 · Cited by 792 · see citing works
Evaluating Critical Security Issues of the IoT World: Present and Future Challenges
Frustaci, M., Pace, P., Aloi, G., & Fortino, G. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2767291 · Cited by 766 · see citing works
IoT Security Techniques Based on Machine Learning: How Do IoT Devices Use AI to Enhance Security?
Xiao, L., Wan, X., Lu, X., Zhang, Y., & Wu, D. (2018) · IEEE Signal Processing Magazine · doi:10.1109/msp.2018.2825478 · Cited by 681 · see citing works
Internet of Things Architecture: Recent Advances, Taxonomy, Requirements, and Open Challenges
Yaqoob, I., Ahmed, E., Hashem, I. A. T., Ahmed, A. I. A., Gani, A., Imran, M., & Guizani, M. (2017) · IEEE Wireless Communications · doi:10.1109/mwc.2017.1600421 · Cited by 668 · see citing works
Sensor Technologies for Intelligent Transportation Systems
Guerrero-Ibáñez, J., Zeadally, S., & Contreras-Castillo, J. (2018) · Sensors · doi:10.3390/s18041212 · Cited by 637 · see citing works
Enhancing smart grid with microgrids: Challenges and opportunities
Yoldaş, Y., Önen, A., Muyeen, S. M., Vasilakos, A. V., & Alan, İ. (2017) · Renewable and Sustainable Energy Reviews · doi:10.1016/j.rser.2017.01.064 · Cited by 550 · see citing works
An overview of Internet of Things (IoT): Architectural aspects, challenges, and protocols
Gupta, B. B., & Quamara, M. (2018) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.4946 · Cited by 517 · see citing works
Stellios, I., Kotzanikolaou, P., Psarakis, M., Alcaraz, C., & López, J. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2855563 · Cited by 457 · see citing works
Distblocknet: a distributed blockchains-based secure SDN architecture for IoT networks
Sharma, P. K., Singh, S., Jeong, Y.-S., & Park, J. H. (2017) · IEEE Communications Magazine · doi:10.1109/mcom.2017.1700041 · Cited by 428 · see citing works
Anatomy of Threats to the Internet of Things
Makhdoom, I., Abolhasan, M., Lipman, J., Liu, R. P., & Ni, W. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2874978 · Cited by 418 · see citing works
An Energy-Efficient SDN Controller Architecture for IoT Networks With Blockchain-Based Security
Yazdinejad, A., Parizi, R. M., Dehghantanha, A., Zhang, Q., & Choo, K. R. (2020) · IEEE Transactions on Services Computing · doi:10.1109/tsc.2020.2966970 · Cited by 346 · see citing works
Securing the Internet of Things: Challenges, threats and solutions
Radoglou Grammatikis, P. I., Sarigiannidis, P. G., & Moscholios, I. D. (2019) · Internet of Things · doi:10.1016/j.iot.2018.11.003 · Cited by 308 · see citing works
In-Vehicle Network Attacks and Countermeasures: Challenges and Future Directions
Liu, J., Zhang, S., Sun, W., & Shi, Y. (2017) · IEEE Network · doi:10.1109/mnet.2017.1600257 · Cited by 281 · see citing works
Proposed Security Model and Threat Taxonomy for the Internet of Things (IoT)
Babar, S. D., Mahalle, P. N., Stango, A., Prasad, N. R., & Prasad, R. (2010) · Communications in computer and information science · doi:10.1007/978-3-642-14478-3_42 · Cited by 280 · see citing works
The rise of ransomware and emerging security challenges in the Internet of Things
Yaqoob, I., Ahmed, E., Rehman, M. H. U., Ahmed, A. I. A., Al-Garadi, M. A., Imran, M. A., & Guizani, M. (2017) · Computer Networks · doi:10.1016/j.comnet.2017.09.003 · Cited by 269 · see citing works
Wang, T., Zhang, G., Liu, A., Bhuiyan, M. Z. A., & Jin, Q. (2018) · IEEE Internet of Things Journal · doi:10.1109/jiot.2018.2870288 · Cited by 255 · see citing works
Machine Learning Models for Secure Data Analytics: A taxonomy and threat model
Gupta, R., Tanwar, S., Tyagi, S., & Kumar, N. (2020) · Computer Communications · doi:10.1016/j.comcom.2020.02.008 · Cited by 228 · see citing works
How cyber-attacks in Ukraine show the vulnerability of the U.S. power grid
Sullivan, J. E., & Kamensky, D. (2017) · The Electricity Journal · doi:10.1016/j.tej.2017.02.006 · Cited by 203 · see citing works
A Survey on Decentralized Consensus Mechanisms for Cyber Physical Systems
Bodkhe, U., Mehta, D., Tanwar, S., Bhattacharya, P., Singh, P. K., & Hong, W. (2020) · IEEE Access · doi:10.1109/access.2020.2981415 · Cited by 185 · see citing works
Self-citationSecurity and Privacy Issues in Intelligent Transportation Systems: Classification and Challenges
Hahn, D., Munir, A., & Behzadan, V. (2021) · IEEE Intelligent Transportation Systems Magazine · doi:10.1109/mits.2019.2898973 · Cited by 183 · cited 1× · see citing works
“Some of these vulnerabilities taken from the NVD database and summarized in Table 2 are described as follows [39,40]:”
BackgroundFog Computing for Smart Grid Systems in the 5G Environment: Challenges and Solutions
Kumari, A., Tanwar, S., Tyagi, S., Kumar, N., Obaidat, M. S., & Rodrigues, J. J. P. C. (2019) · IEEE Wireless Communications · doi:10.1109/mwc.2019.1800356 · Cited by 177 · see citing works
Kumari, A., Gupta, R., Tanwar, S., & Kumar, N. (2020) · Journal of Parallel and Distributed Computing · doi:10.1016/j.jpdc.2020.05.004 · Cited by 172 · see citing works
DDoS Detection Mechanism Using Trust-Based Evaluation System in VANET
Poongodi, M., Hamdi, M., Sharma, A., Ma, M., & Singh, P. K. (2019) · IEEE Access · doi:10.1109/access.2019.2960367 · Cited by 137 · see citing works
Self-citationCyber Security Threats to IoT Applications and Service Domains
Tweneboah‐Koduah, S., Skouby, K. E., & Tadayoni, R. (2017) · Wireless Personal Communications · doi:10.1007/s11277-017-4434-6 · Cited by 134 · see citing works
Challenges of securing Internet of Things devices: A survey
Samaila, M. G., Neto, M., Fernandes, D. A. B., Freire, M. M., & Inácio, P. R. M. (2018) · Security and Privacy · doi:10.1002/spy2.20 · Cited by 124 · see citing works
A taxonomy of blockchain envisioned edge‐as‐a‐connected autonomous vehicles
Gupta, R., Kumari, A., & Tanwar, S. (2020) · Transactions on Emerging Telecommunications Technologies · doi:10.1002/ett.4009 · Cited by 108 · see citing works
AI4SAFE-IoT: an AI-powered secure architecture for edge layer of Internet of things
HaddadPajouh, H., Khayami, R., Dehghantanha, A., Choo, K. R., & Parizi, R. M. (2020) · Neural Computing and Applications · doi:10.1007/s00521-020-04772-3 · Cited by 89 · see citing works
Bangotra, D. K., Singh, Y. P., Selwal, A., Kumar, N., Singh, P. K., & Hong, W. (2020) · Sensors · doi:10.3390/s20143887 · Cited by 68 · see citing works
Self-citationIndustrial IoT security threats and concerns by considering Cisco and Microsoft IoT reference models
Bakhshi, Z., Balador, A., & Mustafa, J. (2018) · IEEE Wireless Communications and Networking Conference Workshops (WCNCW) · doi:10.1109/wcncw.2018.8368997 · Cited by 66 · see citing works
A Comprehensive Analysis of Smart Grid Systems against Cyber-Physical Attacks
Wadhawan, Y., AlMajali, A., & Neuman, C. (2018) · Electronics · doi:10.3390/electronics7100249 · Cited by 63 · see citing works
Redills: Deep Learning-Based Secure Data Analytic Framework for Smart Grid Systems
Kumari, A., Vekaria, D., Gupta, R., et al. (2020) · IEEE International Conference on Communications workshops · doi:10.1109/iccworkshops49005.2020.9145448 · Cited by 51 · see citing works
Koloveas, P., Chantzios, T., Tryfonopoulos, C., & Skiadopoulos, S. (2019) · 2019 IEEE World Congress on Services (SERVICES) · doi:10.1109/services.2019.00016 · Cited by 48 · see citing works
Connected Vehicle Security Vulnerabilities [Commentary]
Takefuji, Y. (2018) · IEEE Technology and Society Magazine · doi:10.1109/mts.2018.2795093 · Cited by 39 · see citing works
Monitoring of stealthy attack in networked control systems
Keller, J. Y., & Sauter, D. (2013) · Conference on Control and Fault-Tolerant Systems · doi:10.1109/systol.2013.6693850 · Cited by 35 · see citing works
M-Tesla-Based Security Assessment in Wireless Sensor Network
Tanwar, S., Thakkar, K., Thakor, R., et al. (2018) · Procedia Computer Science · doi:10.1016/j.procs.2018.05.030 · Cited by 33 · see citing works
Connected Cars: Automotive Cybersecurity and Privacy for Smart Cities
Olufowobi, H., & Bloom, G. (2018) · Elsevier eBooks · doi:10.1016/b978-0-12-815032-0.00016-0 · Cited by 26 · see citing works
The Internet of (Vulnerable) Things: On Hypponen's Law, Security Engineering, and IoT Legislation
Hypponen, M., & Nyman, L. (2017) · Technology Innovation Management Review · doi:10.22215/timreview/1066 · Cited by 23 · see citing works
Huang, S.-C., Chen, B., Chou, S.-K., Hwang, J., & Lee, K.-H. (2016) · IEEE Computational Intelligence Magazine · doi:10.1109/mci.2016.2601758 · Cited by 20 · see citing works
(2019) · Lecture notes in electrical engineering · doi:10.1007/978-3-030-30577-2 · Cited by 18 · see citing works
Contactless Vulnerability Analysis using Google and Shodan
Moucha, C., Keller, J., & Simon, K. (2020) · Zenodo (CERN European Organization for Nuclear Research) · doi:10.3217/jucs-023-04-0404 · Cited by 13 · see citing works
Privacy and Security issues in Big Data: Through Indian Prospective
Rastogi, N., Singh, S. K., & Singh, P. K. (2018) · International Conference on Internet of Things: Smart Innovation and Usages (IoT-SIU) · doi:10.1109/iot-siu.2018.8519858 · Cited by 13 · see citing works
Self-citationEmerging security concerns for smart vehicles and proposed IoT solutions
Aswath, G. I., Vasudevan, S. K., & Sundaram, R. M. D. (2018) · International Journal of Vehicle Autonomous Systems · doi:10.1504/ijvas.2018.096153 · Cited by 8 · see citing works
Collaborative security for the internet of things
Saied, Y. B. (2013) · doi:10.70675/7e082ceezbce4z4c56zb3e7z2a808ed80302 · Cited by 8 · see citing works
Collaborative security for the internet of things
Saied, Y. B., & Zeghlache, D. (2013) · HAL (Le Centre pour la Communication Scientifique Directe) · Cited by 5 · see citing works
Flagged first, then by citations
Research works printed but not linked: 10
- Corser, G.; Fink, G.A.; Aledhari, M. Internet of Things (IoT) security best practices. IEEE Internet Technol. Policy Commun. White Pap. Available online: https://internetinitiative.ieee.org/images/files/resources/white_ papers/internet_of_things_feb2017.pdf (accessed on 9 June 2020).
- Insights, C. The CEO's guide to data security: Protect your data through innovation. ATT Cybersecur. Insights 2017, 5, 1-20.
- Lee, R.M.; Assante, M.J.; Conway, T. German steel mill cyber attack. SANS Ind. Control Syst. 2014, 30, 1-15.
- BullGuard Press Releases, Latest News BullGuard. Available online: https://www.bullguard.com/press/ press-releases/2018/dojo-by-bullguard-introduces-first-of-its-kind-int.aspx (accessed on 9 June 2020).
- Barbieri, G.; Conti, M.; Tippenhauer, N.O.; Turrin, F. Sorry, Shodan is not Enough! Assessing ICS Security via IXP Network Traffic Analysis 2020. arXiv 2020, arXiv:2007.01114. · arXiv
- Chattopadhyay, A.; Lam, K.-Y.; Tavva, Y. Autonomous vehicle: Security by design. IEEE Trans. Intell. Transp. Syst. 2020, 1-15. [CrossRef] · DOI
- Miller, C.; Valasek, C. Remote exploitation of an unaltered passenger vehicle. Black Hat USA 2015, 2015, 1-91.
- Cerrudo, C. Hacking US traffic control system. Present. Defcon. 2014, 22, 1-28.
- Levy-Bencheton, C.; Darra, E. Cyber security and resilience of intelligent public transport. ENISA Rep. 2015. [CrossRef] · DOI
- Singh, P.K.; Arpan, K.K.; Yashwant, S.; Maheshkumar, H.; Kolekar, S.T. Recent Innovations in Computing; Springer Nature: Cham, Switzerland, 2019; ISBN 978-3-030-29406-9.
Cited by
Sorted by citations
Internet of Things: Evolution, Concerns and Security Challenges
Malhotra, P., Singh, Y., Anand, P., Bangotra, D. K., Singh, P. K., & Hong, W.-C. (2021) · Sensors · doi:10.3390/s21051809 · Cited by 260 · see citing works
Self-citationQoE in IoT: a vision, survey and future directions
Fizza, K., Banerjee, A., Mitra, K., Jayaraman, P. P., Ranjan, R., Patel, P., & Georgakopoulos, D. (2021) · Discover Internet of Things · doi:10.1007/s43926-021-00006-7 · Cited by 107 · see citing works
- Authors
- Anand, P., Singh, Y., Selwal, A., Singh, P. K., Felseghi, R. A., & Raboaca, M. S.
- Affiliations
- Central University of Jammu (IN)
- ABES Engineering College (IN)
- Ştefan cel Mare University of Suceava (RO)
- National Research and Development Institute for Cryogenic and Isotopic Technologies—ICSI Rm. Valcea, Uzinei Street, No. 4, P.O. Box 7 Raureni, 240050 Valcea, Romania
- Corresponding author
- Singh, Pradeep Kumar
- ORCID
- Venue
- Energies
- Publisher
- MDPI AG
- Published
- 2020-09-15
- Volume
- 13
- Issue
- 18
- Pages
- 4813
- ISSN
- 1996-1073 (ISSN-L)
- OpenAlex
- W3085019966
- Cited by
- 72
- References
- 53
- Citations by year
- 2026: 7 · 2025: 8 · 2024: 16 · 2023: 17 · 2022: 15 · 2021: 8 · 2020: 1
- FWCI
- 4.82
- Type
- journal article
- Language
- en
- Open access
- gold
- doi.org
- Licence
- Locations
- Energies (publishedVersion, cc-by)
- RePEc: Research Papers in Economics (submittedVersion)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- Funders
- Unitatea Executiva pentru Finantarea Invatamantului Superior, a Cercetarii, Dezvoltarii si Inovarii (PN- III -P1-1, PN-III-P1-1.2-PCCDI)
- Colegiul Consultativ pentru Cercetare-Dezvoltare şi Inovare
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
- Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Keywords
- Internet of Things security, IoT vulnerabilities, attack surface, vulnerability quantification, intelligent transportation systems, traffic management, smart grid, energy management
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
