IoT Privacy and Security: Challenges and Solutions
Source abstract
Abstract
Privacy and security are among the significant challenges of the Internet of Things (IoT). Improper device updates, lack of efficient and robust security protocols, user unawareness, and famous active device monitoring are among the challenges that IoT is facing. In this work, we are exploring the background of IoT systems and security measures, and identifying (a) different security and privacy issues, (b) approaches used to secure the components of IoT-based environments and systems, (c) existing security solutions, and (d) the best privacy models necessary and suitable for different layers of IoT driven applications. In this work, we proposed a new IoT layered model: generic and stretched with the privacy and security components and layers identification. The proposed cloud/edge supported IoT system is implemented and evaluated. The lower layer represented by the IoT nodes generated from the Amazon Web Service (AWS) as Virtual Machines. The middle layer (edge) implemented as a Raspberry Pi 4 hardware kit with support of the Greengrass Edge Environment in AWS. We used the cloud-enabled IoT environment in AWS to implement the top layer (the cloud). The security protocols and critical management sessions were between each of these layers to ensure the privacy of the users’ information. We implemented security certificates to allow data transfer between the layers of the proposed cloud/edge enabled IoT model. Not only is the proposed system model eliminating possible security vulnerabilities, but it also can be used along with the best security techniques to countermeasure the cybersecurity threats facing each one of the layers; cloud, edge, and IoT.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: IoT and Edge/Fog Computing · Blockchain Technology Applications and Security · Advanced Malware Detection Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Computing and Cyber Security, Texas A&M University, San Antonio, TX 78224, USA
School of Computer Science & Engineering (CSE), California State University, San Bernardino, CA 92407, USA
Department of Computer Engineering, Jordan University of Science and Technology, Irbid 22110, Jordan
Funding
Expanded Chancellor Research Initiative grant (CRI) awarded to Texas A&M University- San Antonio, TX, USA.
References (36)
Show source-provided references
1. Khvoynitskaya, S. (2020, March 25). The History and Future of the Internet of Things. Available online: https://www.itransition.com/: https://www.itransition.com/blog/iot-history.
2. Internet of Things security and forensics: Challenges and opportunities10.1016/j.future.2017.07.060 ↗
3. Security techniques for intelligent spam sensing and anomaly detection in online social platforms
4. Anatomy of threats to the Internet of things10.1109/COMST.2018.2874978 ↗
5. Securing consumer IoT in the smart home: Architecture, challenges, and countermeasures10.1109/MWC.2017.1800100 ↗
6. Siby, S., Maiti, R.R., and Tippenhauer, N.O. (2017, January 2). Iotscanner: Detecting privacy threats in IoT neighborhoods. Proceedings of the 3rd ACM International Workshop on IoT Privacy, Trust, and Security, Abu Dhabi United Arab Emirates.10.1145/3055245.3055253 ↗
7. Current research on Internet of Things (IoT) security: A survey10.1016/j.comnet.2018.11.025 ↗
8. A review of security concerns in Internet of Things10.4236/jcc.2017.51010 ↗
9. Liu, X., Zhao, M., Li, S., Zhang, F., and Trappe, W. (2017). A security framework for the internet of things in the future internet architecture. Future Internet, 9.10.3390/fi9030027 ↗
10. Ali, S., Bosche, A., and Ford, F. (2018). Cybersecurity Is the Key to Unlocking Demand in the Internet of Things, Bain and Company.
11. Sadeghi, A.-R., Wachsmann, C., and Waidner, M. (2015, January 8–12). Security and privacy challenges in industrial internet of things. Proceedings of the 2015 52nd ACM/EDAC/IEEE Design Automation Conference (DAC), San Francisco, CA, USA.10.1145/2744769.2747942 ↗
12. Izzat, A., Chuck, E., and Lo’ai, T. (2020). The NICE Cyber Security Framework, Cyber Security Management, Springer.
13. Tawalbeh, L.A., and Tawalbeh, H. (2017). Lightweight crypto and security. Security and Privacy in Cyber-Physical Systems: Foundations, Principles, and Applications, Wiley.10.1002/9781119226079.ch12 ↗
14. Internet of Things security: A survey10.1016/j.jnca.2017.04.002 ↗
15. A survey of man in the middle attacks10.1109/COMST.2016.2548426 ↗
16. IoT security: Review, blockchain solutions, and open challenges10.1016/j.future.2017.11.022 ↗
17. Zaldivar, D., Tawalbeh, L., and Muheidat, F. (2020, January 6). Investigating the Security Threats on Networked Medical Devices. Proceedings of the 2020 10th Annual Computing and Communication Workshop and Conference (CCWC), Las Vegas, NV, USA.10.1109/CCWC47524.2020.9031212 ↗
18. Tawalbeh, L.A., and Somani, T.F. (December, January 29). More secure Internet of Things using robust encryption algorithms against side-channel attacks. Proceedings of the 2016 IEEE/ACS 13th International Conference of Computer Systems and Applications (AICCSA), Agadir, Morocco.10.1109/AICCSA.2016.7945813 ↗
19. Dalipi, F., and Yayilgan, S.Y. (2016, January 22–24). Security and privacy considerations for IoT application on smart grids: Survey and research challenges. Proceedings of the in Future Internet of Things and Cloud Workshops (FiCloudW), Vienna, Austria.10.1109/W-FiCloud.2016.28 ↗
20. Bugeja, J., Jacobsson, A., and Davidsson, P. (2016, January 17–19). On privacy and security challenges in smart connected homes. Proceedings of the European Intelligence and Security Informatics Conference (EISIC), Uppsala, Sweden.10.1109/EISIC.2016.044 ↗
21. Culbert, D. (2019, September 15). Personal Data Breaches and Securing IoT Devices. Available online: https://betanews.com/2019/08/13/securing-iot-devices/.
22. Gemalto (2020, February 17). Securing the IoT-Building Trust in IoT Devices and Data. Available online: https://www.gemalto.com/: https://www.gemalto.com/iot/iot-security.
23. He, H., Maple, C., Watson, T., Tiwari, A., Mehnen, J., Jin, Y., and Gabrys, B. (2016, January 24–29). The security challenges in the IoT enabled cyber-physical systems and opportunities for evolutionary computing & other computational intelligence. Proceedings of the Evolutionary Computation (CEC), Vancouver, BC, Canada.10.1109/CEC.2016.7743900 ↗
24. Al Shuhaimi, F., Jose, M., and Singh, A.V. (2016, January 7–9). Software-defined network as a solution to overcome security challenges in IoT. Proceedings of the Reliability, Infocom Technologies and Optimization (Trends and Future Directions) (ICRITO), Noida, India.10.1109/ICRITO.2016.7785005 ↗
25. Estrada, D., Tawalbeh, L., and Vinaja, R. (2020). How Secure Having IoT Devices in Our Home. J. Inf. Secur., 11.10.4236/jis.2020.112005 ↗
26. Sun, Y., Song, H., Jara, A.J., and Bie, R. (2020, April 04). Internet of Things and Big Data Analytics for Smart and Connected Communities. Available online: https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=7406686.
27. Tawalbeh, M., Quwaider, M., and Tawalbeh, L.A. (2020, January 7–9). Authorization Model for IoT Healthcare Systems: Case Study. Proceedings of the 2020 11th International Conference on Information and Communication Systems (ICICS), Irbid, Jordan.10.1109/ICICS49469.2020.239527 ↗
28. A cybersecurity framework to identify malicious edge device in fog computing and cloud-of-things environments10.1016/j.cose.2017.08.016 ↗
29. Twenty security considerations for cloud-supported Internet of Things10.1109/JIOT.2015.2460333 ↗
30. (2019, October 19). The HIPAA Privacy Rule, Available online: https://www.hhs.gov/hipaa/for-professionals/privacy/index.html.
31. Thierer, A.D. (2020, March 06). The Internet of Things and Wearable Technology: Addressing Privacy and Security Concerns without Derailing Innovation. Available online: http://jolt.richmond.edu/v21i2/article6.pdf.
32. (2020, March 17). Available online: https://docs.aws.amazon.com/iot/latest/developerguide/what-is-aws-iot.html.
33. (2020, May 26). Available online: https://www.tecmint.com/protect-hard-and-symbolic-links-in-centos-rhel/.
34. (2020, May 25). Available online: https://docs.aws.amazon.com/iot/latest/developerg uide/iot-message-broker.html.
35. Sethi, P., and Sarangi, S. (2017). Internet of Things: Architectures, Protocols, and Applications. J. Electr. Comput. Eng., 1–25.10.1155/2017/9324035 ↗
36. Liyanage, M., Braeken, A., Kumar, P., and Ylianttila, M. (2020). IoT Security: Advances in Authentication, John Wiley & Sons.10.1002/9781119527978 ↗