The Internet of Things: a security point of view

Internet Research

Volumn 26, Issue 2, 2016, Pages 337-359

  Li, Shancang ^a   Tryfonas, Theo ^a   Li, Honglei ^b  

^a UNIVERSITY OF BRISTOL   (United Kingdom)

^b NORTHUMBRIA UNIVERSITY   (United Kingdom)

Author keywords

Internet of Things; Multi layer security architecture; Security requirements

Indexed keywords

EID: 84961579337     PISSN: 10662243     EISSN: None     Source Type: Journal    
DOI: 10.1108/IntR-07-2014-0173     Document Type: Article

References (68)

1. Alcaraz, C. and Lopez, J. (2010), “A security analysis for wireless sensor mesh networks in highly critical systems”, IEEE Transactions on Systems, Man, and Cybernetics, Part C: Applications and Reviews, Vol. 40 No. 4, pp. 419-428.
2. Atzori, L., Iera, A. and Morabito, G. (2010), “The Internet of Things: a survey”, Computer Networks, Vol. 54 No. 15, pp. 2787-2805.
3. Atzori, L., Iera, A., Morabito, G. and Nitti, M. (2012), “The Social Internet of Things (SIoT) – when social networks meet the Internet of Things: concept, architecture and network characterization”, Computer Networks, Vol. 56 No. 16, pp. 3594-3608.
4. Bamforth, R. (2014), “Internet of Things, SCADA, Ipv6 and social networking”, available at: www.it-director.com/business/innovation/content.php?cid=14590 (accessed 14 December 2013).
5. Bi, Z., Xu, L. and Wang, C. (2014), “Internet of Things for enterprise systems of modern manufacturing”, IEEE Transactions on Industrial Informatics, Vol. 10 No. 2, pp. 1537-1546.
6. Bottani, E. and Rizzi, A. (2008), “Economical assessment of the impact of RFID technology and EPC system on the fast-moving consumer goods supply chain”, International Journal of Production Economics, Vol. 112 No. 2, pp. 548-569.
7. Broll, G., Rukzio, E., Paolucci, M., Wagner, M., Schmidt, A. and Hussmann, H. (2009), “Perci: pervasive service interaction with the Internet of Things”, IEEE Internet Computing, Vol. 13 No. 6, pp. 74-81.
8. Cai, H., Xu, L., Xu, B., Xie, C., Qin, S. and Jiang, L. (2014), “Iot-based configurable information service platform for product lifecycle management”, IEEE Transactions on Industrial Informatics, Vol. 10 No. 2, pp. 1558-1567.
9. CCSA (2012), “Security requirements of Internet of Things”, available at: ftp://ftp.onem2m.org/Pool/CCSA/YDB 101-2012 Security Requirements of Internet of Things.pdf (accessed 1 March 2016).
10. Chen, Y., Han, F., Yang, Y.-H., Ma, H., Han, Y., Jiang, C., Lai, H.-Q., Claffey, D., Safar, Z. and Liu, K.R. (2014), “Time-reversal wireless paradigm for green Internet of Things: an overview”, IEEE Internet of Things Journal, Vol. 1 No. 1, pp. 81-98.
11. Choi, J., Li, S., Wang, X. and Ha, J. (2012), “A general distributed consensus algorithm for wireless sensor networks”, Wireless Advanced (WiAd), London, pp. 16-21.
12. Di Pietro, R., Guarino, S., Verde, N. and Domingo-Ferrer, J. (2014), “Security in wireless ad-hoc networks – a survey”, Computer Communications, Vol. 51, pp. 1-20.
13. EPCglobal (2004), “Radio-frequency identity protocols class-1 generation-2 UHF RFID protocol for communications at 860 Mhz-960 Mhz Version 1.0.9”, Computer Communications, Vol. 51, pp. 1-20, available at: www.gs1.org/gsmp/kc/epcglobal/uhfc1g2/uhfc1g2_1_0_9-standard-20050126.pdf
14. Esad-Djou, M. (2014), “IT-security: Weblogic Server and Oracle Platform Security Services (OPSS)”, available at: http://thecattlecrew.wordpress.com/2014/02/17/it-security-weblogic-server_1/ (accessed 5 July).
15. Fielding, R.T. and Taylor, R.N. (2002), “Principled design of the modern web architecture”, ACM Transactions on Internet Technology (TOIT), Vol. 2 No. 2, pp. 115-150.
16. Floerkemeier, C., Roduner, C. and Lampe, M. (2007), “RFID application development with the accada middleware platform”, IEEE Systems Journal, Vol. 1 No. 2, pp. 82-94.
17. Frenken, T., Spiess, P. and Anke, J. (2008), A Flexible and Extensible Architecture for Device-Level Service Deployment, Springer.
18. Furnell, S. (2007), “Making security usable: are things improving?”, Computers & Security, Vol. 26 No. 6, pp. 434-443.
19. Gama, K., Touseau, L. and Donsez, D. (2012), “Combining heterogeneous service technologies for building an Internet of Things middleware”, Computer Communications, Vol. 35 No. 4, pp. 405-417.
20. Gaur, H. (2013), “Internet of Things: thinking services”, available at: https://blogs.oracle.com/IOT/entry/internet_of_things_thinking_services (accessed 5 July 2014).
21. Gu, L., Wang, J. and Sun, B. (2014), “Trust management mechanism for Internet of Things”, China Communications, Vol. 11 No. 2, pp. 148-156.
22. Guinard, D., Trifa, V., Karnouskos, S., Spiess, P. and Savio, D. (2010), “Interacting with the SOA-based Internet of Things: discovery, query, selection, and on-demand provisioning of web services”, IEEE Transactions on Services Computing, Vol. 3 No. 3, pp. 223-235.
23. He, W., Xu, L. and Li, S. (2012), “Integration of distributed enterprise applications: a survey”, IEEE Transactions on Industrial Informatics, Vol. 10 No. 1, pp. 35-42.
24. Hendricks, K.B., Singhal, V.R. and Stratman, J.K. (2007), “The impact of enterprise systems on corporate performance: a study of ERP, SCM, and CRM system implementations”, Journal of Operations Management, Vol. 25 No. 1, pp. 65-82.
25. Hepp, M., Siorpaes, K. and Bachlechner, D. (2007), “Harvesting Wiki consensus: using Wikipedia entries as vocabulary for knowledge management”, IEEE Internet Computing, Vol. 11 No. 5, pp. 54-65.
26. Hernandez-Castro, J.C., Tapiador, J.M.E., Peris-Lopez, P., Li, T. and Quisquater, J.-J. (2013), “Cryptanalysis of the SASI ultra-light weight RFID authentication protocol”, ArXiv, available at: http://arxiv.org/abs/0811.4257 (accessed 20 May).
27. Hitt, L.M., Wu, D. and Zhou, X. (2002), “Investment in enterprise resource planning: business impact and productivity measures”, Journal of Management Information Systems, Vol. 19 No. 1, pp. 71-98.
28. Hoyland, C.A., Adams, K.M., Tolk, A. and Xu, L.D. (2014), “The RQ-tech methodology: a new paradigm for conceptualizing strategic enterprise architectures”, Journal of Management Analytics, Vol. 1 No. 1, pp. 55-77.
29. HP Company (2014), “Internet of Things research study”, available at: http://h30499.www3.hp.com/hpeb/attachments/hpeb/application-security-fortify-on-demand/189/1/HP_IoT_Research_Study.pdf (accessed 5 September).
30. ITU (2013), “The Internet of Things, International Telecommunication Union (ITU) Internet Report”, London.
31. Kang, K., Pang, Z., Da Xu, L., Ma, L. and Wang, C. (2014), “An interactive trust model for application market of the Internet of Things”, IEEE Transactions on Industrial Informatics, Vol. 10 No. 2, pp. 1516-1526.
32. Keoh, S., Kumar, S. and Tschofenig, H. (2014), “Securing the Internet of Things: a standardization perspective”, IEEE Internet of Things Journal, Vol. 1 No. 3, pp. 265-275.
33. Kim, H. (2012), “Security and vulnerability of SCADA systems over IP-based wireless sensor networks”, International Journal of Distributed Sensor Networks, Vol. 2012, Article ID 268478, pp. 1-10. doi: 10.1155/2012/268478.
34. Kranenburg, R.V., Anzelmo, E., Bassi, A., Caprio, D., Dodson, S. and Ratto, M. (2011), “The Internet of Things,” 1st Berlin Symposium on Internet and Society (versión electrónica), available at: http://scholar.google.com/citations?user=oEr_DWAAAAAJ & hl=en
35. Li, D.X. (2011), “Enterprise systems: state-of-the-art and future trends”, IEEE Transactions on Industrial Informatics, Vol. 7 No. 4, pp. 630-640.
36. Li, F. and Xiong, P. (2013), “Practical secure communication for integrating wireless sensor networks into the Internet of Things”, IEEE Sensors Journal, Vol. 13 No. 10, pp. 3677-3684.
37. Li, L., Li, S. and Zhao, S. (2014a), “QoS-aware scheduling of services-oriented Internet of Things”, IEEE Transactions on Industrial Informatics, Vol. 10 No. 2, pp. 1497-1505.
38. Li, L., Wang, B. and Wang, A. (2014b), “An emergency resource allocation model for maritime chemical spill accidents”, Journal of Management Analytics, Vol. 1 No. 1, pp. 1-10.
39. Li, S., Da Xu, L. and Zhao, S. (2014c), “The Internet of Things: a survey”, Information Systems Frontiers, Vol. 17 No. 2, pp. 243-259.
40. Li, S., Sun, H., Nallanathan, A., Xu, L., Zhao, S. and Sun, Q. (2014d), “Industrial wireless sensor networks”, International Journal of Distributed Sensor Networks, Vol. 2014, Article ID 218050, pp. 1-2.
41. Lim, M.K., Bahr, W. and Leung, S.C. (2013), “RFID in the warehouse: a literature analysis (1995-2010) of its applications, benefits, challenges and future trends”, International Journal of Production Economics, Vol. 145 No. 1, pp. 409-430.
42. Miorandi, D., Sicari, S., De Pellegrini, F. and Chlamtac, I. (2012), “Internet of Things: vision, applications and research challenges”, Ad Hoc Networks, Vol. 10 No. 7, pp. 1497-1516.
43. National Intelligence Council (2008), “Disruptive civil technologies: six technologies with potential impacts on US interests out to 2025”, conference report.
44. Ning, H. (2013), Unit and Ubiquitous Internet of Things, CRC Press, Boca Raton, FL.
45. Ning, H., Liu, H. and Yang, L.T. (2013), “Cyberentity security in the Internet of Things”, Computer, Vol. 46 No. 4, pp. 0046-0053.
46. Oppliger, R. (2011), “Security and privacy in an online world”, Computer, Vol. 44 No. 9, pp. 21-22.
47. Peris-Lopez, P., Hernandez-Castro, J.C., Estevez-Tapiador, J.M. and Ribagorda, A. (2006), “M2AP: a minimalist mutual-authentication protocol for low-cost RFID tags”, Ubiquitous Intelligence and Computing, Springer, Berlin, pp. 912-923.
48. Perna, M. (2013), “Security 101: securing SCADA environments”, available at: http://blog.fortinet.com/post/security-101-securing-scada-environments (accessed 5 July 2014).
49. Pretz, K. (2013), “The next evolution of the internet”, available at: http://theinstitute.ieee.org/technology-focus/technology-topic/the-next-evolution-of-the-internet (accessed 20 May).
50. Raza, S., Voigt, T. and Jutvik, V. (2012), “Lightweight IKEv2: a key management solution for both the compressed IPsec and the IEEE 802.15. 4 security”, Proceedings of the IETF Workshop on Smart Object Security, Paris, 23 March.
51. Raza, S., Shafagh, H., Hewage, K., Hummen, R. and Voigt, T. (2013), “Lithe: lightweight secure CoAP for the Internet of Things”, IEEE Sensors Journal, Vol. 13 No. 10, pp. 3711-3720.
52. Roe, D. (2014), “Top 5 Internet of Things security concerns”, available at: www.cmswire.com/cms/internet-of-things/top-5-internet-of-things-security-concerns-026043.php (accessed 5 September).
53. Roman, R., Najera, P. and Lopez, J. (2011), “Securing the Internet of Things”, Computer, Vol. 44 No. 9, pp. 51-58.
54. Roman, R., Zhou, J. and Lopez, J. (2013), “On the features and challenges of security and privacy in distributed Internet of Things”, Computer Networks, Vol. 57 No. 10, pp. 2266-2279.
55. Sundmaeker, H., Guillemin, P., Friess, P. and Woelfflé, S. (2010), Vision and Challenges for Realising the Internet of Things, EUR-OP, Brussels.
56. Tan, W., Chen, S., Li, J., Li, L., Wang, T. and Hu, X. (2014), “A trust evaluation model for e-learning systems”, Systems Research and Behavioral Science, Vol. 31 No. 3, pp. 353-365.
57. Tao, F., Cheng, Y., Xu, L.D., Zhang, L. and Li, B.H. (2014), “CCIoT-CMfg: cloud computing and Internet of Things based cloud manufacturing service system”, IEEE Transactions on Industrial Informatics, Vol. 10 No. 2, pp. 1435-1442.
58. Wang, F., Ge, B., Zhang, L., Chen, Y., Xin, Y. and Li, X. (2013), “A system framework of security management in enterprise systems”, Systems Research and Behavioral Science, Vol. 30 No. 3, pp. 287-299.
59. Wang, K. and Wu, M. (2010), “Cooperative communications based on trust model for mobile ad hoc networks”, IET Information Security, Vol. 4 No. 2, pp. 68-79.
60. Weber, R.H. (2013), “Internet of Things – governance quo vadis?”, Computer Law & Security Review, Vol. 29 No. 4, pp. 341-347.
61. Welbourne, E., Battle, L., Cole, G., Gould, K., Rector, K., Raymer, S., Balazinska, M. and Borriello, G. (2009), “Building the Internet of Things using RFID: the RFID ecosystem experience”, IEEE Internet Computing, Vol. 13 No. 3, pp. 48-55.
62. Wieder, B., Booth, P., Matolcsy, Z.P. and Ossimitz, M.-L. (2006), “The impact of ERP systems on firm and business process performance”, Journal of Enterprise Information Management, Vol. 19 No. 1, pp. 13-29.
63. Xiao, G., Guo, J., Xu, L. and Gong, Z. (2014), “User interoperability with heterogeneous IoT devices through transformation”, IEEE Transactions on Industrial Informatics, Vol. 10 No. 2, pp. 1486-1496.
64. Xu, B., Xu, L.D., Cai, H., Xie, C., Hu, J. and Bu, F. (2014a), “Ubiquitous data accessing method in IoT-based information system for emergency medical services”, IEEE Transactions on Industrial Informatics, Vol. 10 No. 2, pp. 1578-1586.
65. Xu, L., He, W. and Li, S. (2014b), “Internet of Things in industries: a survey”, IEEE Transactions on Industrial Informatics, Vol. 10 No. 4, pp. 2233-2243.
66. Xu, L.D. (2011), “Information architecture for supply chain quality management”, International Journal of Production Research, Vol. 49 No. 1, pp. 183-198.
67. Yao, X., Han, X., Du, X. and Zhou, X. (2013), “A lightweight multicast authentication mechanism for small scale IoT applications”, IEEE Sensors Journal, Vol. 13 No. 10, pp. 3693-3701.
68. Yuan Jie, F., Yue Hong, Y., Li Da, X., Yan, Z. and Fan, W. (2014), “IoT-based smart rehabilitation system”, IEEE Transactions on Industrial Informatics, Vol. 10 No. 2, pp. 1568-1577.