Evaluating critical security issues of the IoT world: Present and future challenges

IEEE Internet of Things Journal

Volumn 5, Issue 4, 2018, Pages 2483-2495

  Frustaci, Mario ^a   Pace, Pasquale ^a   Aloi, Gianluca ^a   Fortino, Giancarlo ^a  

^a UNIVERSITY OF CALABRIA   (Italy)

Author keywords

Cyber threats; Internet of things (IoT); IoT protocols; IoT security; IoT system model; Trust

Indexed keywords

DATA PRIVACY; INTERNET PROTOCOLS; MALWARE; NETWORK PROTOCOLS; NETWORK SECURITY; SENSORS; TRUSTED COMPUTING; WIRELESS SENSOR NETWORKS;

CYBER THREATS; IOT SECURITY; ROUTING; SECURITY; SYSTEM MODELING; TRUST;

INTERNET OF THINGS;

EID: 85032723989     PISSN: None     EISSN: 23274662     Source Type: Journal    
DOI: 10.1109/JIOT.2017.2767291     Document Type: Article

References (55)

1. S. Karnouskos, P. J. Marrón, G. Fortino, L. Mottola, and J. R. Martínez-de Dios, Applications and Markets for Cooperating Objects (Springer Briefs in Electrical and Computer Engineering). Heidelberg, Germany: Springer, 2014, pp. 1-120.
2. G. Fortino and P. Trunfio, Internet of Things Based on Smart Objects, Technology, Middleware and Applications. Cham, Switzerland: Springer, 2014.
3. H. Xiao, N. Sidhu, and B. Christianson, "Guarantor and reputation based trust model for social Internet of Things," in Proc. Int. Wireless Commun. Mobile Comput. Conf. (IWCMC), Dubrovnik, Croatia, 2015, pp. 600-605.
4. Inter-IoT Project. Accessed: Oct. 2017. [Online]. Available: http://www.inter-iot-project.eu/
5. Wikipedia Contributors. (2016). Dyn Cyberattack. [Online]. Available: https://en.wikipedia.org/w/index.php?title=2016-Dyn-cyberattack& oldid=763071700
6. E. Ronen, A. Shamir, A.-O. Weingarten, and C. O'Flynn, "IoT goes nuclear: Creating a ZigBee chain reaction," in Proc. IEEE Symp. Security Privacy (SP), San Jose, CA, USA, 2017, pp. 195-212.
7. Q. Jing, A. V. Vasilakos, J. Wan, J. Lu, and D. Qiu, "Security of the Internet of Things: Perspectives and challenges," Wireless Netw., vol. 20, no. 8, pp. 2481-2501, Nov. 2014.
8. K. Lin, M. Chen, J. Deng, M. M. Hassan, and G. Fortino, "Enhanced fingerprinting and trajectory prediction for IoT localization in smart buildings," IEEE Trans. Autom. Sci. Eng., vol. 13, no. 3, pp. 1294-1307, Jul. 2016.
9. S. Baraković et al., "Security issues in wireless networks: An overview," in Proc. XI Int. Symp. Telecommun. (BIHTEL), Sarajevo, Bosnia and Herzegovina, 2016, pp. 1-6.
10. P. De Meo, K. Musial-Gabrys, D. Rosaci, G. M. L. Sarnè, and L. Aroyo, "Using centrality measures to predict helpfulness-based reputation in trust networks," ACM Trans. Internet Technol., vol. 17, no. 1, pp. 1-20, 2017.
11. W.-Y. Lin, X. Zhang, H. Song, and K. Omori, "Health information seeking in the Web 2.0 age: Trust in social media, uncertainty reduction, and self-disclosure," Comput. Human Behav., vol. 56, pp. 289-294, Mar. 2016.
12. H. Shirgahi, M. Mohsenzadeh, and H. H. S. Javadi, "Trust estimation of the semantic Web using semantic Web clustering," J. Exp. Theor. Artif. Intell., vol. 29, no. 3, pp. 537-556, 2017.
13. T. S. Vijay, S. Prashar, and C. Parsad, "Online shoppers' satisfaction: The impact of shopping values, website factors and trust," Int. J. Strategic Decis. Sci., vol. 8, no. 2, pp. 52-69, 2017.
14. S. Pinto, T. Gomes, J. Pereira, J. Cabral, and A. Tavares, "IIoTEED: An enhanced, trusted execution environment for industrial IoT edge devices," IEEE Internet Comput., vol. 21, no. 1, pp. 40-47, Jan./Feb. 2017.
15. D. He, C. Chen, S. Chan, J. Bu, and A. V. Vasilakos, "ReTrust: Attack-resistant and lightweight trust management for medical sensor networks," IEEE Trans. Inf. Technol. Biomed., vol. 16, no. 4, pp. 623-632, Jul. 2012.
16. Z. Yan, P. Zhang, and A. V. Vasilakos, "A survey on trust management for Internet of Things," J. Netw. Comput. Appl., vol. 42, pp. 120-134, Jun. 2014.
17. G. Lize, W. Jingpei, and S. Bin, "Trust management mechanism for Internet of Things," China Commun., vol. 11, no. 2, pp. 148-156, Feb. 2014.
18. I.-R. Chen, F. Bao, and J. Guo, "Trust-based service management for social Internet of Things systems," IEEE Trans. Depend. Secure Comput., vol. 13, no. 6, pp. 684-696, Nov./Dec. 2016.
19. I. Kounelis et al., "Building trust in the human-Internet of Things relationship," IEEE Technol. Soc. Mag., vol. 33, no. 4, pp. 73-80, Nov. 2014.
20. O. Arias, J. Wurm, K. Hoang, and Y. Jin, "Privacy and security in Internet of Things and wearable devices," IEEE Trans. Multi-Scale Comput. Syst., vol. 1, no. 2, pp. 99-109, Apr./Jun. 2015.
21. A. Al-Fuqaha, M. Guizani, M. Mohammadi, M. Aledhari, and M. Ayyash, "Internet of Things: A survey on enabling technologies, protocols, and applications," IEEE Commun. Surveys Tuts., vol. 17, no. 4, pp. 2347-2376, 4th Quart., 2015.
22. X. Xu, R. Ansari, A. Khokhar, and A. V. Vasilakos, "Hierarchical data aggregation using compressive sensing (HDACS) in WSNs," ACM Trans. Sensor Netw., vol. 11, no. 3, 2015, Art. no. 45.
23. Y. Qin et al., "When things matter: A survey on data-centric Internet of Things," J. Netw. Comput. Appl., vol. 64, pp. 137-153, Apr. 2016.
24. J. Wan et al., "Software-defined industrial Internet of Things in the context of industry 4.0," IEEE Sensors J., vol. 16, no. 20, pp. 7373-7380, Oct. 2016.
25. G. Aloi et al., "Enabling IoT interoperability through opportunistic smartphone-based mobile gateways," J. Netw. Comput. Appl., vol. 81, pp. 74-84, Mar. 2017.
26. R. Gravina, C. E. Palau, M. Manso, A. Liotta, and G. Fortino, Integration, Interconnection, and Interoperability of IoT Systems. Cham, Switzerland: Springer, 2018.
27. G. Aloi et al., "A mobile multi-technology gateway to enable IoT interoperability," in Proc. IEEE 1st Int. Conf. Internet Things Design Implement. (IoTDI), Berlin, Germany, 2016, pp. 259-264.
28. Z. Sheng et al., "A survey on the IETF protocol suite for the Internet of Things: Standards, challenges, and opportunities," IEEE Wireless Commun., vol. 20, no. 6, pp. 91-98, Dec. 2013.
29. Y. Zou, J. Zhu, X. Wang, and L. Hanzo, "A survey on wireless security: Technical challenges, recent advances, and future trends," Proc. IEEE, vol. 104, no. 9, pp. 1727-1765, Sep. 2016.
30. S. Chakrabarty and D. W. Engels, "Black networks for Bluetooth low energy," in Proc. IEEE Int. Conf. Consum. Electron. (ICCE), Las Vegas, NV, USA, 2016, pp. 11-14.
31. Y. Qu and P. Chan, "Assessing vulnerabilities in Bluetooth low energy (BLE) wireless network based IoT systems," in Proc. IEEE 2nd Int. Conf. Big Data Security Cloud (BigDataSecurity), New York, NY, USA, 2016, pp. 42-48.
32. A. H. Adnan et al., "A comparative study of WLAN security protocols: WPA, WPA2," in Proc. Int. Conf. Adv. Elect. Eng. (ICAEE), Dhaka, Bangladesh, 2015, pp. 165-169.
33. A. G. Sulaiman and I. F. Al Shaikhli, "Comparative study On 4G/LTE cryptographic algorithms based on different factors," Int. J. Comput. Sci. Telecommun., vol. 5, no. 7, pp. 7-10, Jul. 2014.
34. Y. E. Gelogo, R. D. Caytiles, and B. Park, "Threats and security analysis for enhanced secure neighbor discovery protocol (SEND) of IPv6 NDP security," Int. J. Control Autom., vol. 4, no. 4, pp. 179-184, 2011.
35. C. Hennebert and J. D. Santos, "Security protocols and privacy issues into 6LoWPAN stack: A synthesis," IEEE Internet Things J., vol. 1, no. 5, pp. 384-398, Oct. 2014.
36. (Dec. 2014). Bluetooth Core Version 4.2. [Online]. Available: https://www.bluetooth.com/specifications/adopted-specifications
37. A Basic Introduction to BLE Security. Accessed: Nov. 2016. [Online]. Available: https://eewiki.net/display/Wireless/A+Basic+Introduction+ to+BLE+Security
38. S. Raza et al., "Securing communication in 6LoWPAN with compressed IPsec," in Proc. Int. Conf. Distrib. Comput. Sensor Syst. Workshops (DCOSS), Barcelona, Spain, 2011, pp. 1-8.
39. "RPL: IPv6 routing protocol for low-power and lossy networks," Internet Eng. Task Force, Fremont, CA, USA, RFC 6550, 2012. [Online]. Available: https://tools.ietf.org/html/rfc6550
40. J. Granjal, E. Monteiro, and J. S. Silva, "Security for the Internet of Things: A survey of existing protocols and open research issues," IEEE Commun. Surveys Tuts., vol. 17, no. 3, pp. 1294-1312, 3rd Quart., 2015.
41. S. Raza, L. Wallgren, and T. Voigt, "SVELTE: Real-time intrusion detection in the Internet of Things," Ad Hoc Netw., vol. 11, no. 8, pp. 2661-2674, Nov. 2013.
42. M. Singh, M. A. Rajan, V. L. Shivraj, and P. Balamuralidhar, "Secure MQTT for Internet of Things (IoT)," in Proc. 5th Int. Conf. Commun. Syst. Netw. Technol., Gwalior, India, 2015, pp. 746-751.
43. X. Wang, J. Zhang, E. M. Schooler, and M. Ion, "Performance evaluation of attribute-based encryption: Toward data privacy in the IoT," in Proc. IEEE Int. Conf. Commun. (ICC), Sydney, NSW, Australia, 2014, pp. 725-730.
44. R. Neisse, G. Steri, and G. Baldini, "Enforcement of security policy rules for the Internet of Things," in Proc. IEEE 10th Int. Conf. Wireless Mobile Comput. Netw. Commun. (WiMob), Larnaca, Cyprus, 2014, pp. 165-172.
45. R. Neisse, G. Steri, I. N. Fovino, and G. Baldini, "SecKit: A model-based security toolkit for the Internet of Things," Comput. Security, vol. 54, pp. 60-76, Oct. 2015.
46. Mosquitto: An Open Source MQTT v3.1/v3.1.1 Broker. Accessed: Oct. 2017. [Online]. Available: https://mosquitto.org/
47. R. A. Rahman and B. Shah, "Security analysis of IoT protocols: A focus in CoAP," in Proc. 3rd MEC Int. Conf. Big Data Smart City (ICBDSC), Muscat, Oman, 2016, pp. 1-7.
48. S. Raza, H. Shafagh, K. Hewage, R. Hummen, and T. Voigt, "Lithe: Lightweight secure CoAP for the Internet of Things," IEEE Sensors J., vol. 13, no. 10, pp. 3711-3720, Oct. 2013.
49. S. Zamfir, T. Balan, I. Iliescu, and F. Sandu, "A security analysis on standard IoT protocols," in Proc. Int. Conf. Appl. Theor. Electricity (ICATE), Craiova, Romania, 2016, pp. 1-6.
50. CVSS. Accessed: Mar. 2017. [Online]. Available: https://en.wikipedia.org/wiki/CVSS
51. CVSSv2. Accessed: Mar. 2017. [Online]. Available: https://www.first.org/cvss/v2/guide
52. Common Vulnerability Scoring System Version 2 Calculator. Accessed: Mar. 2017. [Online]. Available: https://nvd.nist.gov/CVSS/CVSS-v2-Calculator
53. OWASP Project. Accessed: Mar. 2017. [Online]. Available: https://www.owasp.org/ index.php/OWASP-Internet-of-Things-Project
54. The Internet of Things (IoT): An Overview. Accessed: Mar. 2017. [Online]. Available: https://www.internetsociety.org/doc/iot-overview
55. J. Ahamed and A. V. Rajan, "Internet of Things (IoT): Application systems and security vulnerabilities," in Proc. 5th Int. Conf. Electron. Devices Syst. Appl. (ICEDSA), Ras al-Khaimah, UAE, 2016, pp. 1-5.