INTERNET OF THINGS SECURITY AND PRIVACY: A LAYER-BASED HIERARCHICAL SURVEY

Abstract

With the fast development of Internet of Things (IoT), heterogeneous devices have become easily interconnected, thus creating great progress in intelligent applications of smart homes, healthcare, transportation, and industrial automation among others. But the extensive use of IoT systems has also brought about serious security and privacy issues because of its distributed design, device constrained resources, and heterogeneous communication systems. In this paper, one will encounter a systematic hierarchical survey of the security and privacy threats of IoT systems on a four-layer architecture that is composed of application layer, middleware layer, network layer, and the perception layer. Each layer undergoes the systematic analysis of attacks, such as cryptographic, malware injection, denial-of-service, routing and protocol-level, physical tampering, and side-channel attacks. The survey emphasizes the fact that the vulnerabilities on various layers can be exploited to either damage the confidentiality, integrity, availability, and user privacy alone or together. This study will help gain more insight into the current vulnerabilities and assist researchers and practitioners to create well-designed and secure IoT systems because it offers a systematic layer-based classification of the threats of IoT security.