Conference Paper2020Cited by 8

Internet of Things (IoT): Vulnerabilities, Security Concerns and Things to Consider

Eshtiak Ahmed, Ashraful Islam, Mohsena Ashraf, Atiqul Islam Chowdhury, Mohammad Masudur Rahman

2020 11th International Conference on Computing, Communication and Networking Technologies (ICCCNT)

IEEE, pp. 1–6

Abstract

In recent years, Internet of Things (IoT) is rapidly gaining popularity as it has a vast potential. But without proper security and privacy measures, IoT can facilitate cyberattacks as it possesses some serious issues that need to be tackled well to utilize its fullest potential. In this study, an attempt to briefly discuss the basic concept and the pros and cons of IoT was taken by the authors. Moreover, this research also highlights the basic architectural issues, vulnerabilities, and future security concerns of IoT as IoT has a cost when it comes to the case of security and privacy. In addition to that, major threats and attacks of IoT e.g. Denial of Service (DoS), Man in The Middle (MiTM), Supervisory Control and Data Acquisition (SCADA) attack were explained in brief. At last, probable measures that can be employed in order to strengthen the security of IoT were underlined so that the advantages of IoT can be reaped mostly in terms of security and privacy.

Keywords

  • Internet of Things
  • Internet of Things security
  • man-in-the-middle attacks
  • IoT architecture
  • privacy
  • cyberattacks
  • denial-of-service attacks
  • IoT vulnerabilities
  • security measures

CCDS Authors

Eshtiak Ahmed
Eshtiak Ahmed

Eshtiak Ahmed

  • Collaborator, HCI Wing

Doctoral Researcher

Gamification Group

Tampere University, Finland

Published at

UbiComp, ICIP, HCII, IEEE Access

Research Interests

Human-Computer Interaction, Human-Robot Interaction, Gamification and Assistive Technologies

Ashraful Islam, PhD
Ashraful Islam

Ashraful Islam, PhD

  • Center Director, CCDS
  • Director, HCI Wing

Assistant Professor

Department of Computer Science and Engineering

Independent University, Bangladesh (IUB)

Published at

CHI, UIST, UbiComp, IJCNN, ICIP, HCII, ICDMW, BLP, IEEE Internet of Things Journal, JMIR, JMIR Human Factors, JMIR Formative Research, IEEE Access, Smart Agricultural Technology, Diabetes Research and Clinical Practice, PLOS ONE

Research Interests

Human-Computer Interaction, AI for Social Good, AI for Public Health, AI for Impact

References

  1. 1.Jie Lin, Wei Yu, Nan Zhang, Xinyu Yang, Hanlin Zhang, Wei Zhao. (2017). A Survey on Internet of Things: Architecture, Enabling Technologies, Security and Privacy, and Applications. IEEE Internet of Things Journal, 4(5), 1125–1142[10.1109/jiot.2017.2683200]
  2. 2.Constantinos Kolias, Georgios Kambourakis, Angelos Stavrou, Jeffrey Voas. (2017). DDoS in the IoT: Mirai and Other Botnets. Computer, 50(7), 80–84[10.1109/mc.2017.201]
  3. 3.Debasis Bandyopadhyay, Jaydip Sen. (2011). Internet of Things: Applications and Challenges in Technology and Standardization. Wireless Personal Communications, 58(1), 49–69[10.1007/s11277-011-0288-5]
  4. 4.Yuchen Yang, Longfei Wu, Guisheng Yin, Lijie Li, Hongbin Zhao. (2017). A Survey on Security and Privacy Issues in Internet-of-Things. IEEE Internet of Things Journal, 4(5), 1250–1258[10.1109/jiot.2017.2694844]
  5. 5.Tiago M. Fernández‐Caramés, Paula Fraga‐Lamas. (2018). A Review on the Use of Blockchain for the Internet of Things. IEEE Access, 6, 32979–33001[10.1109/access.2018.2842685]
  6. 6.Nir Kshetri. (2017). Can Blockchain Strengthen the Internet of Things?. IT Professional, 19(4), 68–72[10.1109/mitp.2017.3051335]
  7. 7.Hui Suo, Jiafu Wan, Caifeng Zou, Jianqi Liu. (2012). Security in the Internet of Things: A Review. , 648–651[10.1109/iccsee.2012.373]
  8. 8.Mohamed Abomhara, Geir M. K�ien. (2015). Cyber Security and the Internet of Things: Vulnerabilities, Threats, Intruders and Attacks. Journal of Cyber Security and Mobility, 4(1), 65–88[10.13052/jcsm2245-1439.414]
  9. 9.L. Minh Dang, Md. Jalil Piran, Dongil Han, Kyungbok Min, Hyeonjoon Moon. (2019). A Survey on Internet of Things and Cloud Computing for Healthcare. Electronics, 8(7), 768[10.3390/electronics8070768]
  10. 10.Miao Wu, Tingjie Lu, Fei-Yang Ling, Jing Sun, Huiying Du. (2010). Research on the architecture of Internet of Things. , V5–484[10.1109/icacte.2010.5579493]
  11. 11.Yang Lu, Li Da Xu. (2018). Internet of Things (IoT) Cybersecurity Research: A Review of Current Research Topics. IEEE Internet of Things Journal, 6(2), 2103–2115[10.1109/jiot.2018.2869847]
  12. 12.Aakanksha Tewari, Brij B. Gupta. (2018). Security, privacy and trust of different layers in Internet-of-Things (IoTs) framework. Future Generation Computer Systems, 108, 909–920[10.1016/j.future.2018.04.027]
  13. 13.Jie Ding, Hossein Mashad Nemati, Chathurika Ranaweera, Jinho Choi. (2020). IoT Connectivity Technologies and Applications: A Survey. IEEE Access, 8, 67646–67673[10.1109/access.2020.2985932]
  14. 14.Bako Ali, Ali Ismail Awad. (2018). Cyber and Physical Security Vulnerability Assessment for IoT-Based Smart Homes. Sensors, 18(3), 817[10.3390/s18030817]
  15. 15.Ruinian Li, Tianyi Song, Bo Mei, Hong Li, Xiuzhen Cheng, Limin Sun. (2018). Blockchain for Large-Scale Internet of Things Data Storage and Protection. IEEE Transactions on Services Computing, 12(5), 762–771[10.1109/tsc.2018.2853167]
  16. 16.Fan Wu, Taiyang Wu, Mehmet Rasit Yuce. (2018). An Internet-of-Things (IoT) Network System for Connected Safety and Health Monitoring Applications. Sensors, 19(1), 21[10.3390/s19010021]
  17. 17.Francesco Restuccia, Salvatore D’Oro, Tommaso Melodia. (2018). Securing the Internet of Things in the Age of Machine Learning and Software-Defined Networking. IEEE Internet of Things Journal, 5(6), 4829–4842[10.1109/jiot.2018.2846040]
  18. 18.Mirza Abdur, Sajid Habib, Muhammad Ali, Saleem Ullah. (2017). Security Issues in the Internet of Things (IoT): A Comprehensive Study. International Journal of Advanced Computer Science and Applications, 8(6)[10.14569/ijacsa.2017.080650]
  19. 19.Salma Abdalla Hamad, Quan Z. Sheng, Wei Emma Zhang, ‪Surya Nepal‬. (2020). Realizing an Internet of Secure Things: A Survey on Issues and Enabling Technologies. IEEE Communications Surveys & Tutorials, 22(2), 1372–1391[10.1109/comst.2020.2976075]
  20. 20.Aram Kim, Junhyoung Oh, Jinho Ryu, Kyungho Lee. (2020). A Review of Insider Threat Detection Approaches With IoT Perspective. IEEE Access, 8, 78847–78867[10.1109/access.2020.2990195]
  21. 21.Seohyeon Jeong, Woongsoo Na, Joongheon Kim, Sungrae Cho. (2018). Internet of Things for Smart Manufacturing System: Trust Issues in Resource Allocation. IEEE Internet of Things Journal, 5(6), 4418–4427[10.1109/jiot.2018.2814063]
  22. 22.Debabrata Singh, Bibudhendu Pati, Chhabi Rani Panigrahi, Shrabanee Swagatika. (2020). Security Issues in IoT and their Countermeasures in Smart City Applications. Advances in intelligent systems and computing, 301–313[10.1007/978-981-15-1483-8_26]
  23. 23.Jiewei Qian, He Xu, Peng Li. (2016). A Novel Secure Architecture for the Internet of Things. , 398–401[10.1109/incos.2016.36]
  24. 24.Eshtiak Ahmed, Ashraful Islam, Farhana Sarker, Mohammad Nurul Huda, Khondaker Abdullah-Al-Mamun. (2016). A road to independent living with smart homes for people with disabilities. , 15, 472–477[10.1109/iciev.2016.7760048]
  25. 25.Bo Xing. (2015). Ontological Framework–Assisted Embedded System Design with Security Consideration in a Cyber-Physical Power System Environment. , 110–137[10.1201/b19311-9]
  26. 26.Florin Popențiu-Vlădicescu, Grigore Albeanu, Henrik Madesn. (2019). Reliability of Modern Engineering Systems - Towards a Safer World. 2019 2nd International Conference on Computing, Mathematics and Engineering Technologies (iCoMET), tbc 19, 1–5[10.1109/icomet.2019.8673474]
  27. 27.Dr Craig S Wright. (2008). Bitcoin: A Peer-to-Peer Electronic Cash System. SSRN Electronic Journal[10.2139/ssrn.3440802]

Cited By

  1. 1.Andre Henrique Mayer, Vinicius Facco Rodrigues, Cristiano Andre da Costa, Rodrigo da Rosa Righi, Alex Roehrs, Rodolfo Stoffel Antunes. (2021). FogChain: A Fog Computing Architecture Integrating Blockchain and Internet of Things for Personal Health Records. IEEE Access, 9, 122723–122737[10.1109/access.2021.3109822]
  2. 2.Komal Saini, Sandeep Sharma. (2025). Smart Road Traffic Monitoring: Unveiling the Synergy of IoT and AI for Enhanced Urban Mobility. ACM Computing Surveys, 57(11), 1–45[10.1145/3729217]
  3. 3.Abhishek Raghuvanshi, Umesh Kumar Singh, Thanwamas Kassanuk, Khongdet Phasinam. (2022). Internet of Things: Security Vulnerabilities and Countermeasures. ECS Transactions, 107(1), 15043–15052[10.1149/10701.15043ecst]
  4. 4.Leonardo Ayavaca-Vallejo, Diego Avila-Pesantez. (2023). Smart Home IoT Cybersecurity Survey: A Systematic Mapping. , 1–6[10.1109/ictas56421.2023.10082751]
  5. 5.Sushil Bhardwaj, Indu Sharma, Shivani Mahendru, Ramandeep Kaur, Surbhi Sharma. (2025). Exploring the Role of AIoT in Data Privacy and Security. Advances in computational intelligence and robotics book series, 75–102[10.4018/979-8-3693-8547-0.ch003]
  6. 6.Fausto Manuel Coronel Ayala, Galo Mauricio López Sevilla. (2023). Mapeo del panorama actual de la ciberseguridad en la era moderna digital. RECIMUNDO, 7(2), 441–452[10.26820/recimundo/7.(2).jun.2023.441-452]
  7. 7.Zhao Huang, Zhenji Zhou, Lei Song, Fenglei Deng, Lei Zhang, Kunkun SongGong, Minghang Shen. (2026). CID4IoT: IoT-Oriented Command Injection Vulnerability Detection Based on Critical Code Extraction and LLM Analysis. IEEE Internet of Things Journal, 13(9), 19058–19075[10.1109/jiot.2026.3662325]
  8. 8.Gunjan Keshtwal, Rafia Abbasi, Rahul Chauhan, Ruchira Rawat. (2024). Unlocking Blockchain: The Technology Set to Revolutionize Transactions, Security, and Industry. , 496–501[10.1109/icses63445.2024.10763216]