Conference Paper2020Cited by 6

A Framework to Address Security Concerns in Three Layers of IoT

Alwyn Jose, Sami Azam, Asif Karim, Bharanidharan Shanmugam, Fahad Faisal, Ashraful Islam, Friso De Boer, Mirjam Jonkman

2020 2nd International Conference on Electrical, Control and Instrumentation Engineering (ICECIE)

IEEE, pp. 1–6

DOI: 10.1109/icecie50279.2020.9309710URL

Abstract

The Internet of Things (IoT) is becoming part of many aspects of our life, including healthcare, home utilities, retail, energy, logistics, etc. This prolific and ubiquitous nature of IoT based systems brings with it the threats of cyber-attacks in a variety of forms. An IoT framework is a set of controlling rules, standards and protocols which makes implementation of IoT applications somewhat streamlined. However, due to the existence of a plethora of IoT devices, applications and technologies, standardization of IoT protocols is a complex undertaking. Several well-known IT organizations have their own customized standards for the IoT platform. However, the lack of stable standardization has been a prime concern for quite some time. This research outlines the overall technologies used in IoT security implementation and an overview of different threats faced by IoT devices. The work also recommends a security framework that can effectively be implemented with various IoT based systems.

Keywords

  • Internet of Things security
  • IoT security framework
  • IoT threats
  • IoT devices
  • IoT architecture layers

CCDS Authors

Ashraful Islam, PhD
Ashraful Islam

Ashraful Islam, PhD

  • Center Director, CCDS
  • Director, HCI Wing

Assistant Professor

Department of Computer Science and Engineering

Independent University, Bangladesh (IUB)

Published at

CHI, UIST, UbiComp, IJCNN, ICIP, HCII, ICDMW, BLP, IEEE Internet of Things Journal, JMIR, JMIR Human Factors, JMIR Formative Research, IEEE Access, Smart Agricultural Technology, Diabetes Research and Clinical Practice, PLOS ONE

Research Interests

Human-Computer Interaction, AI for Social Good, AI for Public Health, AI for Impact

References

  1. 1.Rolf H. Weber. (2010). Internet of Things – New security and privacy challenges. Computer law & security review, 26(1), 23–30[10.1016/j.clsr.2009.11.008]
  2. 2.Fadele Ayotunde Alaba, Mazliza Othman, Mohamed Hashem, Faiz Abdullah Alotaibi. (2017). Internet of Things security: A survey. Journal of Network and Computer Applications, 88, 10–28[10.1016/j.jnca.2017.04.002]
  3. 3.Jorge Granjal, Edmundo Monteiro, Jorge Sá Silva. (2015). Security for the Internet of Things: A Survey of Existing Protocols and Open Research Issues. IEEE Communications Surveys & Tutorials, 17(3), 1294–1312[10.1109/comst.2015.2388550]
  4. 4.Mahmoud Ammar, Giovanni Russello, Bruno Crispo. (2017). Internet of Things: A survey on the security of IoT frameworks. Journal of Information Security and Applications, 38, 8–27[10.1016/j.jisa.2017.11.002]
  5. 5.Kai Zhao, Lina Ge. (2013). A Survey on the Internet of Things Security. , 663–667[10.1109/cis.2013.145]
  6. 6.Jun Zhou, Zhenfu Cao, Xiaolei Dong, Athanasios V. Vasilakos. (2017). Security and Privacy for Cloud-Based IoT: Challenges. IEEE Communications Magazine, 55(1), 26–33[10.1109/mcom.2017.1600363cm]
  7. 7.Srivaths Ravi, Anand Raghunathan, Paul Kocher, S. V. Hattangady. (2004). Security in embedded systems. ACM Transactions on Embedded Computing Systems, 3(3), 461–491[10.1145/1015047.1015049]
  8. 8.Tobias Heer, Óscar García-Morchón, René Hummen, Sye Loong Keoh, Sandeep Kumar, Klaus Wehrle. (2011). Security Challenges in the IP-based Internet of Things. Wireless Personal Communications, 61(3), 527–542[10.1007/s11277-011-0385-5]
  9. 9.Sachin D. Babar, Antonietta Stango, Neeli R. Prasad, Jaydip Sen, Ramjee Prasad. (2011). Proposed embedded security framework for Internet of Things (IoT). , 1–5[10.1109/wirelessvitae.2011.5940923]
  10. 10.Amit Dvir, Tamás Holczer, Levente Buttyán. (2011). VeRA - Version Number and Rank Authentication in RPL. , 709–714[10.1109/mass.2011.76]
  11. 11.René Hummen, Jens Hiller, Hanno Wirtz, Martin Henze, Hossein Shafagh, Klaus Wehrle. (2013). 6LoWPAN fragmentation attacks and mitigation mechanisms. , 55–66[10.1145/2462096.2462107]
  12. 12.Riccardo Bonetto, Nicola Bui, Vishwas Lakkundi, Alexis Olivereau, Alexandru Serbanati, Michele Rossi. (2012). Secure communication for smart IoT objects: Protocol stacks, use cases and practical examples. , 1–7[10.1109/wowmom.2012.6263790]
  13. 13.Muneer Bani Yassein, Mohammed Q. Shatnawi, Du’a Al-Zoubi. (2016). Application layer protocols for the Internet of Things: A survey. , 1–4[10.1109/icemis.2016.7745303]
  14. 14.Sowmya Nagasimha Swamy, Dipti Jadhav, Nikita Kulkarni. (2017). Security threats in the application layer in IOT applications. 2017 International Conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud) (I-SMAC), 477–480[10.1109/i-smac.2017.8058395]
  15. 15.Ramão Tiago Tiburski, Leonardo Albernaz Amaral, Éverton de Matos, Fabiano Hessel. (2015). The importance of a standard securit y archit ecture for SOA-based iot middleware. IEEE Communications Magazine, 53(12), 20–26[10.1109/mcom.2015.7355580]
  16. 16.Benjamin Fabian, Oliver Günther. (2007). Distributed ONS and its Impact on Privacy. , 1223–1228[10.1109/icc.2007.207]
  17. 17.Farida Habib Semantha, Sami Azam, Kheng Cher Yeo, Bharanidharan Shanmugam. (2020). A Systematic Literature Review on Privacy by Design in the Healthcare Sector. Electronics, 9(3), 452[10.3390/electronics9030452]
  18. 18.Asif Ahmed, Mahbub Parvez, Md Hridoy Hasan, Fernaz Narin Nur, Nazmun Nessa Moon, Asif Karim, Sami Azam, Bharanidharan Shanmugam, Mirjam Jonkman. (2019). An Intelligent and Secured Tracking System for Monitoring School Bus. , 1–5[10.1109/iccci.2019.8822187]
  19. 19.Mario Frustaci, Pasquale Pace, Gianluca Aloi. (2017). Securing the IoT world: Issues and perspectives. , 246–251[10.1109/cscn.2017.8088629]
  20. 20.Ahmet Arış, Sema Oktuğ, Thiemo Voigt. (2018). Security of Internet of Things for a Reliable Internet of Services. Lecture notes in computer science, 337–370[10.1007/978-3-319-90415-3_13]
  21. 21.Boheung Chung, Jeongyeo Kim, Youngsung Jeon. (2016). On-demand security configuration for IoT devices. , 1082–1084[10.1109/ictc.2016.7763373]
  22. 22.Aman Kathed, Sami Azam, Bharanidharan Shanmugam, Asif Karim, Kheng Cher Yeo, Friso De Boer, Mirjam Jonkman. (2019). An Enhanced 3-Tier Multimodal Biometric Authentication. , 1–6[10.1109/iccci.2019.8822117]
  23. 23.Rahul Shokeen, Bharanidharan Shanmugam, Krishnan Kannoorpatti, Sami Azam, Mirjam Jonkman, Mamoun Alazab. (2019). Vulnerabilities Analysis and Security Assessment Framework for the Internet of Things. , 22–29[10.1109/ccc.2019.00-14]
  24. 24.Eberhard Grummt, Markus Müller. (2008). Fine-Grained Access Control for EPC Information Services. Lecture notes in computer science, 35–49[10.1007/978-3-540-78731-0_3]
  25. 25.Ayush Gai, Sami Azam, Bharanidharan Shanmugam, Mirjam Jonkman, Friso De Boer. (2018). Categorisation of security threats for smart home appliances. , 1–5[10.1109/iccci.2018.8441213]
  26. 26.Eshtiak Ahmed, Ashraful Islam, Farhana Sarker, Mohammad Nurul Huda, Khondaker Abdullah-Al-Mamun. (2016). A road to independent living with smart homes for people with disabilities. , 15, 472–477[10.1109/iciev.2016.7760048]
  27. 27.Tanvirali Musa, Kheng Cher Yeo, Sami Azam, Bharanidharan Shanmugam, Asif Karim, Friso De Boer, Fernaz Narin Nur, Fahim Faisal. (2019). Analysis of Complex Networks for Security Issues using Attack Graph. , 1–6[10.1109/iccci.2019.8822179]
  28. 28.Vladimir Hovsepyan. (2016). Securing data transfer in IOT environment. Ukrainian Scientific Journal of Information Security, 22(2)[10.18372/2225-5036.22.10705]

Cited By

  1. 1.Shalini Kumari, Chander Prabha, Asif Karim, Md. Mehedi Hassan, Sami Azam. (2024). A Comprehensive Investigation of Anomaly Detection Methods in Deep Learning and Machine Learning: 2019–2023. IET Information Security, 2024(1)[10.1049/2024/8821891]
  2. 2.Mohammad Mobarak Hossain, Mohammod Abul Kashem, Md. Monirul Islam, Md. Sahidullah, Sumona Hoque Mumu, Jia Uddin, Daniel Gavilanes Aray, Isabel de la Torre Diez, Imran Ashraf, Md Abdus Samad. (2023). Internet of Things in Pregnancy Care Coordination and Management: A Systematic Review. Sensors, 23(23), 9367[10.3390/s23239367]
  3. 3.Zarrin Tasnim, Saikat Das, Rakibul Islam, Jahanur Biswas, F. M. Javed Mehedi Shamrat, Ankit Khater. (2022). Sensor based Smart Automated Gas Leakage Detection and Prevention System. 2022 6th International Conference on Trends in Electronics and Informatics (ICOEI), 460–466[10.1109/icoei53556.2022.9777130]
  4. 4.F. M. Javed Mehedi Shamrat, Alamin Hossain, Tonmoy Roy, Md Ahasanul Adeeb Khan, Ankit Khater, Md Tareq Rahman. (2021). IoT Based Smart Automated Agriculture and Real Time Monitoring System. 2021 2nd International Conference on Smart Electronics and Communication (ICOSEC), 47–53[10.1109/icosec51865.2021.9591855]
  5. 5.Hong Liu, Amit Yadav, Li Qin Hu, Md. Mehedi Hassan, Swarnali Mollick, Dinesh Talwar. (2023). Research on the Ecological Environment Evaluation of Technological Talents in the Shuangcheng Economic Circle of Chengdu Region. Lecture notes in electrical engineering, 25–37[10.1007/978-981-99-5358-5_2]
  6. 6.Li Qin Hu, Asif Khan, Amit Yadav, Hong Liu. (2022). Research on the Appraisal of the Attraction of Technological Talents in the Shuangcheng Economic Circle of Chengdu-Chongqing Region. 2022 12th International Conference on Cloud Computing, Data Science & Engineering (Confluence), 2015, 59–65[10.1109/confluence52989.2022.9734224]
← All publications