Skip to main content
SpringerLink
Log in

Security and Privacy Threats in IoT-Enabled Smart Cities

  • Chapter
  • First Online:
IoT for Sustainable Smart Cities and Society

Part of the book series: Internet of Things ((ITTCC))

Abstract

Presently, the globe is going through development in smart cities as the Internet of Things (IoT) is capable of connecting with almost every object in the environment through sensors, cloud, end user devices, and user interface. This is possible because of the uprising in information technology day by day, thereafter contributing to the social and economic welfare of citizens. The Internet is becoming more integrated in daily life as managed by the Internet of Things. As IoT devices embrace novel endless opportunities to make life easier for people, they also increase the risk of data breaches, unsuspected users, and malicious attacks in the IoT framework. So preserving security and privacy from threats and attacks is an endowing challenge that is faced by IoT devices. It is known to an extent that data are more vulnerable in terms of security and privacy, because of integrated features implemented in the Internet of Things. Consequently, it is more prone to cyber threats and attacks despite the fact that it brings unbounded comfort and social security. Resolving these challenges and promising security and privacy of information against threats and attacks should be the prime priority while designing and implementing the architecture of Internet of things (IoT). However, the end user ought to trust that IoT devices and services provided by them are safe and secure. IoT devices protection needs to be considered while designing the framework, to protect it from any kind of threat and attack while keeping in mind ethics and policies which are utilized by the Internet of Things mechanization. In this chapter, privacy and security issues are discussed along with threats and attacks. Overview of the Interest of Things (IoT) is discussed in the beginning. Research work done in the past is also reviewed and examined with state of the art whereupon highlighting techniques utilized including the objectives and limitations. Additionally, this chapter covers layers of the Internet of Things (IoT) with the network of IoT and security and challenges in each layer of IoT architecture. Major security issues are also considered, followed by a discussion about Smart City Applications with their threats and solutions precisely to preserve concealment of Internet of Things (IoT) devices.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution
Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 119.00
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 159.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD 159.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

References

  1. Jang-Jaccard, J., & Nepal, S. (2014). A survey of emerging threats in cybersecurity. Journal of Computer and System Sciences, 80(5), 973–993.

    Article  MathSciNet  Google Scholar 

  2. https://www.alliedmarketresearch.com/internet-of-things-iot-in-agriculture-market. DOA: 06-06-2021.

    Google Scholar 

  3. https://www.statista.com/statistics/992118/worldwide-internet-of-things-top-patent-owners/. DOA: 06-06-2021.

    Google Scholar 

  4. https://www.forbes.com/sites/zakdoffman/2019/09/14/dangerous-cyberattacks-on-iot-devices-up-300-in-2019-now-rampant-report-claims/?sh=49add6c58926. DOA: 06-06-2021.

    Google Scholar 

  5. Alqassem (2014, May–June). Privacy and security requirements framework for the internet of things (IoT). International Conference on Software Engineering (ICSE) Companion India (pp. 739–741).

    Google Scholar 

  6. Rahman, F. A., Daud, M., Mohamad, M. Z. (2016, March). Securing Sensor to Cloud Ecosystem using Internet of Things (IoT) Security Framework. ICC (International Conference on Internet of things and Cloud Computing), United Kingdom, Article No.: 79.

    Google Scholar 

  7. Lee, Y. J., & Kim, D. H. (2015). Threats analysis, requirements and considerations for secure internet of things. International Journal of Smart Home, 9, 191–198.

    Article  Google Scholar 

  8. Abomhara, M., Køien, G. M. (2014, May). Security and privacy in the internet of things: current status and open issues. Privacy and Security in Mobile Systems (PRISMS) Denmark, (pp. 1–8).

    Google Scholar 

  9. Alqassem, I., Svetinovic, D. (2014, December). A taxonomy of security and privacy requirements for the internet of things (IoT). Industrial Engineering and Engineering Management (IEEM) Malaysia (pp. 1244–1248).

    Google Scholar 

  10. Kim, H.-J., Chang, H.-S., Suh, J.-J., Shon, T.-S. (2016, May). A study on device security in IoT convergence. Industrial Engineering, Management Science and Application (ICIMSA) South Korea (pp. 1–4).

    Google Scholar 

  11. S. Li, T. Tryfonas, H. Li, “The internet of things: A security point of view”, Internet Research, vol. 26, pp. 337-359, April 2016.

    Google Scholar 

  12. Atlam, H.F., Alenezi, A., Alassafi, M.O., Walters, R.J., Wills, G.B. (2018). XACMLforbuildingaccess control policies in internet of things. In: Proceedings of the 3rd International Conference on Internet of Things, Big Data and Security (IoTBDS 2018) (pp. 253–260).

    Google Scholar 

  13. Atlam, H.F., Walters, R.J., Wills, G.B. (2018). Internet of nano things: security issues and applications. In 2018 2nd International Conference on Cloud and Big Data Computing, no. October (pp. 71–77).

    Google Scholar 

  14. Atlam, H. F., Walters, R. J., & Wills, G. B. (2018). Fog computing and the internet of things: A review. Big Data Cognitive Comput., 2(2), 1–18.

    Article  Google Scholar 

  15. Deogirikar, J. (2017). Security attacks in IoT : a Survey. In International conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud) (pp. 32–37).

    Google Scholar 

  16. Abdur, M., Habib, S., Ali, M., & Ullah, S. Security issues in the internet of things (IoT): A comprehensive study. International Journal of Advanced Computer Science and Applications, 8(6).

    Google Scholar 

  17. Suo, H., Wan, J., Zou, C., & Liu, J. (2012). Security in the internet of things: A review. In International conference on computer science and electronics engineering (CCSEE 2012) (Vol. 3, pp. 648–651).

    Chapter  Google Scholar 

  18. Maple, C. (2017). Security and privacy in the internet of things. Journal of Cyber Policy, 2(2), 155–184.

    Article  Google Scholar 

  19. Martin, P., & Brohman, K. (2014). CLOUDQUAL: A quality model for cloud services. IEEE Transactions on Industrial Informatics, 10(2), 1527–1536.

    Article  Google Scholar 

  20. Cerf, V., Ryan, P., Senges, M., & Whitt, R. (2016). IoT safety and security as shared responsibility. Business Information, 1, 7–19.

    Article  Google Scholar 

  21. Egele, M., Kruegel, C., Kirda, E., & Vigna, G. (2011). PiOS: Detecting privacy leaks in iOS applications. In Proceedings of 28th annual network and distributed system security symposium (pp. 1–15).

    Google Scholar 

  22. Enck, W., Gilbert, P., Han, S., Tendulkar, V., Chun, B.-G., Cox, L. P., Jung, J., McDaniel, P., & Sheth, A. N. (2014). TaintDroid: An information flow tracking system for realtime privacy monitoring on smartphones. ACM Transactions on Computer Systems, 32(2), 1–29.

    Article  Google Scholar 

  23. Xiao, X., Tillmann, N., Fahndrich, M., de Halleux, J., Moskal, M., & Xie, T. (2015). User-aware privacy control via extended static-informationf low analysis. Automated Software Engineering, 22(3), 333–366. https://doi.org/10.1007/s10515014-0166-y

    Article  Google Scholar 

  24. Enck, W., Ongtang, M., & McDaniel, P. (2008). Mitigating android software misuse before it happens. Network and Security Research Center, Department of Computer Science and Engineering, Pennsylvania State University, Tech. Rep.

    Google Scholar 

  25. Ndibanje, B., Lee, H.-J., & Lee, S.-G. (2014). Security analysis and improvements of authentication and access control in the internet of things. Sensors (Basel, Switzerland), 14(8), 14786–14805. [Online]. Available: http://www.ncbi.nlm.nih.gov/pmc/articles/PMC4179010/

    Article  Google Scholar 

  26. Mahalle, P. N., Anggorojati, B., Prasad, N. R., & Prasad, R. (2012). Identity driven capability based access control (ICAC) scheme for the internet of things. In Proceedings of international conference on advanced networks and telecommunciations systems (ANTS) (pp. 49–54).

    Google Scholar 

  27. Hernandez-Ramos, J. L., Pawlowski, M. P., Jara, A. J., Skarmeta, A. F., & Ladid, L. (2015). Toward a lightweight authentication and authorization framework for smart objects. IEEE Journal on Selected Areas in Comm., 33(4), 690–702.

    Article  Google Scholar 

  28. http://cdn.iotwf.com/resources/71/IoT_Reference_Model_White_Paper_June_4_2014.pdf. DOA: 06-06-2021.

    Google Scholar 

  29. https://www.hiotron.com/iot-architecture-layers/. DOA: 06-06-2021.

    Google Scholar 

  30. Jha, R. K., Puja, H. K., Kumar, M., & Jain, S. (2021). Layer based security in narrow band internet of things (NB-IoT). Computer Networks, 185, 107592. ISSN 1389-1286.

    Article  Google Scholar 

  31. Dorsemaine, B., Gaulier, J., Wary, J., Kheir, N., & Urien, P. (2016). A new approach to investigate IoT threats based on a four layer model. In 2016 13th international conference on new technologies for distributed systems (NOTERE) (pp. 1–6). https://doi.org/10.1109/NOTERE.2016.7745830

    Chapter  Google Scholar 

  32. Wheelus, C., & Zhu, X. (2020). IoT network security: Threats, risks, and a data-driven defense framework. IoT, 1, 259–285. https://doi.org/10.3390/iot1020016

    Article  Google Scholar 

  33. Hassija, V., Chamola, V., Saxena, V., Jain, D., Goyal, P., & Sikdar, B. (2019). A survey on IoT security: Application areas, security threats, and solution architectures. IEEE Access, 7, 82721–82743. https://doi.org/10.1109/ACCESS.2019.2924045

    Article  Google Scholar 

  34. Nawir, M., Amir, A., Yaakob, N., & Lynn, O. B. (2016). Internet of things (IoT): Taxonomy of security attacks. In 2016 3rd international conference on electronic design (ICED) (pp. 321–326). https://doi.org/10.1109/ICED.2016.7804660

    Chapter  Google Scholar 

  35. Atlam, H. F., & Wills, G. B. (2020). IoT security, privacy, safety and ethics. In M. Farsi, A. Daneshkhah, A. Hosseinian-Far, & H. Jahankhani (Eds.), Digital twin technologies and smart cities. Internet of things (technology, communications and computing). Springer. https://doi.org/10.1007/978-3-030-18732-3_8

    Chapter  Google Scholar 

  36. Namvar, N., Saad, W., Bahadori, N., & Kelley, B. (2016). Jamming in the internet of things: A game- theoretic perspective. In IEEE global communications conference (GLOBECOM) (pp. 1–6).

    Google Scholar 

  37. K. Zhang, X. Liang, R. Lu and X. Shen, "Sybil attacks and their defenses in the internet of things," IEEE Internet of Things Journal, vol. 1, no. 5, pp. 372-383, Oct. 2014.

    Google Scholar 

  38. Salehi, S., Razzaque, M. A., Naraei, P., & Farrokhtala, A. (2013). Detection of sinkhole attack in wireless sensor networks. In IEEE international conference on space science and communication (IconSpace) (pp. 361–365).

    Chapter  Google Scholar 

  39. Ali, S., Khan, M. A., Ahmad, J., Malik, A. W., & ur Rehman, A. (2018). Detection and prevention of black hole attacks in IOT & WSN. In 2018 third international conference on fog and mobile edge computing (FMEC) (pp. 217–226). https://doi.org/10.1109/FMEC.2018.8364068

    Chapter  Google Scholar 

  40. Goyal, M., & Dutta, M. (2018). Intrusion detection of wormhole attack in IoT: A review. International Conference on Circuits and Systems in Digital Enterprise Technology (ICCSDET), 2018, 1–5. https://doi.org/10.1109/ICCSDET.2018.8821160

    Article  Google Scholar 

  41. https://portswigger.net/daily-swig/artificial-intelligence-can-stop-iot-based-ddos-attacks-in-their-tracks-research. DOA: 06-06-2021.

    Google Scholar 

  42. Chouhan, P., & Singh, R. (2016). Security attacks on cloud computing with possible solutions. International Journal of Advanced Research in Computer Science and Software Engineering, 6(1), 92–96.

    Google Scholar 

  43. https://www.netsparker.com/blog/web-security/code-injection. DOA: 06-06-2021.

    Google Scholar 

  44. https://www.smartdatacollective.com/assessing-severity-sql-injection-threats-iot-security/. DOA: 06-06-2021.

    Google Scholar 

  45. Swamy, S. N., Jadhav, D., & Kulkarni, N. (2017). Security threats in the application layer in IOT applications. In 2017 international conference on I-SMAC (IoT in social, Mobile, analytics and cloud) (I-SMAC) (pp. 477–480). https://doi.org/10.1109/I-SMAC.2017.8058395

    Chapter  Google Scholar 

  46. Fowler, P. (2002). 5 GHz goes the distance for home networking. IEEE Microwave Magazine, 49–55.

    Google Scholar 

  47. Hypponen, K., & Haataja, K. M. J. (2007). Nino: Man-in-the-middle attack on Bluetooth secure simple pairing. In The third IEEE/IFIP international conference in Central Asia on internet (pp. 1–5).

    Google Scholar 

  48. Jakobsson, M., & Wetzel, S. (2001). Security weaknesses in bluetooth. In Topics in cryptology: The Cryptographer’s track at RSA conference (pp. 176–191).

    MATH  Google Scholar 

  49. https://www.f-secure.com/v-descs/bluetooth-worm_symbos_lasco_a.shtml. DOA: 9-6-2021.

    Google Scholar 

  50. https://en.wikipedia.org/wiki/List_of_WLAN_channels. DOA: 9-6-2021.

    Google Scholar 

  51. IEEE, “IEEE Std 802.11i,” Amendment 6: Medium Access Control Security Enhancement, 2004.

    Google Scholar 

  52. Lounis, K., & Zulkernine, M. (2020). Attacks and defenses in short-range wireless technologies for IoT. IEEE Access, 8, 88892–88932. https://doi.org/10.1109/ACCESS.2020.2993553

    Article  Google Scholar 

  53. N. Borisov, I. Goldberg, and D.Wagner, “Intercepting mobile communications: The insecurity of 802.11,” in Proceedings of the 7th annual international conference on mobile computing and networking, pp. 180– 189, ACM, 2001.

    Google Scholar 

  54. https://behrtech.com/blog/6-leading-types-of-iot-wireless-tech-and-their-best-use-cases/. DOA: 9-6-2021.

    Google Scholar 

  55. Khanji, S., Iqbal, F., & Hung, P. (2019). ZigBee security vulnerabilities: Exploration and evaluating. In 2019 10th international conference on information and communication systems (ICICS) (pp. 52–57). https://doi.org/10.1109/IACS.2019.8809115

    Chapter  Google Scholar 

  56. Ďurech, J., & Franeková, M. (2014). Security attacks to ZigBee technology and their practical realization. In 2014 IEEE 12th international symposium on applied machine intelligence and informatics (SAMI) (pp. 345–349). https://doi.org/10.1109/SAMI.2014.6822436

    Chapter  Google Scholar 

  57. https://www.smartcitiesworld.net/news/news/iot-boost-for-glasgow-2265/ Date of access 9 June 2021.

    Google Scholar 

  58. https://www.iotevolutionworld.com/smart-transport/articles/432166-practical-parking-pni-sensor-corporation-senet-roll-out.htm/ Date of access 9 June 2021.

    Google Scholar 

  59. https://sfvbj.com/news/2018/feb/13/semtech-selected-smart-agriculture-system/Date of access 9 June 2021.

    Google Scholar 

  60. Yang, X., Karampatzakis, E., Doerr, C., & Kuipers, F. (2018). Security vulnerabilities in LoRaWAN. In 2018 IEEE/ACM third international conference on internet-of-things design and implementation (IoTDI) (pp. 129–140). https://doi.org/10.1109/IoTDI.2018.00022

    Chapter  Google Scholar 

  61. Kail, E., Banati, A., Lászlo, E., & Kozlovszky, M. (2018). Security survey of dedicated IoT networks in the unlicensed ISM bands. In 2018 IEEE 12th international symposium on applied computational intelligence and informatics (SACI) (pp. 000449–000454). https://doi.org/10.1109/SACI.2018.8440945.5

    Chapter  Google Scholar 

  62. Coman, F. L., Malarski, K. M., Petersen, M. N., & Ruepp, S. (2019). Security issues in internet of things: Vulnerability analysis of LoRaWAN, Sigfox and NB-IoT. Global IoT Summit (GIoTS), 2019, 1–6. https://doi.org/10.1109/GIOTS.2019.8766430

    Article  Google Scholar 

  63. https://smartparkingsystems.com/en/nb-iot-sensors-applied-to-parking-system/Date of access 9 June 2021.

    Google Scholar 

  64. https://www.libelium.com/iot-solutions/smart-tracking/Date of access 9 June 2021.

    Google Scholar 

  65. https://e.huawei.com/topic/leading-new-ict-ua/nb-iot-ofo-smart-bike.html/ Date of access 9 June 2021.

    Google Scholar 

  66. https://www.veracode.com/security/arp-spoofing/ Date of access 9 June 2021.

    Google Scholar 

  67. Security and Privacy of Smart Cities: A Survey, Research Issues and Challenges Mehdi Sookhak, Helen Tang, Senior Member, IEEE, Ying He, Student Member, IEEE, and F. Richard Yu, Fellow, IEEE, Citation information: DOI 10.1109/COMST.2018.2867288, IEEE Communication Survey and Tutorial.

    Google Scholar 

  68. Ota, K., Kumrai, T., Dong, M., Kishigami, J., & Guo, M. (2017). Smart Infrastructure Design for Smart Cities. IT Professional, 19(5), 42–49. https://doi.org/10.1109/mitp.2017.3680957

  69. https://www.google.com/amp/s/smartcity.press/smart-governance-for-smart-cities/amp/ Date of access :1 June 2021.

    Google Scholar 

  70. https://www.frontiersin.org/research-topics/21020/ai-powered-smart-healthcare-in-smart-cities/ Date of access : 1 June 2021.

    Google Scholar 

  71. Agarwal, P., Hassan, S. I., Mustafa, S. K., & Ahmad, J. (2020). An effective diagnostic model for personalized healthcare using deep learning techniques. In Applications of deep learning and big IoT on personalized healthcare services (pp. 70–88). IGI Global.

    Chapter  Google Scholar 

  72. Agarwal, P., Chopra, K., Kashif, M., & Kumari, V. (2018). Implementing ALPR for detection of traffic violations: A step towards sustainability, 2018. In Proceedia: Computer science (pp. 738–743). Elsevier Journal Publication. ISSN: 1877-0509.

    Google Scholar 

  73. Agarwal, P., & Alam, A. (2018). Use of ICT in sustainable transportation. Proceedings of International Conference on Future Environment and Energy, 150(1), 1–7.

    Google Scholar 

  74. Smart Cities. (2019). Opportunities, challenges, and security threats January 2019. Journal of Strategic Innovation and Sustainability, 14(3).

    Google Scholar 

  75. https://www.google.com/amp/s/www.computerweekly.com/opinion/Smart-cities-face-challenges-and-opportunities%3famp=1 Date of access 8 June, 2021.

    Google Scholar 

  76. https://www.information-age.com/iot-governance-compliance-security-challenges-123490573/ Date of access 8 June2021.

    Google Scholar 

  77. IoT Security, Privacy, Safety and Ethics Hany F. Atlam and Gary B. Wills ©Springer Nature Switzerland AG 2020 M. Farsi et al. (eds.), Digital Twin Technologies and Smart Cities, Internet of Things, https://doi.org/10.1007/978-3-030-18732-3_8.

    Google Scholar 

  78. Zhang, K., Ni, J., Yang, K., Liang, X., Ren, J., & Shen, X. S. (2017). Security and privacy in smart city applications: Challenges and solutions. IEEE Communications Magazine, 55(1), 122–129. https://doi.org/10.1109/MCOM.2017.1600267CM

    Article  Google Scholar 

  79. https://www.rambus.com/iot/smart-cities/Date of access 1 June 2021.

    Google Scholar 

  80. Oh, S., & Kim, Y. (2017). Security requirements analysis for the IoT. International Conference on Platform Technology and Service (PlatCon), 2017, 1–6. https://doi.org/10.1109/PlatCon.2017.7883727

    Article  Google Scholar 

  81. https://www.google.com/amp/s/www.veracode.com/security/man-middle-attack%3famp/ Date of access 5 June 2021.

    Google Scholar 

  82. https://www.trendmicro.com/vinfo/it/security/news/online-privacy/identity-theft-and-the-value-ofourpersonaldata#:~:text=Identity%20theft%20happens%20when%20your,media%2C%20and%20credit%20card%20details/ Date of access 5 June 2021.

    Google Scholar 

  83. https://searchsecurity.techtarget.com/definition/hijacking/ Date of access 5 June 2021.

    Google Scholar 

  84. https://www.sciencedirect.com/topics/computer-science/hijacking/ Date of access 5 June 2021.

    Google Scholar 

  85. https://www.cloudflare.com/en-in/learning/ddos/what-is-a-ddos-attack/#:~:text=A%20distributed%20denialofservice%20(DDoS)%20attack%20is,a%20flood%20of%20Internet%20traffic/ Date of access 5 June 2021.

    Google Scholar 

  86. https://www.datafoundry.com/blog/what-is-a-permanent-dos-pdos-attack#:~:text=A%20Permanent%20Denial%20of%20Service,have%20moved%20to%20cloud%20computing/ Date of access 5 June 2021.

    Google Scholar 

Download references

Acknowledgement

This work is partially funded by FCT/MCTES through national funds and when applicable co-funded EU funds under the Project UIDB/50008/2020; and by Brazilian National Council for Scientific and Technological Development - CNPq, via Grant No. 313036/2020-9.

Author information

Authors and Affiliations

  1. Department of Computer Science & Engineering, Jamia Hamdard University, New Delhi, India

    Aditya Sam Koshy, Nida Fatima & Parul Agarwal

  2. College of Computer Science and Technology, China University of Petroleum (East China), Qingdao, China

    Joel J. P. C. Rodrigues

  3. Instituto de Telecomunicações, Covilhã, Portugal

    Joel J. P. C. Rodrigues

Authors
  1. Aditya Sam Koshy
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Nida Fatima
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Parul Agarwal
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Joel J. P. C. Rodrigues
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Editors and Affiliations

  1. College of Computer Science and Technology, China University of Petroleum (East China), Qingdao, China

    Joel J. P. C. Rodrigues

  2. Department of Computer Science and Engineering, Jamia Hamdard, New Delhi, India

    Parul Agarwal

  3. Campus Director, Delhi Skill and Entrepreneurship University, New Delhi, India

    Kavita Khanna

Rights and permissions

Reprints and permissions

Copyright information

© 2022 The Author(s), under exclusive license to Springer Nature Switzerland AG

About this chapter

Check for updates. Verify currency and authenticity via CrossMark

Cite this chapter

Koshy, A.S., Fatima, N., Agarwal, P., Rodrigues, J.J.P.C. (2022). Security and Privacy Threats in IoT-Enabled Smart Cities. In: Rodrigues, J.J.P.C., Agarwal, P., Khanna, K. (eds) IoT for Sustainable Smart Cities and Society. Internet of Things. Springer, Cham. https://doi.org/10.1007/978-3-030-89554-9_13

Download citation

  • DOI: https://doi.org/10.1007/978-3-030-89554-9_13

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-030-89553-2

  • Online ISBN: 978-3-030-89554-9

  • eBook Packages: EngineeringEngineering (R0)

Publish with us

Policies and ethics

Search

Navigation