Abstract
Internet of Things (IoT) has recently become a reality that brings forth significant improvements to various aspects of citizens’ life, such as transport, health, economics and commerce. IoTs are connecting various microcontroller-based individual devices called “Things” that are capable of transmitting and receiving information. Generally, these devices are resource-constrained in terms of resources, memory and power. Despite its widespread adoption, the security and privacy concerns of things remain a crucial challenge that needs to be addressed. This is because the current IoT frameworks do not effectively handle the high-security requirements posed by various applications. This paper aims to highlight the reasons for security challenges in IoT and survey the most prevalent security threats and attacks that can be launched in an IoT ecosystem. Further, the paper discusses various existing proposed countermeasures against these attacks. Finally, the paper identifies several open issues and challenges that can serve as future research directions in the field of study.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Ashton, K.: Internet of things. RFID J. (2009, Jun.). https://www.rfidjournal.com/articles/view?4986
Nikoukar, A., Raza, S., Poole, A., Gunes, M., Dezfouli, B.: Low-Power wireless for the internet of things: standards and applications. IEEE Access 6, 67893–67926 (2018). https://doi.org/10.1109/access.2018.2879189
Sisinni, E., Saifullah, A., Han, S., Jennehag, U., Gidlund, M.: Industrial internet of things: challenges, opportunities, and directions. IEEE Trans. Ind. Inf. 14(11), 4724–4734 (2018). https://doi.org/10.1109/tii.2018.2852491
Sinha, P., Rai, A.K., Bhushan, B.: Information security threats and attacks with conceivable counteraction. In: 2019 2nd International Conference on Intelligent Computing, Instrumentation and Control Technologies (ICICICT) (2019). https://doi.org/10.1109/icicict46008.2019.8993384
Choo, K.R., Gritzalis, S., Park, J.H.: Cryptographic solutions for industrial internet-of-things: research challenges and opportunities. IEEE Trans. Ind. Inf. 14(8), 3567–3569 (2018). https://doi.org/10.1109/tii.2018.2841049
Aly, M., Khomh, F., Haoues, M., Quintero, A., Yacout, S.: Enforcing security in internet of things frameworks: a systematic literature review. Internet of Things 6, 100050 (2019). https://doi.org/10.1016/j.iot.2019.100050
Miloslavskaya, N., Tolstoy, A.: Internet of things: information security challenges and solutions. Cluster Comput. 22(1), 103–119 (2018). https://doi.org/10.1007/s10586-018-2823-6
Tran-Dang, H., Kim, D.: An information framework for internet of things services in physical internet. IEEE Access 6, 43967–43977 (2018). https://doi.org/10.1109/access.2018.2864310
Arora, A., Kaur, A., Bhushan, B., Saini, H.: Security concerns and future trends of internet of things. In: 2019 2nd International Conference on Intelligent Computing, Instrumentation and Control Technologies (ICICICT). (2019). https://doi.org/10.1109/icicict46008.2019.8993222
Al-Fuqaha, A., Guizani, M., Mohammadi, M., Aledhari, M., Ayyash, M.: Internet of things: a survey on enabling technologies, protocols, and applications. IEEE Commun. Surv. Tutor. 17(4), 2347–2376 (2015). https://doi.org/10.1109/comst.2015.2444095
Goel, A.K., Rose, A., Gaur, J., Bhushan, B.: Attacks, countermeasures and security paradigms in IoT. In: 2019 2nd International Conference on Intelligent Computing, Instrumentation and Control Technologies (ICICICT) (2019). https://doi.org/10.1109/icicict46008.2019.8993338
Sha, K., Alatrash, N., Wang, Z.: A secure and efficient framework to read isolated smart grid devices. IEEE Trans. Smart Grid 8(6), 2519–2531 (2017). https://doi.org/10.1109/tsg.2016.2526045
Jing, Q., Vasilakos, A.V., Wan, J., Lu, J., Qiu, D.: Security of the Internet of Things: perspectives and challenges. Wirel. Netw. 20(8), 2481–2501 (2014). https://doi.org/10.1007/s11276-014-0761-7
McCarthy, J., Alexander, O., Edwards, S., Faatz, D., Peloquin, C., Symington, S., Thibault, A., Wiltberger, J., Viani, K.: Situational awareness for electric utilities NIST SP 1800–7 practice guide. NIST Spec. Publ. 1800–7, 1–241 (2017)
Bhushan, B., Sahoo, G.: A comprehensive survey of secure and energy efficient routing protocols and data collection approaches in wireless sensor networks. In: 2017 International Conference on Signal Processing and Communication (ICSPC) (2017). https://doi.org/10.1109/cspc.2017.8305856
Liu, Y., Ma, M., Liu, X., Xiong, N.N., Liu, A., Zhu, Y.: Design and analysis of probing route to defense sink-hole attacks for internet of things security. IEEE Trans. Netw. Sci. Eng. 7(1), 356–372 (2020). https://doi.org/10.1109/tnse.2018.2881152
Bhushan, B., Sahoo, G.: Detection and defense mechanisms against wormhole attacks in wireless sensor networks. In: 2017 3rd International Conference on Advances in Computing,Communication & Automation (ICACCA) (Fall) (2017). https://doi.org/10.1109/icaccaf.2017.8344730
Fu, J., Liu, Y., Chao, H., Bhargava, B.K., Zhang, Z.: Secure Data storage and searching for industrial IoT by integrating fog computing and cloud computing. IEEE Trans. Ind. Inf. 14(10), 4519–4528 (2018). https://doi.org/10.1109/tii.2018.2793350
Bhushan, B., Sahoo, G.: Requirements, protocols, and security challenges in wireless sensor networks: an industrial perspective. Handb. Comput. Netw. Cyber Secur. 683–713 (2020). https://doi.org/10.1007/978-3-030-22277-2_27
Granjal, J., Monteiro, E., Silva, J.S.: Security for the internet of things: a survey of existing protocols and open research issues. IEEE Commun. Surv. Tutor. 17(3), 1294–1312 (2015). https://doi.org/10.1109/comst.2015.2388550
Vidgren, N., Haataja, K., Patino-Andres, J.L., Ramirez-Sanchis, J.J., Toivanen, P.: Security threats in ZigBee-enabled systems: vulnerability evaluation, practical experiments, countermeasures, and lessons learned. In: 2013 46th Hawaii International Conference on System Sciences (2013). https://doi.org/10.1109/hicss.2013.475
Aras, E., Ramachandran, G.S., Lawrence, P., Hughes, D.: Exploring the security vulnerabilities of LoRa. In: 2017 3rd IEEE International Conference on Cybernetics (CYBCONF) (2017). https://doi.org/10.1109/cybconf.2017.7985777
Rahman, R. A., Shah, B.: Security analysis of IoT protocols: a focus in CoAP. In: 2016 3rd MEC International Conference on Big Data and Smart City (ICBDSC) (2016). https://doi.org/10.1109/icbdsc.2016.7460363
Gupta, N., Naik, V., Sengupta, S.: A firewall for Internet of Things. In: 2017 9th International Conference on Communication Systems and Networks (COMSNETS) (2017). https://doi.org/10.1109/comsnets.2017.7945418
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2021 The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd.
About this paper
Cite this paper
Sharma, M., Bhushan, B., Khamparia, A. (2021). Securing Internet of Things: Attacks, Countermeasures and Open Challenges. In: Hassanien, A.E., Bhattacharyya, S., Chakrabati, S., Bhattacharya, A., Dutta, S. (eds) Emerging Technologies in Data Mining and Information Security. Advances in Intelligent Systems and Computing, vol 1286. Springer, Singapore. https://doi.org/10.1007/978-981-15-9927-9_84
Download citation
DOI: https://doi.org/10.1007/978-981-15-9927-9_84
Published:
Publisher Name: Springer, Singapore
Print ISBN: 978-981-15-9926-2
Online ISBN: 978-981-15-9927-9
eBook Packages: Intelligent Technologies and RoboticsIntelligent Technologies and Robotics (R0)