Internet of Things: Threats and Security

Authors

  • Aditya Bhardwaj Student, Department of Computer Science & Engineering, Poornima Institute of Engineering and Technology, Jaipur, Rajasthan, India
  • Abhishek Dadhich Student, Department of Computer Science & Engineering, Poornima Institute of Engineering and Technology, Jaipur, Rajasthan, India

Keywords:

MQTT, Threats in IoT, security issues, CoAP, covert channel

Abstract

Security is the most important in today’s world as we have personal and confidential data which we do not want to share with anyone, but somehow attackers attack on our data and steal our identity. Same happens in IoT, attackers somehow attack on devices or communication channels and steal the data. This study reviews all the threats and security issues in IoT. Nowadays, devices are made in such a way that they have to store all the data of a user; so it is easy for an attacker to take away all the necessary data in one go. This study has a review of threats which comes in the way of IoT, security issues, and their solutions. Problems like covert channel, breaking of ASLR and KASLR, Keystroke timing attack, and some security frameworks. Network security is the critical part of today’s world, and operability and interoperability are key of IoT, but due to weak controllability and heterogeneity, all data expose to attacker. In IoT, data storing and processing is in underlying layer; due to this, data is exposed. Taking an example of MQTT it is light weight machine to machine communication protocol that acts as low bandwidth communication method. There is need of security to hide our data from attackers. IoT is the combination of different technologies so there is a chance of stealing of identity or data. IoT also produce data in large number which is also known as Big Data and Big data has its own security issues. Mobile devices are also used in IoT so they also increase security issues.

References

T.I. Murphy, “Line spacing in latex documents,” http://www.sohu.com/a/254853203 804262/, accessed April 4, 2010.

H. Zhang and L. Zhu, “Internet of things: Key technology, architecture and challenging problems,” in 2011 IEEE International Conference on Computer Science and Automation Engineering, vol. 4. IEEE, 2011, pp. 507–512

P. Kocher, D. Genkin, D. Gruss, W. Haas, M. Hamburg, M. Lipp, S. Mangard, T. Prescher, M. Schwarz and Y. Yarom, Spectre Attacks: Exploiting Speculative Execution,

http://www.meltdownattack.com, 2018

M. Lipp, D. Gruss, R. Spreitzer, C. Maurice and S. Mangard, ARMageddon: Cache Attacks on Mobile Devices, Proceedings of the 25th USENIX Security Symposium, Austin, TX, USA, August 10–12, 2016

B. Gras, K. Razavi, E. Bosman, H. Bos and C. Giuffrida, ASLR on the Line: Practical Cache Attacks on the MMU, NDSS Symposium, 2017

M. Schwarz, C. Maurice, D. Gruss and S. Mangard, Fantastic Timers and Where to Find Them: High-Resolution Microarchitectural Attacks in JavaScript, International Conference on Financial Cryptography and Data Security, 2017

M. Schwarz, M. Lipp and D. Gruss, JavaScript Zero: Real JavaScript and Zero Side-Channel Attacks, https://mlq.me/, 2018

C. Disselkoen, D. Kohlbrenner, L. Porter and D. Tullsen, Prime+Abort: A Timer-Free HighPrecision L3 Cache Attack using Intel TSX, Proceedings of the 26th USENIX Security Symposium, Vancouver, BC, Canada, August 16-18, 2017

V. Lampkin, W.T. Leong, L. Olivera, S. Rawat, N. Subrahamanyam, R. Xiang, “Building Smarter Planet Solutions with MQTT and IBM WebSphere MQ Telemetry”, First Edition, September 2012.

E.G. Davis, A. Calaveras and I. Demirkol, “Improving Packet Delivery Performance of Publish/Subscribe Protocols in Wireless Sensor Networks”, Sensors, 2013

Downloads

Published

2022-09-17

Issue

Vol. 12 No. 2 (2022)

Section

Review Articles

License

Declaration and Copyright Transfer Form

(to be completed by authors)

I/ We, the undersigned author(s) of the submitted manuscript, hereby declare, that the above manuscript which is submitted for publication in the STM Journals(s), is not published already in part or whole (except in the form of abstract) in any journal or magazine for private or public circulation, and, is not under consideration of publication elsewhere.

  • I/We will not withdraw the manuscript after 1 week of submission as I have read the Author Guidelines and will adhere to the guidelines.
  • I/We Author(s ) have niether given nor will give this manuscript elsewhere for publishing after submitting in STM Journal(s).
  • I/ We have read the original version of the manuscript and am/ are responsible for the thought contents embodied in it. The work dealt in the manuscript is my/ our own, and my/ our individual contribution to this work is significant enough to qualify for authorship.
  •  I/We also agree to the authorship of the article in the following order:

Author’s name                                    

 

1. ________________

2. ________________

3. ________________

4. ________________

 

We  Author(s) tick this box and would request you to consider it as our signature as we agree to the terms of this Copyright Notice, which will apply to this submission if and when it is published by this journal.