A Survey on Security and Privacy Issues in Internet-of-Things

TLDR

Internet‑of‑Things devices are pervasive in homes, hospitals, and environmental monitoring, offering many benefits but also posing significant privacy and security risks. This survey investigates IoT security by examining device limitations, classifying attacks, reviewing authentication and access‑control mechanisms, and analyzing layer‑specific security issues. The survey is organized into four segments that respectively cover device limitations and solutions, attack classification, authentication and access‑control architectures, and layer‑level security analysis.

Abstract

Internet-of-Things (IoT) are everywhere in our daily life. They are used in our homes, in hospitals, deployed outside to control and report the changes in environment, prevent fires, and many more beneficial functionality. However, all those benefits can come of huge risks of privacy loss and security issues. To secure the IoT devices, many research works have been conducted to countermeasure those problems and find a better way to eliminate those risks, or at least minimize their effects on the user's privacy and security requirements. The survey consists of four segments. The first segment will explore the most relevant limitations of IoT devices and their solutions. The second one will present the classification of IoT attacks. The next segment will focus on the mechanisms and architectures for authentication and access control. The last segment will analyze the security issues in different layers.