Journal - "Internet of things (IoT) attracts and increases threats surface"

Dept. of computer science

College of CS and IT, Al-Baha University

Al-Baha, Kingdom of Saudi Arabia

ABSTRACT

The current world is driven by new, developing technologies. This has resulted in a variety of smart devices in the society that has impacted positively on the lives of people in the community. However, the organization has been experiencing threats and cyberattacks that mostly targets the private information. Therefore, in this paper, my discussion is centered on the different applications of the internet of things as well as security threats that are involved.

Keywords: security, privacy.

INTRODUCTION

The Internet of things is the most significant of the future of the internet. IoT has a global network through which ant object can connect with the other devices that are also linked on the internet. These devices include computers, tabs, cell phones, among many others. Generally, the internet of things is a system made up of connected things. This machine contains a microchip that connects all the methods related to it. Microchips serve the function of tracking the surrounding of the network and to give the report in case of any findings pertaining to the internet. The meaning of PC wrongdoing and cloud wrongdoing will be come to out to the IoT wrongdoing, which talks to any malignant development that incorporates the IoT worldview as within the IoT contraptions, organizations, or correspondence channels can be a subject, thing, or gadget recognized with the infringement. To investigate these sorts of cases, it is required to execute computerized crime scene examination technique within the IoT to choose the substances around an event. The meaning of a capable and adjust IoT progressed lawful sciences method is still at its unimaginable intrigued (Husamuddin, 2015). The most significant part of IoT is that it makes it possible for different entities to be communicated and to be accessed via the internet. This is very economical as a result, attracts many devices to be connected to the internet (Balte &Patil,2015). Research shows that more than 40 billion devices in 2019 got connected, and a higher risk of this is expected in the current year.

SECURITY REQUIREMENTS

The rate at which technologies are emerging is so high, and this has lead to threats as well as a privacy issue. The smart devices arising from this technology will interact with other devices and transmit information in the network (Balte, &Patil,2015). If a computer gets infected, the effects ripples to other devices in the system; thus, the whole internet infrastructure would be at risk. As soon as an attack spot has been identified, it is feasible to enumerate the safety vulnerabilities and risk prone regions requiring defense-in-intensity protection. Such safety refers to a typically used approach to protect important data on company networks wherein security controls are set up at a couple of tiers of the IT information technology infrastructure. The critical security issues are the validity of data, the privacy of data, accountability of data, and accessibility of data. The highlighted points are the main security concerns that are related to the privacy of the information in the network. Without suitable security and assurance defending frameworks, IoT fog can't be grasped in any case of its esteem. The inconvenience does not fair begin from the interoperability issue, however in expansion the planning ask of security courses of action (Varga, P., Plosz, S., Soos, G., & Hegedus, 2017).

IOT TECHNOLOGIES AND SECURITY THREATS

Wireless Sensor Network (WSN)

The sensor wireless network is a technique that comprises of a variety of small cells that are called sensor nodes and other computing components called actuators. The primary purpose of sensor nodes is to facilitate data processing and communication. This technique can be applied in fields such as healthcare, military, logistics, and many others (Botta, 2020). this network is prone to attacks since it acts as a transimmitio channel for broadcasting. The major threats to this network include; physical attacks from hackers due to the fact that this network can’t stop unauthorized physical access. Node replication. In this, the id of the node is moved to a network together with a sensor resulting in disruption of the network performance. Sinkhole attack. This is where an intruder takes possession of the node from the internet and then attracts the traffic from the neighbor nodes. As a result, this can lead to the alteration of the information such as deleting or the changing of the data. Another threat to this network is service attack denial. The services to the legitimate user are made unavailable by the intruders. Another technology and its security threats are Radio Frequency Identification Technology that consists of a specific identity on the tags, and this is incorporated to the object (Botta, 2020). This tag serves as an identifier for the purpose. This technique is mostly applicable to the healthcare field.

CONCLUSION

IoT is among the significant emerging technologies in the world.the data transmitted through the sensors carry sensitivity information that needs protection from the attackers. To archive, this IoT technology must incorporate services such as encryption, access control for a real-time, end to end environment as well as critical infrastructure protection. This will make it possible for the consumers to control tasks automatically and effectively using IOT technology. In the future, more changes pertaining to the security of smart devices, as well as privacy measures of communication in IOT, will advance and this will win the trust of the operators. Threats involved in this technique include tag cloning, tag swapping that consists of the process of replacing two tags that are of different products with each other, physical data modification, and service denial to the legitimate user.

BIBLIOGRAPHY

Balte, A., Kashid, A., &Patil, B. (2015). Security Issues in the Internet of Things (IoT): A Survey. International Journal of Advanced Research in Computer Science and Software Engineering, 5(4), 450-455. ISSN: 2277, 128X.

SHIELDING IOT AGAINST CYBER-ATTACKS: AN EVENT-BASED APPROACH USING SIEM

Daniel Díaz López,1 María Blanco Uribe,1 Claudia Santiago Cely,1 Andrés Vega Torres,1 Nicolás Moreno Guataquira,1 Stefany Morón Castro,1 Pantaleone Nespoli,2 and Félix Gómez Mármol.

ABSTRACT

The massive growth in the internet of things has led to a variety of machines in diverse industries. However, there is presently inadequate security for these new smart objects in the market. This has risen the need for safety solutions to these issues, and the most desirable techniques have been developed to offer a solution to this problem. This paper proposes the best security solution derived from the management of security events that clearly determines any malicious activity on this model. Different vulnerabilities relating to this technique are pointed out so that solution measures can be undertaken. In this paper, three attack events are generated, exploited vulnerabilities, and the response that could be launched to solve and curb the attack on IoT devices. This paper generally proposes the best approach that can be used to protect the IoT ecosystem.

Keywords: Privacy, security, and trust on the internet of things

INTRODUCTION

IoT devices have rapidly grown and have attracted attention from several fields in the society. It is an emerging technology in the decade is with the capability to be developed to perform efficiently as intended. The main area of concern in this paper is the proposal security method that can be applied in IoT to deal with security issues affecting the performance of this technology. When mulling over the IoT contraptions, it is basic to get it that, comparative to a few other contraptions, security can't be guaranteed. IoT security is certifiably not a combined suggestion of secure or temperamental. Or maybe, it is profitable to conceptualize IoT security as a run of contraption weakness (Rodriguez-Mota, A., Escamilla-Ambrosio, P. J., Happa, J., & Nurse, 2016). Detailed security events of IoT and the proposed security to each scenario. Another sector focuses on the security issues for the IoT devices and the last part about the proposed security measures. The suggestions of a cyber assault by means of the web may result within the collapse of communications networks; the disappointment of electronic keeping money and major online shops including eBay and Amazon; the frustration of transport systems, counting discuss control computers and railroad frameworks; and also the disappointment of the facility grid, shutting down control supplies and causing broad power outages. Advanced framework is especially defenseless to assault. Cyber assaults are difficult to distinguish and indeed harder to shield against (Corones, S., & Lane, 2010). IoT incorporates interconnection a huge number of contraptions from various producers and businesses and execution framework for the most part shifts on different applications and client necessities, heterogeneity of contraptions and information is of imperative noteworthiness. In like way, designing has been the establishment of IoT system, and routine web plan ought to be changed to address IoT challenges (Yelamarthi, Abdelgawad 2017).

IOT ATTACK SURFACES

This comprises the enablers that are the communication protocols and channels and targets that are the data and the processes needed to operate an incident on the IoT devices. The incident threat on the surface primarily depends on the connection among variables of the devices. In this issue, once the attack surface has been determined, the vulnerabilities and the areas of risks that need protection are identified and protective measures adopted. The most common surface attacks include the device web interface, administrative interface, device network services, cloud web interface, mobile application, and many others (Yelamarthi, Abdelgawad 2017). From these vulnerabilities, it is frank that the IoT infrastructure is vulnerable to security threats from a variety of contexts. Right now, may be a major investigate opportunity in different locales, among them Security. Along these lines, right presently has been presented a novel way to bargain with security examination for the IoT systems, counting the progression of a visual dialect structure for the depiction of IoT components and their blend, a framework to recognize veritable circumstances where models can be attempted, and a strategy to grant security courses of action. The heterogeneous thought of the IoT talks to a major test for the different accomplices locked in with the advancement of the supporting development and rules (Rodriguez-Mota, A., Escamilla-Ambrosio, P. J., Happa, J., & Nurse, 2016).

IOT VULNERABILITIES

Data security in the objects of IoT can be clear comprehended through the concepts of integrity, confidentiality, and availability of the information. These are the principles that underline this technique, and they tend to represent the measure of the safety levels that this model has implemented. Unfortunately, these attributes are violated due to the vulnerabilities associated with this technique. These vulnerabilities are the ones that increase the surface attack(“Gartner’s 2016). These vulnerabilities include cryptography, physical access, device control, and authentication problems, as discussed in the previous article. Within the IoT setting, not as it were the client may get to the information but the authorized question. This requires tending to two critical viewpoints: to begin with, get to control and authorization component and moment confirmation and character administration (IdM) mechanism. The IoT gadget should be able to confirm that the substance (individual or other gadgets) is authorized to get to the benefit. The authorization makes a difference decide if, upon recognizable proof, the individual or gadget is allowed to get a benefit (Abomhara, M., 2015).

STATE OF THE ART

Security Information and Event Management (SIEM)

The show cutting edge of the middleware for IoT examines different ways to bargain with offer assistance a parcel of the functionalities to work in IoT space. Be that because it may, no one covers the total course of action of functionalities to meet the prerequisite of IoT-middleware as broke down here for any sharp or unavoidable condition (Soma Bandyopadhyay, Munmun Sengupta, Souvik Maiti, Subhajit Dutta, 2011). This is a model that reveals the happening of a system, network, or service showing the breach of information that occurred as well as offering the security solution to the problem that occurred. The security event comes from the firewalls, virtual private networks, intrusion prevention systems, servers, routers, among others (“Gartner’s 2016). security event management is adopted to ensure monitoring, normalization, reporting, and integration of the security incidents. Security event management (SEM) merge with Security information system (SIM) to facilitate management of log and to give report so as to update security information and event management (SIEM). Hence, the SIEM helps in the discovery of threats and to respond to security incidents through a deep study of the security issues from a range of activities as well as sources of data throughout an IT structure or system. SIEM provides a long period of security occasions and proper reporting of any security incidents in the IoT technique.

CONCLUSION

The IoT technology is accompanied by great beneficial opportunities in the market places. There are a variety of advanced applications to promote productivity and the quality of this technology. In this paper, security measures in the IoT devices have been conducted, and responsive tests also revealed. The most common security events, attack surfaces, and vulnerabilities have also been discussed. SIEM system is the model that has been adopted to generate correlation guidelines to detect security incidents as well as the responsive measures.

BIBLIOGRAPHY

Lee, K., Kim, D., Ha, D., Rajput, U., & Oh, H. (2015, September). On security and privacy issues of fog computing supported Internet of Things environment. In 2015 6th International Conference on the Network of the Future (NOF) (pp. 1-3). IEEE.

Tweneboah-Koduah, S., Skouby, K. E., & Tadayoni, R. (2017). Cyber security threats to IoT applications and service domains. Wireless Personal Communications, 95(1), 169-185.