Abstract:Inspired by the boom of the consumer IoT market, many device manufacturers, start-up companies and technology giants have jumped into the space. Unfortunately, the exciting utility and rapid marketization of IoT, come at the expense of privacy and security. Industry reports and academic work have revealed many attacks on IoT systems, resulting in privacy leakage, property loss and large-scale availability problems. To mitigate such threats, a few solutions have been proposed. However, it is still less clear what are the impacts they can have on the IoT ecosystem. In this work, we aim to perform a comprehensive study on reported attacks and defenses in the realm of IoT aiming to find out what we know, where the current studies fall short and how to move forward. To this end, we first build a toolkit that searches through massive amount of online data using semantic analysis to identify over 3000 IoT-related articles. Further, by clustering such collected data using machine learning technologies, we are able to compare academic views with the findings from industry and other sources, in an attempt to understand the gaps between them, the trend of the IoT security risks and new problems that need further attention. We systemize this process, by proposing a taxonomy for the IoT ecosystem and organizing IoT security into five problem areas. We use this taxonomy as a beacon to assess each IoT work across a number of properties we define. Our assessment reveals that relevant security and privacy problems are far from solved. We discuss how each proposed solution can be applied to a problem area and highlight their strengths, assumptions and constraints. We stress the need for a security framework for IoT vendors and discuss the trend of shifting security liability to external or centralized entities. We also identify open research problems and provide suggestions towards a secure IoT ecosystem.

A Survey on IoT Vulnerability Discovery.

Rethinking IoT Security: Understanding and Mitigating Out-of-Band Vulnerabilities

A Survey of Security Vulnerability Analysis, Discovery, Detection, and Mitigation on IoT Devices

A Large-Scale Empirical Study on the Vulnerability of Deployed IoT Devices

An Empirical Study of High-Risk Vulnerabilities in IoT Systems

Understanding IoT Security Through the Data Crystal Ball: Where We Are Now and Where We Are Going to Be

A Comprehensive and Systematic Survey on the Internet of Things: Security and Privacy Challenges, Security Frameworks, Enabling Technologies, Threats, Vulnerabilities and Countermeasures

Recent Security Trends in Internet of Things: A Comprehensive Survey

Internet of Things: Security and Solutions Survey

An Experimental Analysis of Security Vulnerabilities in Industrial IoT Devices

Security trends in Internet of Things: a survey

Exploring security threats and solutions Techniques for Internet of Things (IoT): from vulnerabilities to vigilance

The Effect of IoT New Features on Security and Privacy: New Threats, Existing Solutions, and Challenges Yet to Be Solved

A comprehensive study on cybersecurity challenges and opportunities in the IoT world

Automated Security Assessment for the Internet of Things

Internet of Things: Survey on Security and Privacy

Present Scenarios of IoT Projects with Security Aspects Focused

A survey on the Internet of Things security

IoT Security: An End-to-End View and Case Study

Physical Security and Safety of IoT Equipment: A Survey of Recent Advances and Opportunities

A survey of security and privacy issues in the Internet of Things from the layered context