Abstract:Inspired by the boom of the consumer IoT market, many device manufacturers, start-up companies and technology giants have jumped into the space. Unfortunately, the exciting utility and rapid marketization of IoT, come at the expense of privacy and security. Industry reports and academic work have revealed many attacks on IoT systems, resulting in privacy leakage, property loss and large-scale availability problems. To mitigate such threats, a few solutions have been proposed. However, it is still less clear what are the impacts they can have on the IoT ecosystem. In this work, we aim to perform a comprehensive study on reported attacks and defenses in the realm of IoT aiming to find out what we know, where the current studies fall short and how to move forward. To this end, we first build a toolkit that searches through massive amount of online data using semantic analysis to identify over 3000 IoT-related articles. Further, by clustering such collected data using machine learning technologies, we are able to compare academic views with the findings from industry and other sources, in an attempt to understand the gaps between them, the trend of the IoT security risks and new problems that need further attention. We systemize this process, by proposing a taxonomy for the IoT ecosystem and organizing IoT security into five problem areas. We use this taxonomy as a beacon to assess each IoT work across a number of properties we define. Our assessment reveals that relevant security and privacy problems are far from solved. We discuss how each proposed solution can be applied to a problem area and highlight their strengths, assumptions and constraints. We stress the need for a security framework for IoT vendors and discuss the trend of shifting security liability to external or centralized entities. We also identify open research problems and provide suggestions towards a secure IoT ecosystem.

Research on Security Control Mechanism of Power Distribution IoT Based on Trusted Computing

Refined Characterization of Internet of Things Applications in Power Systems

Power IoT System Security Monitoring Based on Power Consumption Side Channel Information.

Trusted Terminal Design of Distributed Environment

Research on Construction and Application of Power Distribution Internet of Things

Security Risk Intelligent Assessment of Power Distribution Internet of Things via Entropy-Weight Method and Cloud Model

Information Security Transmission Technology in Internet of Things Control System

Research on Application of Trusted Computing 3.0 in Industrial Control System of Nuclear Power Plant

Information Security Terminal Architecture of Power Transportation Mobile Internet of Things Based on Big Data Analysis

IoT-Based Low-Voltage Power Distribution System Management and Control Platform

Survey on Application of Trusted Computing in Industrial Control Systems

An Overview: Data Security Mechanism of Power Terminal in Edge Computing

Construction of Integrated Protection System for Industrial Control System Based on Trusted Computing

ZT-Access: A Combining Zero Trust Access Control with Attribute-based Encryption Scheme against Compromised Devices in Power IoT Environments

Research on secure transmission and storage of energy IoT information based on Blockchain

Trust Management for Internet of Things: A Comprehensive Study

Attack Detection and Mitigation for Resilient Distributed Dc Optimal Power Flow in the Iot Environment

Security of the Internet of Things: Perspectives and Challenges

Study to Improve Security for IoT Smart Device Controller: Drawbacks and Countermeasures.

Understanding IoT Security Through the Data Crystal Ball: Where We Are Now and Where We Are Going to Be

Security Protection Technology of Electrical Power System Based on Edge Computing