Abstract:The Internet of Things (IoT) is leading today's digital transformation. Relying on a combination of technologies, protocols, and devices such as wireless sensors and newly developed wearable and implanted sensors, IoT is changing every aspect of daily life, especially recent applications in digital healthcare. IoT incorporates various kinds of hardware, communication protocols, and services. This IoT diversity can be viewed as a double-edged sword that provides comfort to users but can lead also to a large number of security threats and attacks. In this survey paper, a new compacted and optimized architecture for IoT is proposed based on five layers. Likewise, we propose a new classification of security threats and attacks based on new IoT architecture. The IoT architecture involves a physical perception layer, a network and protocol layer, a transport layer, an application layer, and a data and cloud services layer. First, the physical sensing layer incorporates the basic hardware used by IoT. Second, we highlight the various network and protocol technologies employed by IoT, and review the security threats and solutions. Transport protocols are exhibited and the security threats against them are discussed while providing common solutions. Then, the application layer involves application protocols and lightweight encryption algorithms for IoT. Finally, in the data and cloud services layer, the main important security features of IoT cloud platforms are addressed, involving confidentiality, integrity, authorization, authentication, and encryption protocols. The paper is concluded by presenting the open research issues and future directions towards securing IoT, including the lack of standardized lightweight encryption algorithms, the use of machine-learning algorithms to enhance security and the related challenges, the use of Blockchain to address security challenges in IoT, and the implications of IoT deployment in 5G and beyond.

Security analysis of IoT protocols: A focus in CoAP

CoAP—Application Layer Connection-Less Lightweight Protocol for the Internet of Things (IoT) and CoAP-IPSEC Security with DTLS Supporting CoAP

A survey on the Internet of Things security

A Brief Review of Classic IoT security Protocols

CoAP-DoS: An IoT Network Intrusion Dataset

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

Large-Scale Security Analysis of Real-World Backend Deployments Speaking IoT-Focused Protocols

Security Framework for IoT Devices against Cyber-Attacks

Analyses of Open Security Issues for Smart Home and Sensor Network Based on Internet of Things

A Comprehensive and Systematic Survey on the Internet of Things: Security and Privacy Challenges, Security Frameworks, Enabling Technologies, Threats, Vulnerabilities and Countermeasures

Security Analysis and Improvements of Authentication and Access Control in the Internet of Things

IoT Network Security: Requirements, Threats, and Countermeasures

Security Challenges and Concerns of Internet of Things (IoT)

Securing IoT Devices Against Emerging Security Threats: Challenges and Mitigation Techniques

A survey of security and privacy issues in the Internet of Things from the layered context

Security of RPL Based 6LoWPAN Networks in the Internet of Things: A Review

A comprehensive study on cybersecurity challenges and opportunities in the IoT world

Recent Security Trends in Internet of Things: A Comprehensive Survey

A Comprehensive Analysis of Routing Vulnerabilities and Defense Strategies in IoT Networks

A Survey of IoT Security Based on a Layered Architecture of Sensing and Data Analysis

Security of the Internet of Things: Perspectives and Challenges