Abstract:The recent two decades have witnessed tremendous growth in Internet of things (IoT) applications. There are more than 50 billion devices connected globally. IoT applications' connectivity with the Internet persistently victimized them with a divergent range of traditional threats, including viruses, worms, malware, spyware, Trojans, malicious code injections, and backdoor attacks. Traditional threats provide essential services such as authentication, authorization, and accountability. Authentication and authorization are the process of verifying that a subject is bound to an object. Traditional authentication and authorization mechanisms use three different factors to identity a subject to verify if the subject has the right capability to access the object. Further, it is defined that a computer virus is a type of malware. Malware includes computer viruses, worms, Trojan horses, spyware, and ransomware. There is a high probability that IoT systems can get infected with a more sophisticated form of malware and high-frequency electromagnetic waves. Purpose oriented with distinct nature IoT devices is developed to work in a constrained environment. So there is a dire need to address these security issues because relying on existing traditional techniques is not good. Manufacturers and researchers must think about resolving these security and privacy issues. Most importantly, this study identifies the knowledge and research gap in this area. The primary objective of this systematic literature review is to discuss the divergent types of threats that target IoT systems. Most importantly, the goal is to understand the mode of action of these threats and develop the recovery mechanism to cover the damage. In this study, more than 170 research articles are systematically studied to understand security and privacy issues. Further, security threats and attacks are categorized on a single platform and provide an analysis to explain how and to what extent they damage the targeted IoT systems. This review paper encapsulates IoT security threats and categorizes and analyses them by implementing a comparative study. Moreover, the research work concludes to expand advanced technologies, e.g., blockchain, machine learning, and artificial intelligence, to guarantee security, privacy, and IoT systems.

A Review of Lightweight Security and Privacy for Resource-Constrained IoT Devices

Lightweight Cryptography Algorithms for Resource-Constrained IoT Devices: A Review, Comparison and Research Opportunities

Recent Lightweight cryptography (LWC) based security advances for resource-constrained IoT networks

Efficiency and Security Evaluation of Lightweight Cryptographic Algorithms for Resource-Constrained IoT Devices

A Comprehensive Review of Lightweight Authenticated Encryption for IoT Devices

A Enhancing Data Security Solutions for Smart Energy Systems in IoT-Enabled Cloud Computing Environments through Lightweight Cryptographic Techniques

Privacy-aware novel lightweight cryptography mechanism for IoT (Internet of Things) Security

A Lightweight Privacy-Preserving Communication Protocol for Heterogeneous IoT Environment.

Lightweight Encryption for the Low Powered IoT Devices

Efficient Security Algorithm for Power-Constrained IoT Devices

Security in the Internet of Things: A Review

Analysis of lightweight cryptographic solutions for authentication in IoT

A Review on IoT Security Architecture: Attacks, Protocols, Trust Management Issues, and Elliptic Curve Cryptography

Efficient Cyber Security Framework for IoT Using Machine Learning Algorithms

A Lightweight and Secure Communication Protocol for the IoT Environment

Towards Secure and Privacy-Preserving IoT Enabled Smart Home: Architecture and Experimental Study.

A Review of Security and Privacy Concerns in the Internet of Things (IoT)

Review of Security and Privacy-Based IoT Smart Home Access Control Devices

A Review on Privacy Requirements and Application Layer Security in Internet of Things (IoT)

Security and Privacy for Low Power IoT Devices on 5G and Beyond Networks: Challenges and Future Directions

A survey of security and privacy issues in the Internet of Things from the layered context