The Internet of Things (IoT) is one of the emerging technologies that has grabbed the attention of researchers from academia and industry. The idea behind Internet of things is the interconnection of internet enabled things or devices to each other and to humans, to achieve some common goals. In near future IoT is expected to be seamlessly integrated into our environment and human will be wholly solely dependent on this technology for comfort and easy life style. Any security compromise of the system will directly affect human life. Therefore security and privacy of this technology is foremost important issue to resolve. In this paper we present a thorough study of security problems in IoT and classify possible cyberattacks on each layer of IoT architecture. We also discuss challenges to traditional security solutions such as cryptographic solutions, authentication mechanisms and key management in IoT. Device authentication and access controls is an essential area of IoT security, which is not surveyed so far. We spent our efforts to bring the state of the art device authentication and access control techniques on a single paper.
翻译:互联网是吸引学术界和工业界研究人员注意的新兴技术之一。互联网背后的理念是互联网使东西或装置相互连接或相互连接或与人类连接,以实现一些共同目标。预计在不久的将来,互联网将无缝地融入我们的环境,人类将完全依赖这一技术来舒适和轻松的生活风格。这个系统的任何安全妥协都将直接影响到人类生活。因此,这一技术的安全和隐私是需要解决的最重要问题。我们在本文件中对互联网的安全问题进行彻底研究,并对互联网结构的每一层可能发生的网络攻击进行分类。我们还讨论了传统安全解决方案的挑战,例如加密解决方案、认证机制以及互联网的关键管理。设备认证和接入控制是互联网安全的一个基本领域,迄今为止还没有对此进行调查。我们努力将设备认证和接入控制技术的状况纳入一份单一的文件。