The Internet of Things: A Security Point of View

Li, S., Tryfonas, T., Li, H. (2016). The Internet of Things: A Security Point of View. Internet Research, 26, (2), 337 - 359.


ISBN:
ISSN: 1066-2243

Abstract

Purpose
To provide an in-depth overview of the security requirements and challenges for Internet of Things (IoT) and discuss security solutions for various enabling technologies and implications to various applications.

Design/methodology/approach
Security requirements and solutions are analyzed based on a four-layer framework of IoT on sensing layer, network layer, service layer, and application layer. The cross-layer threats are analyzed followed by the security discussion for the enabling technologies including identification and tracking technologies, WSN and RFID, communication, networks, and service management.

Findings
IoT calls for new security infrastructure based on the new technical standards. As a consequence, new security design for IoT shall pay attention to these new standards. Security at both the physical devices and service-applications is critical to the operation of IoT, which is indispensable for the success of IoT. Open problems remain in a number of areas, such as security and privacy protection, network protocols, standardisation, identity management, trusted architecture, etc.

Practical implications
The implications to various applications including SCADA, enterprise systems, social IoT are discussed. The paper will serve as a starting point for future IoT security design and management. The security strategies for IoT should be carefully designed by managing the tradeoffs among security, privacy, and utility to provide security in multi-layer architecture of IoT.

Originality/value
The paper synthesizes the current security requirements for IoT and provides a clear framework of security infrastructure based on four layers. Accordingly, the security requirements and potential threats in the four-layer architecture are provided in terms of general devices security, communication security, network security, and application security.
[Read More]

Authors

Shancang Li
Lecturer
S.Li@napier.ac.uk
+44 131 455 2822

Areas of Expertise

Cyber-Security
Electronic information now plays a vital role in almost every aspect of our daily lives. So the need for a secure and trustworthy online infrastructure is more important than ever. without it, not only the growth of the internet but our personal interactions and the economy itself could be at risk.
Networks
Our future society, and its economy, will be built within a seamless environment of networked information resources. IIDI's Network Theme has been created to meet the demands of this society. Dr Ahmed Al-Dubai leads the Network Theme, which seeks to develop local human capital in the fields of...

Associated Projects