Search

Internet of Things (IoT) as an emerging technology is based on the idea that smart things can connect to the Internet and exchange the collected data in a peer-to-peer paradigm. Due to its inherent features, IoT can be utilized in real-world scenarios and its expansion can improve human well-being. Internet of things is applied quite closely to humans and transmits serious information such as healthcare information, financial data, and private information through an insecure communication platform. Since almost all tasks are performed with minimal human intervention, and adversary may deploy its nodes among other legitimate elements of IoT, providing an effective mutual authentication is vital. In this Systematic Literature Review, authentication of IoT and its literature are reviewed systematically. In particular, it has endeavored that the collected literature covers the papers conducted from 2018 to 2022. Moreover, this study seeks to provide a comprehensive answer to six important Research Questions in the context of authentication of IoT that often engage the minds of scholars. It is hoped that this survey will be an effective guide for future research by addressing the relevant challenges, analyzing open issues, and providing future research directions. [ABSTRACT FROM AUTHOR]

Internet of Things (IoT) as an emerging technology is widely used in various applications such as remote healthcare, smart environment, and intelligent transportation systems. It is necessary to address users' concerns about cost, ease of use, privacy, and comprehensive security to grow the popularity of this technology. Intrusion Detection System (IDS) plays an indispensable role in security and preventing unauthorized users to access authorized network resources through analyzing network patterns. Several techniques such as metaheuristic algorithms, machine learning, fuzzy logic, and artificial intelligence algorithms can be applied to increase the accuracy of IDS, feature selection, and network patterns classification. In this paper, a hybrid intrusion detection system based on Support Vector Machine (SVM) and Grey Wolf Optimization (GWO) is presented that utilizes the advantages of these algorithms. In the proposed approach, the support vector machine has been used to train and differentiate anomaly records from normal records and grey wolf optimization has been used to find the kernel function, feature selection, and adjust optimal parameters for the SVM in order to improve the classification. The conducted simulations prove that the proposed approach outperforms in terms of detection accuracy, precision, recall, and F-score on both NSL-KDD and TON_IoT datasets. [ABSTRACT FROM AUTHOR]

Internet of Things (IoT), as an emerging technology, describes a smart world that enables objects to interact with each other and with end-users through developed communication platforms such as the Internet. The limited communication range of things allows packets to be transmitted between objects that are not in each other's range through intermediate objects, which highlights the necessity of routing in this technology. Therefore, the Quality of Service parameters of IoT entirely depend on the cooperation of things in the routing process. Several factors such as energy depletion, conquering objects by an enemy, and resource constraints lead to selfish behavior that may cause network collapse. In this paper, a new watchdog-based identification method is presented to diagnosis selfish objects in the Internet of Things, in which the selected watchdogs are responsible for evaluating the activity of other objects. In the proposed method to achieve a uniform distribution of watchdog objects in the network, the IoT objects are partitioned into disjoint cells using the Voronoi diagram, and a watchdog is selected for each cell. In this way, while the supervision overhead is distributed, the watchdog objects can identify the selfish things through examining the remaining energy and cooperation degree of other objects. The conducted simulations in the MATLAB tool have validated the effectiveness of the proposed method in terms of detection rate, false-positive rate, throughput, end-to-end delay, and energy consumption. [ABSTRACT FROM AUTHOR]

Internet of Things (IoT) as an emerging technology connects a wide range of various elements that have a unique identifier to create an intelligent computing system. Given that most security mechanisms such as encryption and authentication are entirely based on shared keys, key distribution and management play an important role in their performance. In this paper, a lightweight hierarchical key management approach is proposed for IoT technology that is based on the position and remaining energy of nodes and includes three phases, key server selection, nodes clustering, and key generation and distribution. The proposed approach generates shorter and more secure keys due to the use of a hierarchical structure. The conducted simulations in Cooja have validated effectiveness of the proposed approach in comparison to counterpart methods in terms of energy consumption, end-to-end delay, and network lifetime. According to the formal analysis through ROR model and informal security analysis, proposed approach provides perfect forward secrecy, and resists impersonation, man-in-the-middle, replay, and key guessing attacks. Moreover, analysis of time complexity, message complexity, computational cost, and storage cost indicates that overhead of the proposed approach is negligible. [ABSTRACT FROM AUTHOR]

• Providing a lightweight RFID-based authentication approach for IoT application to address the computation and hardware limitations. • Applying nonlinear key-stream generators to eliminate the linearity property of LFSR-based generators. • Evaluating the efficiency of the proposed approach based on security analysis and statistical analysis. • Assessment of the effect of generator polynomial degree and the proposed combinational generators on the BER using the Cooja tool. • Assessment of overhead of the proposed approach in terms of computational cost, storage spaces, and communication costs. In this paper, a new lightweight RFID-based authentication approach is proposed that uses stream ciphering techniques to preserve privacy between legitimate components. The proposed approach uses various key-stream generators such as And2LFSR, Geffe, and majority-based to eliminate the inherent linearity of LFSRs and construct a non-linear Pseudo-Random Number Generators (PRNG). The informal security analysis indicates that the proposed approach provides forward security and resists eavesdropping, tag tracking, replay, cloning, and DoS attacks. Moreover, simulations conducted through Cooja tool illustrate the effect of generator polynomial degree and proposed combinational generators on BER. The BER of communications has been evaluated in different quantities of (E b / N 0), ranged between 1 and 10, using the proposed generators along with different error control techniques. In addition, evaluations indicate that the proposed approach outperforms in terms of computational cost, storage spaces, and communication cost. Furthermore, statistical analysis proves resistance of the proposed approach to guessing attacks. [Display omitted] [ABSTRACT FROM AUTHOR]

The Internet of Things (IoT) implies a new model and concept in the world of information and communication technology that the non-cooperation of some nodes in providing services to other nodes may result in the disconnection of some things with each other. Consequently, the proximity of such nodes is considerably reduced the network performance. In this paper, a multiphase method based on game theory and direct and indirect reputation has been designed to stimulate selfish and malicious nodes to cooperate in the Internet of Things, which starts with setting up nodes in the IoT network. In the first phase, nodes are grouped in clusters with cluster heads to collect data. Then, they play a dynamic and multi-person game when they promote their own data packet or others' data packet in the second phase (multi-person game phase and data packet sending). The result of the game is applied to affect between nodes in the next phase. Nodes can pick their strategy when data packet forwarding in the third phase (direct and indirect reputation update). Nodes will update the neighboring node and the reputation table if they receive a confirmation message from the destination declaring that the data packet has a direct reputation. The results show that the accuracy of selfish node detection has increased by average of 8% and the false positive rate is 7% in comparison to comparative methods. [ABSTRACT FROM AUTHOR]