Singh Nivedita, Buyya Rajkumar, Kim Hyoungshick
Department of Computer Science & Engineering, Sungkyunkwan University, Suwon 16419, Republic of Korea.
Cloud Computing and Distributed Systems (CLOUDS) Lab, School of Computing and Information Systems, The University of Melbourne, Parkville, VIC 3010, Australia.
Sensors (Basel). 2024 Dec 26;25(1):79. doi: 10.3390/s25010079.
The Internet of Things (IoT) has seen remarkable advancements in recent years, leading to a paradigm shift in the digital landscape. However, these technological strides have introduced new challenges, particularly in cybersecurity. IoT devices, inherently connected to the internet, are susceptible to various forms of attacks. Moreover, IoT services often handle sensitive user data, which could be exploited by malicious actors or unauthorized service providers. As IoT ecosystems expand, the convergence of traditional and cloud-based systems presents unique security threats in the absence of uniform regulations. Cloud-based IoT systems, enabled by Platform-as-a-Service (PaaS) and Infrastructure-as-a-Service (IaaS) models, offer flexibility and scalability but also pose additional security risks. The intricate interaction between these systems and traditional IoT devices demands comprehensive strategies to protect data integrity and user privacy. This paper highlights the pressing security concerns associated with the widespread adoption of IoT devices and services. We propose viable solutions to bridge the existing security gaps while anticipating and preparing for future challenges. This paper provides a detailed survey of the key security challenges that IoT services are currently facing. We also suggest proactive strategies to mitigate these risks, thereby strengthening the overall security of IoT devices and services.
近年来，物联网（IoT）取得了显著进展，导致数字领域发生了范式转变。然而，这些技术进步带来了新的挑战，尤其是在网络安全方面。物联网设备本质上与互联网相连，容易受到各种形式的攻击。此外，物联网服务通常处理敏感的用户数据，这些数据可能会被恶意行为者或未经授权的服务提供商利用。随着物联网生态系统的扩展，在缺乏统一法规的情况下，传统系统与基于云的系统的融合带来了独特的安全威胁。基于平台即服务（PaaS）和基础设施即服务（IaaS）模型的基于云的物联网系统提供了灵活性和可扩展性，但也带来了额外的安全风险。这些系统与传统物联网设备之间复杂的交互需要全面的策略来保护数据完整性和用户隐私。本文强调了与物联网设备和服务广泛采用相关的紧迫安全问题。我们提出了可行的解决方案，以弥合现有的安全差距，同时预测并应对未来的挑战。本文对物联网服务当前面临的关键安全挑战进行了详细调查。我们还建议采取积极策略来降低这些风险，从而加强物联网设备和服务的整体安全性。
