[Paper Review] Internet of Things Security, Device Authentication and Access Control: A Review

Inayat Ali, Sonia Sabir+1 more|arXiv (Cornell University)|Jan 8, 2019

User Authentication and Security Systems94 citations

TL;DR

A survey of IoT security challenges across the architecture layers, with a focus on device authentication and access control techniques and their applicability to evolving IoT ecosystems.

ABSTRACT

The Internet of Things (IoT) is one of the emerging technologies that has grabbed the attention of researchers from academia and industry. The idea behind Internet of things is the interconnection of internet enabled things or devices to each other and to humans, to achieve some common goals. In near future IoT is expected to be seamlessly integrated into our environment and human will be wholly solely dependent on this technology for comfort and easy life style. Any security compromise of the system will directly affect human life. Therefore security and privacy of this technology is foremost important issue to resolve. In this paper we present a thorough study of security problems in IoT and classify possible cyberattacks on each layer of IoT architecture. We also discuss challenges to traditional security solutions such as cryptographic solutions, authentication mechanisms and key management in IoT. Device authentication and access controls is an essential area of IoT security, which is not surveyed so far. We spent our efforts to bring the state of the art device authentication and access control techniques on a single paper.

Motivation & Objective

• Motivate the importance of IoT security given the integration of internet-enabled devices into daily life.
• Classify security problems and potential cyberattacks across IoT architecture layers.
• Discuss limitations of traditional security solutions (cryptography, authentication, key management) in IoT environments.
• Synthesize state-of-the-art device authentication and access control approaches in a single study.

Proposed method

• Survey IoT security issues and categorize cyberattacks by IoT architecture layer.
• Analyze challenges of applying traditional security solutions to IoT, including cryptography and key management.
• Review and compile device authentication and access control techniques from existing literature into a unified overview.
• Provide a consolidated reference for researchers focusing on IoT authentication and access control.

Experimental results

Research questions

• RQ1 What are the security problems and potential cyberattacks across different IoT architecture layers?
• RQ2 What challenges limit traditional security solutions in IoT environments, particularly for authentication and key management?
• RQ3 What are the current state-of-the-art techniques for device authentication and access control in IoT?

Key findings

• The IoT ecosystem presents security and privacy concerns that require careful analysis of architecture-layer specific attacks.
• Traditional security solutions face challenges when adapted to IoT, especially in cryptography, authentication, and key management.
• A wide range of device authentication and access control techniques exist, and the paper consolidates these approaches into a single comprehensive survey.
• The study aims to provide a consolidated state-of-the-art overview of device authentication and access control methods for IoT.