IoT Privacy and Security: Challenges and Solutions

• Published in: Applied sciences Vol. 10; no. 12; p. 4102
• Main Authors: Tawalbeh, Lo’ai, Muheidat, Fadi, Tawalbeh, Mais, Quwaider, Muhannad
• Format: Journal Article
• Language: English
• Published: Basel MDPI AG 01-06-2020
• Subjects: Automation; Cloud computing; Cybercrime; Cybersecurity; Data integrity; Data security; Data transfer (computers); edge computing; Electronic commerce; Explosions; Internet; Internet of Things; Literature reviews; Management; Privacy; Protocol (computers); Radio frequency identification; Safety and security measures; Security; Security management; security policy; Security systems; Sensors; Virtual environments; Web services; Wireless networks; United States
• ISSN: 2076-3417; 2076-3417
• DOI: 10.3390/app10124102

Privacy and security are among the significant challenges of the Internet of Things (IoT). Improper device updates, lack of efficient and robust security protocols, user unawareness, and famous active device monitoring are among the challenges that IoT is facing. In this work, we are exploring the background of IoT systems and security measures, and identifying (a) different security and privacy issues, (b) approaches used to secure the components of IoT-based environments and systems, (c) existing security solutions, and (d) the best privacy models necessary and suitable for different layers of IoT driven applications. In this work, we proposed a new IoT layered model: generic and stretched with the privacy and security components and layers identification. The proposed cloud/edge supported IoT system is implemented and evaluated. The lower layer represented by the IoT nodes generated from the Amazon Web Service (AWS) as Virtual Machines. The middle layer (edge) implemented as a Raspberry Pi 4 hardware kit with support of the Greengrass Edge Environment in AWS. We used the cloud-enabled IoT environment in AWS to implement the top layer (the cloud). The security protocols and critical management sessions were between each of these layers to ensure the privacy of the users’ information. We implemented security certificates to allow data transfer between the layers of the proposed cloud/edge enabled IoT model. Not only is the proposed system model eliminating possible security vulnerabilities, but it also can be used along with the best security techniques to countermeasure the cybersecurity threats facing each one of the layers; cloud, edge, and IoT.