A Comprehensive IoT Attacks Survey based on a Building-blocked Reference Model <s> RPL-based attacks <s> Wireless sensor networks have attracted a lot of interest over the last decade in wireless and mobile computing research community. Applications of these networks are numerous and growing, which range from indoor deployment scenarios in the home and office to outdoor deployment in adversary's territory in a tactical battleground. However, due to distributed nature and their deployment in remote areas, these networks are vulnerable to numerous security threats that can adversely affect their performance. This chapter provides a comprehensive discussion on the state of the art in security technologies for wireless sensor networks. It identifies various possible attacks at different layers of the communication protocol stack in a typical sensor network and their possible countermeasures. A brief discussion on the future direction of research in WSN security is also included. <s> BIB001 </s> A Comprehensive IoT Attacks Survey based on a Building-blocked Reference Model <s> RPL-based attacks <s> 6LoWPAN (IPv6 over Low-Power Wireless Personal Area Networks) standard allows heavily constrained devices to connect to IPv6 networks. 6LoWPAN is novel IPv6 header compression protocol, it may go easily under attack. Internet of Things consist of devices which are limited in resource like battery powered, memory and processing capability etc. for this a new network layer routing protocol is designed called RPL (Routing Protocol for low power Lossy network). RPL is light weight protocol and doesn't have the functionality like of traditional routing protocols. This rank based routing protocol may goes under attack. Providing security in Internet of Things is challenging as the devices are connected to the unsecured Internet, limited resources, the communication links are lossy and set of novel technologies used such as RPL, 6LoWPAN etc. This paper focus on possible attacks on RPL and 6LoWPAN network, counter measure against them and consequences on network parameters. Along with comparative analysis of methods to mitigate these attacks are done and finally the research opportunities in network layer security are discussed. <s> BIB002 </s> A Comprehensive IoT Attacks Survey based on a Building-blocked Reference Model <s> RPL-based attacks <s> The growing interest for the Internet of Things is contributing to the large-scale deployment of Low power and Lossy Networks (LLN). These networks support communications amongst objects from the real world, such as home automation devices and embedded sensors, and their interconnection to the Internet. An open standard routing protocol, called RPL, has been specified by the IETF in order to address the specific properties and constraints of these networks. However, this protocol is exposed to a large variety of attacks. Their consequences can be quite significant in terms of network performance and resources. In this paper, we propose to establish a taxonomy of the attacks against this protocol, considering three main categories including attacks targeting network resources, attacks modifying the network topology and attacks related to network traffic. We describe these attacks, analyze and compare their properties, discuss existing counter-measures and their usage from a risk management perspective. <s> BIB003
Routing Protocol for Low power and lossy network (RPL) has been designed to allow multiple-point to point, point to point, and point to multiple-point communication. Its topology depends heavily on the DODAG tree (Destination Orientation Directed Acyclic Graph) composed of one root known as a sink node  . The main attacks against RPL are the following: Selective forward attack: Forwarding chosen packets by attacker to disturb routing paths is the main goal of this attack. Denial of service attacks may take place as a consequence of such attack. An attacker is capable of forwarding all RPL control packets and getting ride of the remaining traffic BIB003 . Sinkhole attack: In this attack, a malicious node may announce beneficial route or falsified path to attract so many nodes to redirect their packets through it. Despite not disruption the network, it could be dangerous if it is jointed with another attack BIB002 . Sybil attack: In this type of attack, a malicious object may use different identities in the same network. Such attack was designed to overcome the main goal of redundancy techniques in scattered data storage. Furthermore, it can be used to attack routing algorithms BIB001 . Wormhole attack: RPL is prone to the wormhole attack, which disturbs both network topology and traffic. This attack can be launched by creating private channel between two attackers in the network and forwarding the selective packets through it BIB003 . Blackhole attack: Like a hole, which absorbs everything, a blackhole attack has been designed to drop silently all data packets that are meant to it by maliciously advertising itself as the shortest path to the destination during the path-discovering mechanism BIB002 . Identity attack: In RPL network, identity attack is a combination of spoofing and sybil attacks. An attacker could illegally get access to packets intended to specific node by cloning its identity BIB003 . Hello flooding attack: Objects recently joining the network send broadcast packet known as a hello message. In this case, an attacker can represent himself as a neighbor object to several objects by broadcasting hello message with a highpowered antenna to deceive other objects to send their packet through it BIB001 .