A Comprehensive IoT Attacks Survey based on a Building-blocked Reference Model <s> NFC-based attacks: <s> RFID (Radio Frequency Identification) systems are one of the most pervasive computing technologies with technical potential and profitable opportunities in a diverse area of applications. Among their advantages is included their low cost and their broad applicability. However, they also present a number of inherent vulnerabilities. This paper develops a structural methodology for risks that RFID networks face by developing a classification of RFID attacks, presenting their important features, and discussing possible countermeasures. The goal of the paper is to categorize the existing weaknesses of RFID communication so that a better understanding of RFID attacks can be achieved and subsequently more efficient and effective algorithms, techniques and procedures to combat these attacks may be developed. <s> BIB001 </s> A Comprehensive IoT Attacks Survey based on a Building-blocked Reference Model <s> NFC-based attacks: <s> Near Field Communication's card emulation mode is a way to put virtual smart cards into mobile phones. A recently launched application is Google Wallet. Google Wallet turns a phone into a credit card, a prepaid card and a tool to collect gift certificates and discounts. Card emulation mode uses dedicated smart card chips, which are considered to fulfill high security standards. Therefore, card emulation mode is also considered to be safe and secure. However, an NFC-enabled mobile phone introduces a significantly different threat vector. Especially a mobile phone's permanent connectivity to a global network and the possibility to install arbitrary applications onto smart phones open up for several new attack scenarios. This paper gives an overview of the new risks imposed by mobile connectivity and untrusted mobile phone applications. The various APIs for secure element access on different mobile phone platforms and their access control mechanisms are analyzed. The security aspects of mobile phones are explained. Finally, two practical attack scenarios, a method to perform a denial of service (DoS) attack against a secure element and a method to remotely use the applications on a victims secure element without the victim's knowledge, are highlighted. <s> BIB002 </s> A Comprehensive IoT Attacks Survey based on a Building-blocked Reference Model <s> NFC-based attacks: <s> Near Field Communication is evolved from radio frequency Identification and it is a new trends now a days. NFC is combination of contactless identification and short range wireless technology. NFC is a new and innovative technology with futuristic uses. This can have many security problems. This paper surveys security threats for NFC and solutions over those security solutions. Firstly paper start with providing the brief overview of what is NFC and how it work and after that presents overview of security threats and addressing them. Finally, analyze the main security solutions proposed until date. <s> BIB003 </s> A Comprehensive IoT Attacks Survey based on a Building-blocked Reference Model <s> NFC-based attacks: <s> The NFC (Near Field Communication) became a popular short distance wireless communication technology by providing many convenient services such as an easy payment in a store. It has fast connection ability between devices and provides certain secure communication. However, after studying NFC protocols deeply, we found six threats to protecting the confidential data and users' privacy are unsolved. This paper summaries four standards of NFC protocols, and presents the security issues and unsolved privacy threats in current application environment. <s> BIB004
It uses in several payment www.ijacsa.thesai.org Eavesdropping: In NFC system, data exchange between two objects takes place in the close proximity. That said, such system is susceptible to an eavesdropping attack. Communication channel between two IoT objects equipped by NFC protocol is vulnerable to such attack, since NFC lacks any protection technique. An attacker could intercept the communication channel using a powerful antenna or be on close proximity of the communication range BIB003 . Relay attack: Performing this type of attacks relies heavily on the execution of the application protocol data unit instructions (ISO/IEC1443). Relay attack Forwards the request of victim's reader to a malicious one and replays back its response as fast as possible BIB002 . Man-in-middle: Although NFC protocol requires a close proximity between communicated objects, these objects are theoretically vulnerable to man in the middle attacks. An attacker could intercept the data, modifying and relaying it to malicious objects. Besides the close proximity that makes these attacks are very difficult, encryption techniques also make them so hard to success if they implemented properly BIB001 . Data corruption: Data corruption launches when an attacker has the capability to disturb communication channel between two objects by changing the transmitted data to an unreadable format, resulting in denial of services attack  . Data modification: Unlike data corruption, in which an attacker change only the format of transmitted data, data modification attack could alter the content of the data BIB004 . Data insertion: During the process of changing data transmitted between two bjects equipped with NFC protocol, an attacker could insert some data into this data only if the object requires a long time to reply. The successful insertion could only happen "if the inserted data can be transmitted, before the original device starts with the answer. If both data streams overlap, the data will be corrupted"  .