A Comprehensive IoT Attacks Survey based on a Building-blocked Reference Model <s> Connectivity protocols-based attacks <s> Radio frequency identification (RFID) technologies have been used by the military to gain in-transit visibility and improve inventory management. The advantages of using RFID to track assets over using barcode have been broadly recognized. However, recent research has proven that RFID is vulnerable to attacks. This brings a challenge at a time when RFID systems are being employed in various applications, including military supply chain systems. In this paper, underlying vulnerabilities of RFID system are analyzed, different attacks that can be made against RFID system are illustrated, and countermeasures against the attacks are recommended. The objective of this article is to secure military logistics by identifying the common threats to RFID systems <s> BIB001 </s> A Comprehensive IoT Attacks Survey based on a Building-blocked Reference Model <s> Connectivity protocols-based attacks <s> Internet of Things (IoT) has been a massive advancement in the Information and Communication Technology (ICT). It is projected that over 50 billion devices will become part of the IoT in the next few years. Security of the IoT network should be the foremost priority. In this paper, we evaluate the security challenges in the four layers of the IoT architecture and their solutions proposed from 2010 to 2016. Furthermore, important security technologies like encryption are also analyzed in the IoT context. Finally, we discuss countermeasures of the security attacks on different layers of IoT and highlight the future research directions within the IoT architecture. <s> BIB002
IoT objects are armed with different connectivity protocols divided broadly into two main categories, wired and wireless protocols. The wired connection requires a physical medium between IoT objects, while wireless connection runs through radio waves. Both connectivity technologies have several key properties such as range, data rate, power consumption, spectrum, TCP/IP support, and topology. It is worth mentioning that this paper focuses only on wireless connectivity protocols, because most IoT objects are nowadays equipped with wireless connectivity protocols. Furthermore, attacks on wired connectivity protocols are adequately addressed in the context of traditional internet. An overview of the most popular wireless connectivity protocols and their properties is shown in Table  III . In this section, the main attacks targeting the most common connectivity protocols as depicted in Fig. 11 are described in greater detail below. 2.1.1 RFID-based attacks: RFID technology facilitates automatic information exchange between tags and readers using radio waves. RFID uses the Automatic Identification and Data Capture (AIDC) technology. RFID tags, recently, have been utilized in many applications such as credit cards, assets tracking, and military  . However, RFID technology is vulnerable to many attacks, the most important of which are the following (Table V) : Replay: In this type of attacks, an attacker could use tags' responses to fake readers' challenges. In replay attacks, the transmitted signal between the reader and the tag is captured, documented, and repeated at a later time to the receiving object, resulting in counterfeiting the accessibility of the tag  . Spoofing: This type of attack happens when a malicious tag pretends to be a valid tag and obtains an unauthorized access. Spoofing attack used to eavesdrop the data coming from the valid tag, and copies the captured data to another one  . Tracking: Tracking attack can be considered as a direct attack against an individual or a victim. Within the next few years, companies may place RFID tags on many household items. Tracking products using RFID tags could be used to threat the privacy of human by tracking their movements, and generate an exact profile of their procurement  . Unauthorized access: Due to the lack of authentication in RFID system, tag could be vulnerable to an unauthorized attack. The main goal of such attack is to manipulate its sensitive data BIB002 . Virus: RFID system is not suitable environment for viruses as the tag has a small storage capacity of 128 bits. However, this situation has changed, as authors in BIB001 stated that RFID tags could be used as a medium to spread a computer virus. This paper also described how the RFID virus ran in supply chain products. Eavesdropping: In RFID system, tags and readers are wirelessly connected and communicated without a human intervention. So, there is a possibility that their communication medium can be eavesdropped. In general, eavesdropping launches when an adversary captures data transmitted between tag and reader, since most RFID systems lack any encryption technique during transmission process due to the memory capacity. As a result, it is very easy for any attacker to obtain the sensitive data from RFID tags. Man in the middle (MITM): MITM attack might be happened on RFID system during transmission of data between reader and tags. In this case, an attacker may intercept and modify the communication channel between the components of RFID system. This type of attack is considered as a real time attack, displaying and modifying the information before the legitimate object receiving it. Killing Tag: Killing tag attack on RFID system could be launched to stop tags communication with their reader. Killing tags makes them impossible to be read, and therefore, it is absolutely essential to make sure that RFID tags are not killed by an illegal party.Kill command should be secured by a strong password as well  .