A survey of security and privacy issues in the Internet of Things from the layered context <s> SECURITY SOLUTIONS FOR IOT <s> Wireless Sensor Networks (WSNs) have become a new information collection and monitoring solution for a variety of applications. Faults occurring to sensor nodes are common due to the sensor device itself and the harsh environment where the sensor nodes are deployed. In order to ensure the network quality of service it is necessary for the WSN to be able to detect the faults and take actions to avoid further degradation of the service. The goal of this paper is to locate the faulty sensors in the wireless sensor networks. We propose and evaluate a localized fault detection algorithm to identify the faulty sensors. The implementation complexity of the algorithm is low and the probability of correct diagnosis is very high even in the existence of large fault sets. Simulation results show the algorithm can clearly identify the faulty sensors with high accuracy. <s> BIB001 </s> A survey of security and privacy issues in the Internet of Things from the layered context <s> SECURITY SOLUTIONS FOR IOT <s> Through analyzing the essence of the IoT and the hiberarchy architecture in it, some security risks, security request and security ways for the risks are discussed. The possible technique at each layer and its advantage or disadvantage is studied respectively. The extremely characteristics of the perception layer are summarized, based on it, a PKI-like security mechanism including PKI-like security foundation architecture and PKI-like protocol are presented in this paper, and the characteristics and its application domain are summarized to present. A couple of new research directions are proposed. After some further improvement research on it, which maybe a hot topic in the near future. <s> BIB002 </s> A survey of security and privacy issues in the Internet of Things from the layered context <s> SECURITY SOLUTIONS FOR IOT <s> Wireless sensor Networks (WSNs) deployed in distributed Internet of Things (IoT) applications should be integrated into the Internet. According to the distributed architecture, sensor nodes measure data, process, exchange information, and perform collaboratively with other sensor nodes and end-users, which can be internal or external to the network. In order to maintain the trustworthy connectivity and the accessibility of distributed IoT, it is important to establish secure links for end-to-end communication with a strong pervasive authentication mechanism. However, due to the resource constraints and heterogeneous characteristics of the devices, traditional authentication and key management schemes are not effective for such applications. This paper proposes a pervasive lightweight authentication and keying mechanism for WSNs in distributed IoT applications, in which the sensor nodes can establish secured links with peer sensor nodes and end-users. The established authentication scheme PAuthKey is based on implicit certificates and it provides application level end-to-end security. A comprehensive description for the scenario based behavior of the protocol is presented. With the performance evaluation and the security analysis, it is justified that the proposed scheme is viable to deploy in the resource constrained WSNs. <s> BIB003 </s> A survey of security and privacy issues in the Internet of Things from the layered context <s> SECURITY SOLUTIONS FOR IOT <s> Internet of Things (IoT) consists of a large number of connected objects that are communicating with each other. In order to support trusted communication between IoT objects, effective authentication procedures should be applied between the communicating entities. In this paper a survey of IoT authentication techniques, which are proposed in the literature, is presented. The survey aims to help other researchers in delving into the details of such techniques by going through their classification and comparison. The classification has been done based on the inherent features of these authentication technique such as being distributed vs. centralized, flat vs. hierarchical, and more others. A comparison between these techniques according to the used evaluation models and their security analysis is illustrated. <s> BIB004 </s> A survey of security and privacy issues in the Internet of Things from the layered context <s> SECURITY SOLUTIONS FOR IOT <s> Smart home is one of the most popular IoT (Internet of Things) applications, which connects a wide variety of objects and home appliances in a single logical network. Smart home applications have benefited from interactions and data transmissions among different devices over the integrated network with or without human interventions. However, like other technologies, smart home likely introduces new security vulnerabilities due to its dynamic and open nature of connectivity with heterogeneous features. Among such vulnerabilities, is the breach of confidentiality which needs to be addressed urgently as data exchanged between smart home devices can contain crucial information related to user's privacy and safety. However, some of the challenges in providing smart home system with confidentiality service are the flexibility of key management and efficiency of computation and communication. These challenges should be addressed carefully as many small and resource-constrained devices are usually involved in smart home systems. In this paper, we address these challenges by proposing a lightweight encryption scheme for smart homes. This scheme will provide users and smart objects with confidentiality service without incurring much overhead cost associated with computation and communication. Our proposed scheme also supports flexible public key management through adopting identity-based encryption, which does not require complex certificate handling. We provide a formal security analysis of our scheme and a performance simulation study. The simulation shows that our scheme provides favorable level of efficiency in terms of overhead cost associated with computation and communication. <s> BIB005
Usually IoT devices communicate among themselves with negligible human interaction therefore mutual authentication is a critical aspect of the paradigm. The IoT devices are certainly designed for everyday usage and are generally used for gathering, storing and analyzing personal data. Therefore, the devices should have the feature of being able to be controlled remotely and to support regular and automatic updates as well. Authentication and access control schemes should be applied in perception layer to prevent illegal node access and to identify network nodes BIB004 . Data encryption and confidentiality schemes are extremely necessary to protect the collected data from modification and to prevent from malicious code injection. However, adding a strong data encryption and key management scheme would result in consuming resources of the IoT devices considerably. So, lightweight cryptographic algorithms and protocols are necessary to mitigate this problem. Intrusion detection systems can be implemented to detect any malicious behaviours in the network  . Several methods have been proposed in the past for securing the IoT devices and networks. We have concisely compared and analyzed the existing security solutions proposed in the recent literature which are discussed in the BIB001 proposed an algorithm to identify the compromised sensors in the wireless sensor networks. The author proposed the detection algorithm in which the sensors can identify their status in the distributed environment as âȂIJgoodâȂİ or âȂIJfaultyâȂİ. The status claimed by these sensors can be verified as accepted or rejected by the neighbouring nodes as they are capable of analysing the node behaviour. The experiment results showed that the proposed system has maximum accuracy and minimum false rate in detecting the faulty sensors in the WSNs. Also, the complexity of the algorithm is low. Li et al. BIB002 has pointed out the security issues in the perception layer and also some solutions to the issues are deliberated. The author has proposed an improvement on the PKI-like security mechanism protocol for the threats involving the node security in IoT systems. Aggarwal et al.  proposed an improved protocol for Radio Frequency Identification (RFID) security. The perception layers comprises of RFID tags in IoT system for gathering data and data communication between the connected devices. The author proposed an improved protocol that is computationally efficient and also prevent disclosure and desynchronization attacks. Salami et al. BIB005 discussed confidentiality service, key management and efficiency of computation and communication issues by introducing a lightweight encryption scheme for smart homes. The scheme is effective for resource constrained devices and has flexible public key management. The result shows that the scheme is more efficient in the encryption operations and has reduced communication and computation overhead. Public key algorithm has high scalability and are considered favourable for node authentication without the need of complicated key management protocols  . Porambage et al. BIB003 proposed PAuthKey which is a pervasive lightweight authentication and key establishment scheme in distributed IoT application for the resource constrained wireless sensor networks (WSNs). PAuthKey scheme allows the end-users to establish secure connection, gain access to data and services and authenticate themselves directly with the sensor nodes. The security analysis and experimental results showed that the scheme is effective for the resource constrained WSN. The authors 38 39 have proposed solutions for the threats involving node security in the perception layer. The author BIB001 have proposed an algorithm to detect the faulty and compromised nodes while the author in BIB002 have proposed an improvement on the PKI-Like security meachanism. The author BIB005 proposed an improved protocol for the RFID security that is embedded in the IoT devices. The author BIB005 have proposed encryption and key management schemes to provide security solutions in the perception layer. The encryption mechanism is fast, efficient, reduced communication and computation overhead. The authors 40 41 have provided security solutions for resource-constrained device by proposing lightweight encryption techniques along with flexible public key management in  and lightweight authentication and key establishment schemes in 41 .