87
Evolution of Social IoT World
• A tag is assigned to every data point.
• Data point discovery is performed using tags through an internal search engine.
• The system identifies every object with its API key.
5.5 Security Issues and Research Challenges
The overall security and resilience of the SIoT is a function of how security risks are
assessed and managed at the object level, during data communication, and at the level
of analysis. Security of a device is a function of the risk that a device will be compromised,
the damage such compromise will cause, and the time and resources required to achieve
a certain level of protection. The security issues are not new in the context of information
technology, but the scale of unique challenges that can arise in SIoT implementations, as
discussed in this section, makes them significant.
Privacy is a very broad and diverse notion for which the literature offers many definitions
and perspectives. From a historic view, the notion of privacy shifted between media, territorial, communication, and bodily privacy. With the increasing use and efficiency of electronic
data processing, information privacy has become the predominant issue. Information privacy was defined by Westin (1968) as “the right to select what personal information about me
is known to what people.” Westin’s definition, although referred to nonelectronic environments, is still valid and general to enable the discussions about privacy in the IoT.
5.5.1 Security Challenges and Privacy Threats in IoT
Despite the immense potential of IoT in the various spheres, the whole communication
infrastructure of the IoT is flawed from the security standpoint and is susceptible to loss
of privacy for the end users. Some of the most prominent security issues plaguing the
entire developing IoT system arise out of the security issues for information relay from
one device to another. Privacy in the IoT is the threefold guarantee to the subject for:
• Awareness of privacy risks imposed by smart things and services surrounding
the data subject
• Individual control over the collection and processing of personal information by
the surrounding smart things
• Awareness and control of subsequent use and dissemination of personal information by those entities to any entity outside the subject’s personal control domain
It is restated here that the application of IoT is fully dependent on its backbone of communication network, including Internet or IP networks, wireless device-to-device communication using Bluetooth, Z-wave, and Zigbee protocols. Out of several communication
technologies, we take two most popular usages of communications, communications
based on radio frequency identification (RFID) and wireless sensor network (WSN), and
discuss the probable security issues relevant to them.
5.5.1.1 RFID Technology: Security Issues
RFID technology is mainly used in information tags interacting with each other automatically. RFID uses radio frequency waves for interacting and exchanging information
Evolution of Social IoT World
• A tag is assigned to every data point.
• Data point discovery is performed using tags through an internal search engine.
• The system identifies every object with its API key.
5.5 Security Issues and Research Challenges
The overall security and resilience of the SIoT is a function of how security risks are
assessed and managed at the object level, during data communication, and at the level
of analysis. Security of a device is a function of the risk that a device will be compromised,
the damage such compromise will cause, and the time and resources required to achieve
a certain level of protection. The security issues are not new in the context of information
technology, but the scale of unique challenges that can arise in SIoT implementations, as
discussed in this section, makes them significant.
Privacy is a very broad and diverse notion for which the literature offers many definitions
and perspectives. From a historic view, the notion of privacy shifted between media, territorial, communication, and bodily privacy. With the increasing use and efficiency of electronic
data processing, information privacy has become the predominant issue. Information privacy was defined by Westin (1968) as “the right to select what personal information about me
is known to what people.” Westin’s definition, although referred to nonelectronic environments, is still valid and general to enable the discussions about privacy in the IoT.
5.5.1 Security Challenges and Privacy Threats in IoT
Despite the immense potential of IoT in the various spheres, the whole communication
infrastructure of the IoT is flawed from the security standpoint and is susceptible to loss
of privacy for the end users. Some of the most prominent security issues plaguing the
entire developing IoT system arise out of the security issues for information relay from
one device to another. Privacy in the IoT is the threefold guarantee to the subject for:
• Awareness of privacy risks imposed by smart things and services surrounding
the data subject
• Individual control over the collection and processing of personal information by
the surrounding smart things
• Awareness and control of subsequent use and dissemination of personal information by those entities to any entity outside the subject’s personal control domain
It is restated here that the application of IoT is fully dependent on its backbone of communication network, including Internet or IP networks, wireless device-to-device communication using Bluetooth, Z-wave, and Zigbee protocols. Out of several communication
technologies, we take two most popular usages of communications, communications
based on radio frequency identification (RFID) and wireless sensor network (WSN), and
discuss the probable security issues relevant to them.
5.5.1.1 RFID Technology: Security Issues
RFID technology is mainly used in information tags interacting with each other automatically. RFID uses radio frequency waves for interacting and exchanging information