67
Technical and Societal Challenges
4.3.1.1 Device Layer Security
The device layer includes objects, places, and things can be simple devices like light bulb
or complex devices like medical equipment. IoT security should be considered during
design itself, and appropriate encryption should be made to maintain integrity and privacy. Devices should be designed to be tamperproof and the required software updates
should be done constantly.
4.3.1.2 Gateway Layer Security
Gateway layer security indicates the messaging between the Internet enabled devices and
other services. Gateway layer has to consider the security when communicating over protocols and has to ensure confidentiality and integrity.
4.3.1.3 Service Layer Security
The service layer security represents the IoT management activities like policies and rules,
and automation of devices [9]. It has to focus on role-based access control and audit trail of
changes done by devices or the users. Data monitoring should be done to identify compromised devices during abnormal behavior.
A wide security risk has been uncovered in the IoT device. Open Web Application
Security Project (OWASP) has identified the following top 10 issues in IoT devices.
• Insecure web interface
• Insufficient authentication/authorization
• Insecure network services
• Lack of transport encryption
• Privacy concerns
• Insecure mobile interface
• Insecure cloud interface
Device management and
transaction processing
Service layer
Gateway layer
Protocol translation and
messaging
Device layer
Cloud
service
HUB
Sensing and automation
FIGURE 4.5
Basic IoT framework.
Technical and Societal Challenges
4.3.1.1 Device Layer Security
The device layer includes objects, places, and things can be simple devices like light bulb
or complex devices like medical equipment. IoT security should be considered during
design itself, and appropriate encryption should be made to maintain integrity and privacy. Devices should be designed to be tamperproof and the required software updates
should be done constantly.
4.3.1.2 Gateway Layer Security
Gateway layer security indicates the messaging between the Internet enabled devices and
other services. Gateway layer has to consider the security when communicating over protocols and has to ensure confidentiality and integrity.
4.3.1.3 Service Layer Security
The service layer security represents the IoT management activities like policies and rules,
and automation of devices [9]. It has to focus on role-based access control and audit trail of
changes done by devices or the users. Data monitoring should be done to identify compromised devices during abnormal behavior.
A wide security risk has been uncovered in the IoT device. Open Web Application
Security Project (OWASP) has identified the following top 10 issues in IoT devices.
• Insecure web interface
• Insufficient authentication/authorization
• Insecure network services
• Lack of transport encryption
• Privacy concerns
• Insecure mobile interface
• Insecure cloud interface
Device management and
transaction processing
Service layer
Gateway layer
Protocol translation and
messaging
Device layer
Cloud
service
HUB
Sensing and automation
FIGURE 4.5
Basic IoT framework.