IoT Security 251
1) Public safety: while services such as surveillance, tracking and emergency management will be managed by law enforcement and the military, yet attacks on CCTV
cameras and speeding trackers will compromise public safety;
2) Digital health: services include preventive health, patient care, remote surgery, connected hospitals and health workers. The patient will have wearable IoT devices such
as a wrist watch and sensor that will monitor their health parameters and send them
to hospital if required. The system at the hospital will monitor, detect health problems at an early stage and alert the hospital to take the next steps. An attack on such
devices and services could be stealing patient health information which violates privacy; and modification in sensor data that will compromise the patient’s health, for
example parameters for a healthy patient may be changed as unhealthy parameters
or vice‐versa. An attack on remote surgery platform will have a critical impact on
patient health, if surgery is not properly instructed;
3) Mobility: services will offer connectivity between transport vehicles, including connected cars, connected trains, connected ships and connected airplanes. Self‐driving
cars also fall into this domain. IoT devices will be embedded within transport vehicles that will interact with other peers and services will reduce accidents. An attack
on such services may cause a transportation delay or failure, if attackers exploit one
of the vehicles or the platform and issue misleading directions, commands or generate fake warning messages. Apart from this, if the cars are under control of an
attacker, an attacker can spy on the car owner and the vehicle may also be used for
illegal purposes;
4) Industries: services include smart production, smart agriculture and smart buildings.
Industries have a lot of automation, and sensors are utilized to enhance production.
In smart agriculture, sensors can be used for diagnosing water levels, humidity, need
for pesticides, harvesting times, etc. An attack on these services will impact their
production;
5) Smart cities: services include smart infrastructure, traffic, parking, tolls, air quality
monitoring, tourism, virtual reality and advertising. Smart parking services will help
a driver to find a free parking slot nearby and tolls will collect toll charges automatically, for example, with car number plate scanning or smart payment mechanisms.
Tourism can be improved with virtual reality (VR), which will enhance customer
experience. An attack on smart cities’ infrastructure can have big impact, as tolls will
not be functional, air quality will not be monitored properly and tourism revenues
will be impacted because of VR and advertising failure;
6) Utilities: services include smart grid, smart metering, water and waste management.
An attack on the smart grid may impact the electricity distribution and the underlying areas may experience blackouts due to electricity failure. An attack on smart
metering can have significant impact on revenue and customer service, as an attacker
may compromise the smart meter to report less or excess consumption to energy
providers;
7) Smart homes: services include smart consumer, lighting, temperature, music and
video. IoT devices will consist of various sensors and electrical appliances, such as
temperature sensor, fire sensor, humidity sensor, toaster, refrigerator, coffee machine,
etc. If coffee beans are running out, the coffee machine will place an order for beans
and will work as a smart consumer. IoT devices will report their activity and would
be configurable as to when to execute an action such as start, stop, order, status
1) Public safety: while services such as surveillance, tracking and emergency management will be managed by law enforcement and the military, yet attacks on CCTV
cameras and speeding trackers will compromise public safety;
2) Digital health: services include preventive health, patient care, remote surgery, connected hospitals and health workers. The patient will have wearable IoT devices such
as a wrist watch and sensor that will monitor their health parameters and send them
to hospital if required. The system at the hospital will monitor, detect health problems at an early stage and alert the hospital to take the next steps. An attack on such
devices and services could be stealing patient health information which violates privacy; and modification in sensor data that will compromise the patient’s health, for
example parameters for a healthy patient may be changed as unhealthy parameters
or vice‐versa. An attack on remote surgery platform will have a critical impact on
patient health, if surgery is not properly instructed;
3) Mobility: services will offer connectivity between transport vehicles, including connected cars, connected trains, connected ships and connected airplanes. Self‐driving
cars also fall into this domain. IoT devices will be embedded within transport vehicles that will interact with other peers and services will reduce accidents. An attack
on such services may cause a transportation delay or failure, if attackers exploit one
of the vehicles or the platform and issue misleading directions, commands or generate fake warning messages. Apart from this, if the cars are under control of an
attacker, an attacker can spy on the car owner and the vehicle may also be used for
illegal purposes;
4) Industries: services include smart production, smart agriculture and smart buildings.
Industries have a lot of automation, and sensors are utilized to enhance production.
In smart agriculture, sensors can be used for diagnosing water levels, humidity, need
for pesticides, harvesting times, etc. An attack on these services will impact their
production;
5) Smart cities: services include smart infrastructure, traffic, parking, tolls, air quality
monitoring, tourism, virtual reality and advertising. Smart parking services will help
a driver to find a free parking slot nearby and tolls will collect toll charges automatically, for example, with car number plate scanning or smart payment mechanisms.
Tourism can be improved with virtual reality (VR), which will enhance customer
experience. An attack on smart cities’ infrastructure can have big impact, as tolls will
not be functional, air quality will not be monitored properly and tourism revenues
will be impacted because of VR and advertising failure;
6) Utilities: services include smart grid, smart metering, water and waste management.
An attack on the smart grid may impact the electricity distribution and the underlying areas may experience blackouts due to electricity failure. An attack on smart
metering can have significant impact on revenue and customer service, as an attacker
may compromise the smart meter to report less or excess consumption to energy
providers;
7) Smart homes: services include smart consumer, lighting, temperature, music and
video. IoT devices will consist of various sensors and electrical appliances, such as
temperature sensor, fire sensor, humidity sensor, toaster, refrigerator, coffee machine,
etc. If coffee beans are running out, the coffee machine will place an order for beans
and will work as a smart consumer. IoT devices will report their activity and would
be configurable as to when to execute an action such as start, stop, order, status