Internet of Things
[Link] sayed
Definition of IoT
- The Internet of Things (IoT) refers to the network of interconnected
devices that communicate and exchange data over the internet,
enabling smart interactions and automations. It encompasses a
variety of technologies that allow everyday objects to connect,
collect, and share data seamlessly.
- The Internet of Things (IoT) integrates physical objects with the digital
world, leading to transformative changes in system design.
Importance of IoT in System Design
• The Internet of Things (IoT) represents a transformative shift in how
systems are designed, integrating networked devices with intelligent
data processing. Understanding the foundations of IoT and its role in
system design is crucial for engineering modern solutions that cater
to complex user needs.
Integration of
hardware & software Impact on user experience
Importance of IoT
Importance of seamless Role in system
connectivity in System Design architecture
Influence on data creating innovative
management solutions
Perception Layer Network Layer Application Layer
Balancing Connectivity
(Physical Layer): (Transmission Layer):
and Flexibility:
This layer consists of This layer manages This top layer
the physical devices communication processes the received
like sensors, cameras, between devices. It data, analyses it, and
micro-controller and uses protocols like presents it in a user-
actuators that collect Wi-Fi, cellular friendly way (like
data from the networks, or graphs or tables). It
environment and Bluetooth to securely also allows users to
perform actions. They transmit data from control devices
send this data to the sensors to the through apps or web
next layer. application layer. interfaces.
IoT Security Risk: Weak Authentication &
Authorization
• Many IoT devices ship with default passwords, making them easy
targets for brute force attacks. Weak authentication mechanisms
allow attackers to gain unauthorized access, compromising entire
networks.
IoT Security Risk: Insecure Network
Communication
• IoT devices often transmit data without encryption, exposing
sensitive information to attackers. Lack of TLS/SSL implementation
makes devices vulnerable to interception and data theft.
IoT Security Risk: Outdated Firmware &
Software
• Unpatched vulnerabilities in IoT devices allow hackers to exploit
security flaws. Many devices lack automatic updates, leaving them
exposed to known exploits indefinitely.
IoT Security Risk: Lack of Encryption
• Failure to encrypt stored and transmitted data allows cybercriminals
to access and manipulate sensitive information. Encryption protocols
like AES and RSA should be used to safeguard data integrity.
IoT Security Risk: DDoS Attacks on IoT Devices
• IoT devices are frequently recruited into botnets, launching large-
scale Distributed Denial-of-Service (DDoS) attacks. Such attacks can
cripple websites, financial services, and government infrastructures.
IoT Security Risk: Physical Security Threats
• Many IoT devices are deployed in public or unsecured locations,
making them vulnerable to tampering. Attackers can extract data
from devices or install malicious firmware to compromise systems.
IoT Security Risk: IoT Botnets
• Hackers use malware to infect IoT devices, forming large-scale
botnets that can be used for cyberattacks. Notorious botnets like
Mirai have demonstrated the devastating impact of compromised IoT
networks.
IoT Attack Type: Man-in-the-Middle (MITM)
Attacks
• Hackers intercept communication between IoT devices and servers.
This allows them to eavesdrop, modify data, or impersonate
legitimate devices to manipulate system behavior.
IoT Attack Type: Firmware Exploits
• IoT devices running outdated firmware can be hijacked through
unpatched vulnerabilities. Attackers can inject malicious code, taking
full control of the device.
IoT Attack Type: Physical Attacks
• Attackers with direct access to IoT hardware can manipulate
components, extract sensitive data, or install backdoors. Lack of
physical security makes devices highly susceptible to tampering.
Best Practice: Use Strong Authentication
Mechanisms
• Implement multi-factor authentication (MFA) to prevent
unauthorized access. Password policies should enforce complexity
and expiration rules.
Best Practice: Encrypt Data in Transit and at
Rest
• Use strong encryption protocols like AES-256 and TLS 1.3. Ensure that
both device-to-cloud and device-to-device communication is
encrypted.
Best Practice: Regular Firmware and Software
Updates
• Enable automatic updates to patch security vulnerabilities.
Manufacturers should provide long-term support for firmware
updates.