IOT Assignment
Name: Raghvendra Singh
Section: O
System id: 2022482472
Section A
1. What is the problem with IoT security? Also explain key elements of IoT
security.
A1.
The main issue with IoT security lies in the vast number of heterogeneous, resource-
constrained devices, many with weak or no built-in safeguards. This leads to heightened risks
such as unauthorized access, data breaches, botnet attacks (e.g., Mirai), and privacy violations
Key security elements include strong authentication (e.g., mutual authentication),
encryption, secure updates and lifecycle management, and security-by-design principles
across all system layers.
2. What is the role of the perception layer in IoT architecture? Provide
examples of devices in this layer.
A2:
The Perception Layer is the interface between the physical world and the IoT ecosystem. It
collects raw data about environmental conditions (e.g., temperature, light, motion) and can
perform simple preprocessing. Devices include sensors (temperature, humidity, motion),
actuators (motors, valves), RFID tags/readers, biometric sensors, cameras, and microphones.
3. Why are standards important in IoT? Provide examples of IoT-specific
standards.
A3:
Standards ensure interoperability, reliability, common security baselines, and scalability
across diverse IoT devices and ecosystems. They help prevent fragmentation and reduce
integration complexities. Examples include communication and device interoperability
standards like IEEE 802.15.4, CoAP, routing/protocol standards from IETF (e.g., IPv6,
MQTT), industrial frameworks like OPC, DDS, and bodies/formats such as OCF, GS1, O-
MI/O-DF, and Connected Home over IP.
4. How can encryption and authentication mechanisms enhance IoT security?
A4:
Encryption secures data confidentiality and integrity during communication and storage,
preventing eavesdropping and tampering. Authentication ensures that only legitimate
devices and users participate. Techniques like mutual authentication, using lightweight
certificate-based schemes, help prevent impersonation and man-in-the-middle attacks in IoT
environments. Together, they form foundational defenses in securing both device-to-device
and device-to-cloud communication.
Section B
5. Explain TCP, MPTCP, DCCP protocol in detail.
A5:
• TCP (Transmission Control Protocol): Reliable, connection-oriented protocol
ensuring ordered, error-checked delivery of data. Widely used in IoT for sending
critical data over networks.
• MPTCP (Multipath TCP): An extension of TCP enabling a single connection to
utilize multiple network paths concurrently—enhancing resilience, throughput, and
redundancy (e.g., simultaneous use of Wi-Fi and cellular).
• DCCP (Datagram Congestion Control Protocol): A message-oriented (connection-
oriented) protocol that provides congestion control without guaranteed reliability or
ordering. Suitable for delay-sensitive IoT applications like streaming sensor data or
real-time telemetry where timeliness is more critical than perfect delivery.
6. Explain how you would address security concerns in a smart healthcare IoT
system.
A6:
To secure smart healthcare IoT systems, take a multilayered, security-by-design approach:
1. Perception Layer—use hardware tamper protection, secure boot, and identity-
authenticated sensors.
2. Network Layer—implement end-to-end encryption (e.g., TLS/DTLS), mutual
authentication, network segmentation, and intrusion detection.
3. Processing Layer (Cloud/Edge)—ensure secure data storage, access controls,
regular patching, and anomaly detection (possibly using machine learning).
4. Application Layer—apply user education, enforce secure user authentication, and
privacy-by-design data handling.
5. Governance & Lifecycle—adopt security standards (e.g., GS1, OCF), ensure device
update management, employee training, monitoring compliance with privacy
regulations (HIPAA, GDPR), and conduct regular audits.