Abstract
Increased applications in the field of Internet of Things (IoT) from Military to Industries and healthcare to household, has exposed the data shared between the devices in the network to extreme vulnerabilities and remote attacks. Security is a core inherent requirement to deliver safe and reliable IoT services spanning from the cloud to connected devices. IoT devices are potential entry points to wider IoT ecosystems. Thus, security of every single IoT device is more burdensome and extremely crucial. Protection of IoT devices against cyber-attacks can help achieve a high level of confidentiality, integrity, and availability with authorized access to the users. Security of IoT devices is a work in progress, and proliferation of these devices at an alarming rate is making it more challenging to secure them.
IoT security encompasses many different aspects of security such as secure boot, device authentication, encryption, secure communication, authorized transactions, and lifecycle management. Multiple software- and/or hardware-based approaches may be employed in the industry to implement security in each of these areas to meet the requirements of the specific market. Hardware-based secure elements can provide the high level of security required by many IoT applications. Devices that are easily accessible, such as sensors and actuators are prone to physical attacks, such as being tampered with to provide incorrect data to the nodes or being sent commands from unauthorized sources. Using software security alone to protect these devices is not adequate, as the threats in these distributed systems are not confined to the software/network layer only. Without a secure hardware, the IoT devices cannot have a firm foundation to build a secure infrastructure on.