Analysis of Security Vulnerabilities for IoT Devices
2
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
Recently, the number of Internet of Things (IoT) devices has been increasing exponentially. These IoT devicesare directly connected to the internet to exchange information. IoT devices are becoming smaller and lighter. However, security measures are not taken in a timely manner compared to the security vulnerabilities of IoTdevices. This is often the case when the security patches cannot be applied to the device because the securitypatches are not adequately applied or there is no patch function. Thus, security vulnerabilities continue to exist,and security incidents continue to increase. In this study, we classified and analyzed the most common securityvulnerabilities for IoT devices and identify the essential vulnerabilities of IoT devices that should be consideredfor security when producing IoT devices. This paper will contribute to reducing the occurrence of securityvulnerabilities in companies that produce IoT devices. Additionally, companies can identify vulnerabilities thatfrequently occur in IoT devices and take preemptive measures.
Abstract
Recently, the number of Internet of Things (IoT) devices has been increasing exponentially. These IoT devicesare directly connected to the internet to exchange information. IoT devices are becoming smaller and lighter. However, security measures are not taken in a timely manner compared to the security vulnerabilities of IoTdevices. This is often the case when the security patches cannot be applied to the device because the securitypatches are not adequately applied or there is no patch function. Thus, security vulnerabilities continue to exist,and security incidents continue to increase. In this study, we classified and analyzed the most common securityvulnerabilities for IoT devices and identify the essential vulnerabilities of IoT devices that should be consideredfor security when producing IoT devices. This paper will contribute to reducing the occurrence of securityvulnerabilities in companies that produce IoT devices. Additionally, companies can identify vulnerabilities thatfrequently occur in IoT devices and take preemptive measures.
참고문헌 (25)
- ITU Internet Reports 2005: The Internet of Things, "International Telecommunication Union", International Telecommunication Union, ~ (2005)
- "Recommendation Y.2060: Overview of the Internet of Thinngs" (2012)[URL]
- "IDC Korea, domestic IoT platform forecast to grow at a AAGR of 16.1% until 2023" (2020)[URL]
- H. D. Kim, "Security for IoT services", Information and Communications Magazine, 30(8), pp.53~59 (2013)
- "6 IoT Prospects for 2019 from a Market Perspective" (2019)[URL]
- 박지수, "Future Trends of IoT, 5G Mobile Networks, and AI: Challenges, Opportunities, and Solutions", JIPS(Journal of Information Processing Systems), 16(4), pp.743~749 (2020), 한국정보처리학회[DOI]
- G. J. Blinowski, "Theory and Applications of Dependable Computer Systems", pp.82~93 (2020), Springer
- 정영식, "IoT and Smart City Technology: Challenges, Opportunities, and Solutions", JIPS(Journal of Information Processing Systems), 15(2), pp.233~238 (2019), 한국정보처리학회[DOI]
- 김남용, "A Survey on Cyber Physical System Security for IoT: Issues, Challenges, Threats, Solutions", JIPS(Journal of Information Processing Systems), 14(6), pp.1361~1384 (2018), 한국정보처리학회[DOI]
- Jose Costa Sapalo Sicato, "A Comprehensive Analyses of Intrusion Detection System for IoT Environment", JIPS(Journal of Information Processing Systems), 16(4), pp.975~990 (2020), 한국정보처리학회[DOI]
- 홍바울, "위협 모델링을 이용한 국내 스마트 홈 보안 분석에 대한 연구", 정보처리학회논문지. 컴퓨터 및 통신시스템, 6(3), pp.143~158 (2017), 한국정보처리학회[DOI]
- S. S. Yang, "Analysis of countermeasures and network security vulnerability for IoT smart home", Proceedings of the Korea Information Processing Society Conference, pp.324~325 (2016)
- 이명렬, "사물인터넷 환경에서의 스마트홈 서비스 침해위협 분석 및 보안 대책 연구", 한국인터넷방송통신학회 논문지, 16(5), pp.27~32 (2016), 한국인터넷방송통신학회[DOI]
- Y. Jung, "IoT device security check standards", Information and Communications Magazine, 34(2), pp.27~33 (2017)
- 홍성혁, "시나리오 분석을 통한 사물인터넷(IoT)의 취약성 분석", 한국융합학회논문지, 8(9), pp.1~7 (2017), 한국융합학회[DOI]
- T. Wang, "Preserving balance between privacy and data integrity in edge-assisted Internet of Things", IEEE Internet of Things Journal, 7(4), pp.2679~2689 (2019)
- Shunmei Meng, "Security-Driven hybrid collaborative recommendation method for cloud-based iot services", Computers & Security, 97, pp.101950~ (2020), Elsevier BV[DOI]
- L. Qi, "Privacy-aware data fusion and prediction with spatial-temporal context for smart city industrial environment", IEEE Transactions on Industrial Informatics, 17(6), pp.4159~4167 (2020)
- "Mirai Botnet"[URL]
- "2018 OWASP IoT Top 10"[URL]
- "CVE Details"[URL]
- "What is CVE"[URL]
- "Vulnerabilities by type"[URL]
- "Current CVSS score distribution for all vulnerabilities"[URL]
- "CVSS: vulnerability metrics"[URL]