ENG500 Group Design Project

Introduction

In this generation, users and business communities are moving towards digital technologies and computing devices which are capable to provide remote access controls and enable them to communicate with computer systems and networks. IoT refers to the “Internet of Things” which is a digital technology that has the potential to interconnect computer systems, physical devices and networks through a single system and deliver effective communication platforms. Business communities and individuals in societies are using smart devices based on IoT that helps to develop remote access controls and implement machine to machine communication interaction (Alferidah, and Jhanjhi, 2020).

However, the connected networks and communication channels with the IoT devices are not capable to manage and handle security risks and issues due to which the privacy of the connected devices can be affected. It is difficult for companies and individuals to protect sensitive data from hackers and secure IoT enabled devices from cyber-criminals. This research will provide depth information related to the IoT security issues and will also deliver effective resolution techniques and approaches

The major aim of the research project is to critically review and analyze the security and privacy issues with IoT based smart devices and propose effective resolutions against security threats.

There are various objectives developed for this project containing:

• To enhance understanding of the importance ad significance of IoT enabled devices and smart systems
• To identify risks factors producing security threats and privacy concerns in IoT networks and devices
• To evaluate and analyze the security issues and attacks with IoT devices by conducting a literature review
• To propose effective countermeasures and resolutions against IoT security attacks and issues

Research questions

• What are the key characteristics of IoT networks and devices?
• What are the security and privacy threats linked with the smart devices based on the IoT?
• What are significant and suitable resolutions against cyber-attacks and security issues of IoT networks?

Reasons for selecting the project

Today, both individuals and business communities are dependent on smart devices and IoT based networks which are helpful for developing remote access controls but not capable to control and manage security concerns. The rate of cyber-attack is growing quickly and users of IoT devices are not experienced and aware of the security risks and issues due to which their privacy can be affected. It is important for companies and societies to understand the importance of security while implementing IoT enabled devices for which this research project will deliver depth observation through literature review and evaluate security risks and issues. Another reason for selecting this project is to describe and propose effective security measures or resolutions against cyber-attacks linked with the IoT networks so that privacy and confidentiality can be improved.

Security and privacy issues with IoT devices

Alladi, et al., (2020) reported that IoT is a communication technology that delivers a platform where communication-related activities can be done with computer systems, physical devices and networks easily. IoT devices are now included in the companies and societies where virtual communications and control over the physical devices can be done through sensors and internet networks. However, it is difficult for the users and business to manage security risks related to the IoT devices due to which the hackers can transfer unwanted signals and affect the privacy o0f the connected networks.

In terms of security, IoT networks and smart devices are less secured where the insider threats and risks can be posed by the attackers and sensitive data of the users can be accessed without their knowledge. Atlam and Wills, (2020) agreed and reported that the hacker uses malicious codes and programs which are capable to transfer unwanted signals to the IoT networks and reduce the confidentiality of the connected networks. Business communities are using IoT enabled devices and systems in order to develop- automated and remote access controls so that business performance and efficiency can be improved. However, including IoT devices in businesses can increase the chances of data breach and privacy concerns by which business networks and databases can be affected easily.

It is demonstrated that the major three risks factor increasing chances of security threats in IoT based smart devices for example lack of awareness, improper implementation of the security controls and misconfiguration of the communication channels and networks. It is true that many users and employees are not experienced in cyber-security while accessing IoT networks and devices due to which it is problematic to monitor the safety threats and signals posed by the hackers and privacy can be affected negatively. Geetha, Suntheya, and Srikanth, (2020) agreed and started that improper knowledge of the security attacks among individuals helps the attackers to perform insider threats and increase the chances of a data breach. The companies need to provide proper training to the employees while accessing IoT enabled systems so that insider threats posed by the employees can be managed from business systems.

Because misconfiguration of the internet servers and communication channels in IoT devices also enables hackers to transfer malicious codes and easily perform unauthorized activities (Sha, et al., 2020). The connected mobile devices and computer systems with the IoT networks can be targeted by hackers through cyber-attacks and the privacy of the stored data can be affected. For example, the Mirai botnet was a cyber-attack that targeted IoT enabled devices linked with the computer systems and enabled the hackers to perform unauthorized activities where remote accesses can be gained over the connected systems and private details were breached.

Therefore, it is significant for the users and companies to focuses on such risks factors related to the IoT so that privacy can be maintained and security can be improved. Jamali, et al., (2020) identified that numerous types of cyber-attacks and security threats are linked with IoT devices for example malware, DoS, phishing and many more. Malware refers to the security threat that has the ability to gain accessibility of the IoT devices and computer networks by sharing unwanted signals and risks. In the case of smart devices based on IoT, the hackers target mobile devices and transfer malware-based viruses and worms which are capable to reduce the privacy and effectiveness of the connected systems and increase the chances of cyber-attacks.

More than 70% of the hackers perform malware threats over the IoT devices and connected networks by which confidentiality can be reduced easily. DoS refer to the denial of service which is a cyber-attack that enables the attackers to target IoT networks and linked devices. Mistry, et al., (2020) identified that in the DoS attack, the hackers transfer traffic signals to the IoT devices and networks by which the physical devices and computer systems connected with the IoT can be affected and privacy levels can be decreased. For example, more than 30% of the business communities in the last 2 years were suffered from the DoS attacks due to the uses of IoT networks and systems and their performance was affected by the cyber-criminals. Phishing is one of the common attacks performed by hackers over IoT devices that enable them to target communication channels and networks easily. Through phishing threats, spam and fraud signals are shared to the communication networks used in the IoT devices that negatively impact on privacy and increase ethical, confidentiality and social issues in the workplace and society.

Resolutions and countermeasures

Mrabet, et al., (2020) conducted research and stated that IoT devices require proper security and privacy controls so that the connected networks and systems can be protected from cyber-criminals. Data mining is a kind of technique that has the ability to extract effective information from collected sets that can be implemented by the companies by which the insider risks and spam signals shared by the hackers can be detected. Machine learning-based data mining programs should be applied to IoT enabled devices used by the companies because of their potential to perform fraud detection activities from computer systems effectively and protect private details from cyber-attacks and security threats.

It is recommended that the companies should develop the risk assessment plans while implementing IoT technologies by which the insider risks and threats from systems can be identified and evaluation of the risks factors can be done in a significant manner (Sengupta, Ruj, and Bit, 2020). Moreover, GDPR regulations and security programs should be followed in order to implement an effective security policy against the privacy of IoT enabled devices and systems. There are numerous principles provided by GDPR that can be followed including:

• The companies should focus on the transparency of the connected systems and networks with IoT
• The limited accessibilities should be provided to the employees
• Data minimization should be followed
• The accuracy of the IoT networks should be increased
• Storage limitations should be increased
• Integrity and confidentiality should be improved

Name highlighted that encryption is a kind of security technique that has the ability to convert data into codes using private or public keys by which privacy can be improved. In the case of IoT security, AES encryption techniques can be implemented because of their potential to provide larger encryption keys by which the security of the databases and IoT based communication channels can be improved. Therefore, using such security techniques, companies and individuals can improve the security of the private details along with the IoT enabled devices and networks.

Research design

It is one of the significant methodologies used in research studies that delivers a platform where effective research plans and frameworks can be developed based on the research objectives and questions. Qualitative and quantitative are major designs added in studies and research projects. This research project included the qualitative design as it is capable to provide effective and theoretical information in the research by which the developed research questions and identified problems can be resolved in a significant way. Using such design, this research project received the right direction and maintained the research quality by providing depth information in regards to the IoT security issues and threats.

Data collection methods

Data gathering is a significant methodology used in the projects that enables the writers to collect and gain effective information and details related to the research topic so that aim and objectives can be attained effectively. Mainly, primary and secondary are common methods used in the data collection in the research studies. This research project included secondary research methods in order to gain effective data and points related to IoT security. In order to obtain secondary data, systematic literature is added in the research project where previous results or findings are reviewed for obtaining effective information related to the security issues in IoT networks and devices.

Data analysis technique

It is one of the important methodologies that mainly focuses on the analysis and examination of the results from collected datasets. Various types of techniques are used for analyzing data such as descriptive content, statistical, thematic and many more. This research project included a descriptive content analysis as it is capable to provide findings and results in less time and capacity to attain research objectives in a significant manner (Tahsien, Karimipour, and Spachos, 2020). Using such an analysis approach, the obtained secondary data can be analyzed effectively and the Excel tool is used for representing findings into tables and graphs. So, all these are reliable research methods used in the project for addressing research gaps and questions significantly.

Data analysis and findings

It is found that the IoT networks and devices are capable to provide remote access and significant communication platforms to the users but not able to identify and monitor security threats posed by the hackers. This research shows security issues and problems related to IoT networks and devices. The conducted literature review helped to address research questions and included papers that provided depth observation about IoT security issues and threats (Singh, et al., 2020). It is found that lack of awareness about cyber-security is one of the major risks factors linked with the users and employees that enable the hackers to perform insider threats in the IoT devices and businesses easily. Using malicious codes and malware signals, cyber-criminals can affect the privacy of the connected computer systems and networks with the IoT technology.

It is demonstrated that companies are not implementing effective security programs and systems due to which it is difficult to identify the insider risks and security threats from IoT networks and performance can be affected.

By targeting and hacking IoT enabled devices, the hackers can access mobile devices and personal details of users including contact numbers, login credentials, banking details, connected devices, addresses and many more (Tawalbeh, et al., 2020). The companies need to provide proper training to the employees while accessing IoT enabled systems so that insider threats posed by the employees can be managed from business systems.

Because misconfiguration of the internet servers and communication channels in the IoT devices also enables the hackers to transfer malicious codes and easily perform unauthorized activities. It is found that malware is one of the serious cyber-attacks linked with the IoT networks that impact on the privacy of IoT systems and enables hackers to produce unauthorized activities easily. It is significant for companies to follow GDPR principles and standards in order to implement effective security plans and programs against IoT security threats and implement encryption programs for protecting communication channels.

Conclusion

From the above findings, it may be concluded that IoT is a significant communication technology for which proper security programs and systems should be applied so that security can be improved in the workplace and society. It is found that the major three risk factors increasing chances of security threats in IoT based smart devices for example lack of awareness, improper implementation of the security controls and misconfiguration of the communication channels and networks. The connected mobile devices and computer systems with the IoT networks can be targeted by hackers through cyber-attacks and the privacy of the stored data can be affected. Phishing is one of the common attacks performed by hackers over IoT devices that enable them to target communication channels and networks easily. Machine learning-based data mining programs should be applied to IoT enabled devices used by the companies because of their potential to perform fraud detection activities from computer systems effectively and protect private details from cyber-attacks and security threats.

Reflection and recommendations

I have observed that the IoT networks are capable to provide remote access controls and significant machine to machine communication systems to the companies by which performance can be improved. However, privacy cannot be maintained in IoT networks where hackers transfer malicious codes and target connected networks easily. I have enhanced my experience and understanding in the field of IoT security and privacy issues and this research provided depth information about cyber-attacks and risks. In terms of performance, this project is more effective where literature review helped to address research questions and problems significantly.

The results of this project focused on the security attacks and risks factors increasing cyber-threats in the IoT networks and included solutions that are effective by which privacy can be improved. It is recommended that companies should implement the risk assessment plans while implementing IoT technologies by which the insider risks and threats from systems can be identified and evaluation of the risks factors can be done in a significant manner. Future research should describe the security controls in-depth and develop a significant security policy against identified security threats and risks related to the IoT networks so that confidentiality and privacy can be improved.

References

Alferidah, D.K. and Jhanjhi, N.Z., (2020) A Review on Security and Privacy Issues and Challenges in the Internet of Things. International Journal of Computer Science and Network Security IJCSNS, 20(4), pp.263-286.

Alladi, T., Chamola, V., Sikdar, B. and Choo, K.K.R., (2020) Consumer IoT: Security vulnerability case studies and solutions. IEEE Consumer Electronics Magazine, 9(2), pp.17-25.

Atlam, H.F. and Wills, G.B., (2020) IoT security, privacy, safety and ethics. In Digital Twin Technologies and Smart Cities, pp. 123-149.

Geetha, R., Suntheya, A.K. and Srikanth, G.U., (2020) Cloud integrated IoT enabled sensor network security: research issues and solutions. Wireless Personal Communications, 113(2), pp.747-771.

Jamali, M.A.J., Bahrami, B., Heidari, A., Allahverdizadeh, P. and Norouzi, F., (2020) IoT security. In Towards the Internet of Things, pp. 33-83.

Mistry, I., Tanwar, S., Tyagi, S. and Kumar, N., (2020) Blockchain for 5G-enabled IoT for industrial automation: A systematic review, solutions, and challenges. Mechanical Systems and Signal Processing, 135, p.106382.

Mrabet, H., Belguith, S., Alhomoud, A. and Jemai, A., (2020) A survey of IoT security based on a layered architecture of sensing and data analysis. Sensors, 20(13), p.3625.

Sengupta, J., Ruj, S. and Bit, S.D., (2020) A comprehensive survey on attacks, security issues and blockchain solutions for IoT and IIoT. Journal of Network and Computer Applications, 149, p.102481.

Sha, K., Yang, T.A., Wei, W. and Davari, S., (2020) A survey of edge computing-based designs for IoT security. Digital Communications and Networks, 6(2), pp.195-202.

Singh, S., Sharma, P.K., Yoon, B., Shojafar, M., Cho, G.H. and Ra, I.H., (2020) Convergence of blockchain and artificial intelligence in IoT network for the sustainable smart city. Sustainable Cities and Society, 63, p.102364.

Tahsien, S.M., Karimipour, H. and Spachos, P., (2020) Machine learning-based solutions for the security of Internet of Things (IoT): A survey. Journal of Network and Computer Applications, 161, p.102630.

Tawalbeh, L.A., Muheidat, F., Tawalbeh, M. and Quwaider, M., (2020) IoT Privacy and security: Challenges and solutions. Applied Sciences, 10(12), p.4102.

Have you reached your limit trying to find dependable assignment help in London, Glasgow, Nottingham, Bristol, and Cardiff? Now, unlock top-quality dissertation help in the UK only on Myassignmenthelp.co.uk.

For over a decade, we have been resolving assignment problems for millions of students wondering, “Who can provide me with quality homework help?” Our priority is to maintain top-notch standards in every assignment we deliver.

As a result, when you look for law assignment help on our website, you can hire professional lawyers for a consultation. So, don't let your academic worries fester. Instead, hire our professional paper writers and increase your chances of securing an A+.