Cyber-Attacks on IoT Devices: Examining Vulnerabilities and Proposing Mitigation Strategies

References

[1] AlDaajeh, S., Saleous, H., Alrabaee, S., Barka, E., Breitinger, F., & Raymond Choo, K. K. (2022). The role of national cybersecurity strategies in the improvement of cybersecurity education. Computers and Security, 119. https://doi.org/10.1016/j.cose.2022.102754

[2] Alshehri, F., & Muhammad, G. (2021). A Comprehensive Survey of the Internet of Things (IoT) and AI-Based Smart Healthcare. IEEE Access, 9, 3660–3678. https://doi.org/10.1109/ACCESS.2020.3047960

[3] Baskaran, S. B. M. (2019). Internet of Things security. Journal of ICT Standardization, 7(1), 21–39. https://doi.org/10.13052/jicts2245-800X.712

[4] Dhanaraju, M., Chenniappan, P., Ramalingam, K., Pazhanivelan, S., & Kaliaperumal, R. (2022, October 1). Smart Farming: Internet of Things (IoT)-Based Sustainable Agriculture. Agriculture (Switzerland). MDPI. https://doi.org/10.3390/agriculture12101745

[5] Dong, S., & Sarem, M. (2020). DDoS Attack Detection Method Based on Improved KNN with the Degree of DDoS Attack in Software-Defined Networks. IEEE Access, 8, 5039–5048. https://doi.org/10.1109/ACCESS.2019.2963077

[6] Fernandez De Arroyabe, I., Arranz, C. F. A., Arroyabe, M. F., & Fernandez de Arroyabe, J. C. (2023). Cybersecurity capabilities and cyber-attacks as drivers of investment in cybersecurity systems: A UK survey for 2018 and 2019. Computers and Security, 124. https://doi.org/10.1016/j.cose.2022.102954

[7] Foden, W. B., Young, B. E., Akçakaya, H. R., Garcia, R. A., Hoffmann, A. A., Stein, B. A., … Huntley, B. (2019). Climate change vulnerability assessment of species. Wiley Interdisciplinary Reviews: Climate Change, 10(1). https://doi.org/10.1002/wcc.551

[8] Heiding, F., Katsikeas, S., & Lagerström, R. (2023, May 1). Research communities in cyber security vulnerability assessments: A comprehensive literature review. Computer Science Review. Elsevier Ireland Ltd. https://doi.org/10.1016/j.cosrev.2023.100551

[9] Hizam, S. M., & Ahmed, W. (2019). A conceptual paper on the SERVQUAL framework for assessing the quality of Internet of Things (IoT) services. International Journal of Financial Research, 10(5), 387–397. https://doi.org/10.5430/ijfr.v10n5p387

[10] Ismail, Mohmand, M. I., Hussain, H., Khan, A. A., Ullah, U., Zakarya, M., … Haleem, M. (2022). A Machine Learning-Based Classification and Prediction Technique for DDoS Attacks. IEEE Access, 10, 21443–21454. https://doi.org/10.1109/ACCESS.2022.3152577

[11] Kandasamy, K., Srinivas, S., Achuthan, K., & Rangan, V. P. (2020). IoT cyber risk: a holistic analysis of risk assessment frameworks, risk vectors, and risk ranking process. Eurasip Journal on Information Security, 2020(1). https://doi.org/10.1186/s13635-020-00111-0

[12] Kassem, M. M., Mohamed Nazri, F., & Noroozinejad Farsangi, E. (2020, December 1). The seismic vulnerability assessment methodologies: A state-of-the-art review. Ain Shams Engineering Journal. Ain Shams University. https://doi.org/10.1016/j.asej.2020.04.001

[13] Mohsin, M., Anwar, Z., Zaman, F., & Al-Shaer, E. (2017). IoTChecker: A data-driven framework for security analytics of Internet of Things configurations. Computers and Security, 70, 199–223. https://doi.org/10.1016/j.cose.2017.05.012

[14] Motlagh, N. H., Mohammadrezaei, M., Hunt, J., & Zakeri, B. (2020). Internet of Things (IoT) and the energy sector. Energies. MDPI AG. https://doi.org/10.3390/en13020494

[15] Najafimehr, M., Zarifzadeh, S., & Mostafavi, S. (2023, December 1). DDoS attacks and machine-learning-based detection methods: A survey and taxonomy. Engineering Reports. John Wiley and Sons Inc. https://doi.org/10.1002/eng2.12697

[16] Nasiri, H., Mohd Yusof, M. J., & Mohammad Ali, T. A. (2016). An overview of flood vulnerability assessment methods. Sustainable Water Resources Management, 2(3), 331–336. https://doi.org/10.1007/s40899-016-0051-x

[17] Neri, M., Niccolini, F., & Martino, L. (2024). Organizational cybersecurity readiness in the ICT sector: a quanti-qualitative assessment. Information and Computer Security, 32(1), 38–52. https://doi.org/10.1108/ICS-05-2023-0084

[18] Novera, C. N., Ahmed, Z., Kushol, R., Wanke, P., & Azad, M. A. K. (2022, December 13). Internet of Things (IoT) in smart tourism: a literature review. Spanish Journal of Marketing - ESIC. Emerald Publishing. https://doi.org/10.1108/SJME-03-2022-0035

[19] Priyadarshini, R., & Barik, R. K. (2022). A deep learning based intelligent framework to mitigate DDoS attacks in fog environments. Journal of King Saud University - Computer and Information Sciences, 34(3), 825–831. https://doi.org/10.1016/j.jksuci.2019.04.010

[20] Rana, I. A., & Routray, J. K. (2018). Multidimensional Model for Vulnerability Assessment of Urban Flooding: An Empirical Study in Pakistan. International Journal of Disaster Risk Science, 9(3), 359–375. https://doi.org/10.1007/s13753-018-0179-4

[21] Rizvi, S., Pipetti, R., McIntyre, N., Todd, J., & Williams, I. (2020). Threat model for securing the Internet of Things (IoT) network at the device level. Internet of Things (Netherlands), 11. https://doi.org/10.1016/j.iot.2020.100240

[22] Shah, Z., Ullah, I., Li, H., Levula, A., & Khurshid, K. (2022, February 1). Blockchain-Based Solutions to Mitigate Distributed Denial of Service (DDoS) Attacks in the Internet of Things (IoT): A Survey. Sensors. MDPI. https://doi.org/10.3390/s22031094

[23] Slapničar, S., Vuko, T., Čular, M., & Drašček, M. (2022). Effectiveness of cybersecurity audit. International Journal of Accounting Information Systems, 44. https://doi.org/10.1016/j.accinf.2021.100548

[24] Taherdoost, H. (2022, July 1). Understanding Cybersecurity Frameworks and Information Security Standards—A Review and Comprehensive Overview. Electronics (Switzerland). MDPI. https://doi.org/10.3390/electronics11142181

[25] Tariq, U., Ahmed, I., Bashir, A.K., & Shaukat, K. (2023, April 1). A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review. Sensors. MDPI. https://doi.org/10.3390/s23084117

@article{1708790,
      author = {Aidar Imashev},
      title = {Cyber-Attacks on IoT Devices: Examining Vulnerabilities and Proposing Mitigation Strategies},
      journal = {Iconic Research And Engineering Journals},
      year = {2025},
      volume = {8},
      number = {11},
      pages = {2144-2152},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1708790.pdf},
      abstract = {With the rise of many IoT devices, objects, and systems in healthcare, manufacturing, transportation, and smart homes, they can be easily and smoothly connected. It is worth noting that more of these devices used in cities have made it much easier for cyber-attacks due to a lack of sufficient security, processing abilities, and standard protocols. The article highlights several issues in IoT systems, including weak security during authentication, unprotected interfaces, services using outdated code, poor encryption, and poor separation of networks. This area also examines adversaries' strategies, including DDoS attacks, inserting malware, performing side-channel attacks, eavesdropping, and operating as intermediaries. Live instances such as the Mirai botnet, Stuxnet-inspired malware, security camera hacks, and others demonstrate the actual damage and problems that attacks on IoT can bring. This study suggests using secure-by-design methods, secure encryption, regularly updated firmware, intrusion detection, and multi-layer authentication. There are also discussions about having IoT security certification and establishing international rules for the IoT industry. According to the analysis, the article argues that an active and uniform way of securing IoT devices is essential as the devices are used. IoT security should be improved to secure critical assets and key systems and protect the public in our connected world.},
      keywords = {Internet of Things (IoT); Cybersecurity; Vulnerability Assessment; DDoS Attacks; IoT Threat Vectors; Secure-by-Design; Firmware Exploits; Network Segmentation; Malware Injection; IoT Security Framework; Intrusion Detection; Authentication Protocols},
      month = {May},
  }