IoT is an example of the interplay of security and privacy and society. The concept of IoT opens doors to new applications, which can contribute to the citizens'security and safety. Simultaneously, it presents a risk for the society as a whole if no dedicated efficient solutions are proposed. In this chapter, we have highlighted the potential risks of IoT by addressing different threats to privacy and security incurred by currently available devices. Note that our selection is by no means exhaustive and additional risks may be brought to light in future. Providing security and privacy in this context is therefore mandatory, but is made difficult by different challenges, especially the resource constraints when working in the IoT context. We have classified and presented a selection of different solutions, which can be applied at different layers of the IoT architecture, namely things, communication, and services and application layers. For example, it includes methods proposed for, e.g., authentication, data access control, confidentiality, and anonymity and privacy. We have finally highlighted the importance of the human factors in IoT privacy and security, which should not be ignored in the design of future solutions to prevent voiding their effects due to their inappropriateness to be applied or used by people.

Chapter Contents:

• 14.1 Risks of IoT
• 14.1.1 Examples of threats to security and privacy
• 14.2 IoT challenges
• 14.2.1 Resource constraints
• 14.2.2 Device heterogeneity
• 14.2.3 Mobility
• 14.2.4 Heterogeneity of access levels
• 14.2.5 Remote features
• 14.2.6 Deployment environment
• 14.2.7 Transparent deployment and lack of interfaces
• 14.3 Security and privacy solutions for IoT
• 14.3.1 Solutions for the IoT layer
• 14.3.2 Solutions for the IoT communication layer
• 14.3.2.1 Application layer
• 14.3.2.2 Data link layer
• 14.3.2.3 Network layer
• 14.3.3 Solutions for IoT services and applications layer
• 14.3.3.1 Authentication
• 14.3.3.2 Data access control
• 14.3.3.3 Confidentiality
• 14.3.3.4 Anonymity and privacy
• 14.4 Human factors in IoT security and privacy
• 14.5 Summary
• References

Inspec keywords: computer network security; human factors; Internet of Things; data privacy

Other keywords: IoT architecture; application layers; human factors; data access control; citizen safety; citizen security; data security; data privacy; Internet-of-Things; resource constraints

Subjects: Data security