Exploring the Vulnerabilities of IoT (Internet of Things) Devices and Proposing Solutions to Enhance Their Security
DOI:
https://doi.org/10.61173/8g63fq30Keywords:
Internet of Things (IoT), cybersecurity, IoT vulnerabilities, data privacy, security threats, authenti-cation, Distributed Denial of Service (DDoS), firmware updates, risk mitigation, regulatory frameworks, IoT se-curity solutionsAbstract
The growth of IoT technology is rapidly progressing and has changed people’s lives in society through escalating automation, connectivity, and decision-making in several areas. This technological change has brought about various security threats and risk factors due to the elusive nature of IoT devices and the general absence of a set standard of security features to adopt. This paper focuses on threats to IoT environments and provides realistic approaches to enriching device protection. The theoretical framework for the study is constructed on the grounds of reviewing the current literature and analyzing the quantitative questionnaire results among IoT users and cybersecurity specialists. Some risks include poor authentication, outdated firmware, and low awareness. Regression and ANOVA confirm that factors such as professional experience, knowledge of threats, and updated firmware are also significant to users’ decisions to spend on IoT security solutions for their gadgets. On the other hand, manufacturers’ trust and data breach concerns do not display much prognostic significance. It, therefore, advocates for multiple levels of security measures, awareness, and legal requirements that set a minimum bar of compliance. The study's recommendations include a mixture of IT or technical controls, organizational deployments or behavioral modifications, and policy approaches toward creating a competent and secure IoT network.
References
Abbas Eltayeb, G. E. (2024). A proposed perspective for successfully deploying the Internet of Things in a smart home environment. International Journal of Interactive Mobile Technologies, 18(21).
Alaba, F. A., Othman, M., Hashem, I. A. T., & Alotaibi, F. (2022). Internet of Things security: A survey. Journal of Network and Computer Applications, 88, 10. https://www.sciencedirect.com/ science/article/abs/pii/S1084804517301455
Alqarawi, G., Alkhalifah, B., Alharbi, N., & El Khediri, S. (2022). Internet-of-things security and vulnerabilities: Case study. Journal of Applied Security Research, 18(3), 559. https://www. tandfonline.com/doi/abs/10.1080/19361610.2022.2031841 Anand, P., Singh, Y., Selwal, A., Singh, P. K., Felseghi, R.
A., & Raboaca, M. S. (2020). Iovt: Internet of vulnerable things? Threat architecture, attack surfaces, and vulnerabilities in the internet of things and its applications towards smart grids. Energies, 13(18), 4813. https://dl.acm.org/doi/ abs/10.1145/3379542 Bang, A. O., Rao, U. P., Visconti, A., Brighente, A., & Conti,
M. (2022). An IoT inventory before deployment: A survey on IoT protocols, communication technologies, vulnerabilities, attacks, and future research directions. Computers & Security, 102914. https://www.sciencedirect.com/science/article/abs/pii/ S0167404822003078
Bölin, O., & Van Daele, P. (2024). Penetration testing of onetime password authentication.
Dutta, M., & Granjal, J. (2020). Towards a secure Internet of Things: A comprehensive study of second line defense mechanisms. IEEE Access, 8, 127272. https://papers.ssrn.com/ sol3/papers.cfm?abstract_id=3733864
Ghazal, T. M., Afifi, M. A. M., & Kalra, D. (2020). Security vulnerabilities, attacks, threats, and the proposed countermeasures for Internet of Things applications. Solid State Technology, 63(1s). https://www.mdpi.com/2073-431X/9/2/44 HaddadPajouh, H., Dehghantanha, A., Parizi, R. M., Aledhari,
M., & Karimipour, H. (2021). An Internet of Things security survey: Requirements, challenges, and solutions. Internet of Things, 14, 100129. https://www.sciencedirect.com/science/ article/abs/pii/S2542660519302288
Harbi, Y., Aliouat, Z., Refoufi, A., & Harous, S. (2021). Recent security trends in Internet of Things: A comprehensive survey. IEEE Access, 9, 113292. https://ieeexplore.ieee.org/abstract/ document/9902998
Jiang, X., Lora, M., & Chattopadhyay, S. (2020). An experimental analysis of security vulnerabilities in industrial IoT devices. ACM Transactions on Internet Technology, 20(2), 24. https://www.mdpi.com/2073-431X/9/2/44 Jurcut, A., Niculcea, T., Ranaweera, P., & Le-Khac, N. A. (2020). Security considerations for Internet of Things: A survey. SN Computer Science, 1, 19. https://www.sciencedirect.com/ science/article/abs/pii/S2542660519302288
Khan, N. A., Awang, A., & Karim, S. A. A. (2022). Security in Internet of Things: A review. IEEE Access, 10, 104649. https:// www.tandfonline.com/doi/abs/10.1080/19361610.2022.2031841 Malhotra, P., Singh, Y., Anand, P., Bangotra, D. K., Singh, P. K., & Hong, W. C. (2021). Internet of Things: Evolution, concerns
and security challenges. Sensors, 21(5), 1809. https://www.mdpi. com/1424-8220/21/5/1809
Mishra, N., & Pandya, S. (2021). A systematic review of Internet of Things applications, security challenges, attacks, intrusion detection, and future visions. IEEE Access, 9, 59353. https:// ieeexplore.ieee.org/abstract/document/9344712 Obaidat, M. A., Obeidat, S., Holst, J., Al Hayajneh, A., &
Brown, J. (2020). A comprehensive and systematic survey on the Internet of Things: Security and privacy challenges, security frameworks, enabling technologies, threats, vulnerabilities, and countermeasures. Computers, 9(2), 44. https://www.mdpi. com/2073-431X/9/2/44 Dean&Francis Tengfei Shao Omolara, A. E., Alabdulatif, A., Abiodun, O. I., Alawida, M., & Arshad, H. (2022). The Internet of Things security: A survey encompassing unexplored areas and new insights. Computers & Security, 112, 102494. https://www.sciencedirect.com/science/ article/abs/pii/S0167404821003187
Pabitra Kumar Sahoo. (2025). What is IoT security? Issues, challenges, and best practices. https://qualysec.com/what-is-iotsecurity/
Pal, S., Hitchens, M., Rabehaja, T., & Mukhopadhyay, S. (2020). Security requirements for the Internet of Things: A systematic approach. Sensors, 20(20), 5897. https://link.springer.com/chapt er/10.1007/978-981-15-8297-4_22 Puche Rondon, L., Babun, L., Aris, A., Akkaya, K., & Uluagac,
A. S. (2021). Survey on Enterprise Internet-of-Things Systems (E-IoT): A security perspective. arXiv e-prints. https://ui.adsabs. harvard.edu/abs/2021arXiv210210695P/abstract Rondon, L. P., Babun, L., Aris, A., Akkaya, K., & Uluagac, A. S. (2022). Survey on enterprise Internet-of-Things systems (E-IoT): A security perspective. Ad Hoc Networks, 125, 102728. https:// ieeexplore.ieee.org/abstract/document/9509539/
Sharma, R., & Arya, R. (2023). Security threats and measures in the Internet of Things for smart city infrastructure: A state of art. Transactions on Emerging Telecommunications Technologies, 34(11), e4571. https://onlinelibrary.wiley.com/
Downloads
Published
Issue
Section
License
Copyright (c) 2025 by the authors.
This work is licensed under a Creative Commons Attribution 4.0 International License.
