Internet of Things Security: A Survey on Common Attacks
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2026
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866911648679198720 |
|---|---|
| author | Valadares, Dalton Cézane Gomes Silva, Luiz Antonio Pereira Marques, Daniel Hindemburg de Miranda Sobrinho, Álvaro Alvares de Carvalho César Balieiro, Andson Marreiros Hail, Mohamed Ahmed Alshawki, Mohammed B. Gorgônio, Kyller Costa |
| author_facet | Valadares, Dalton Cézane Gomes Silva, Luiz Antonio Pereira Marques, Daniel Hindemburg de Miranda Sobrinho, Álvaro Alvares de Carvalho César Balieiro, Andson Marreiros Hail, Mohamed Ahmed Alshawki, Mohammed B. Gorgônio, Kyller Costa |
| contents | The exponential growth of the Internet of Things (IoT) has integrated connected devices into various sectors like smart cities, digital health, and Industry 4.0, generating vast amounts of real-time data to support intelligent decision-making. However, this widespread adoption is fundamentally challenged by significant security risks, primarily due to the inherent computational limitations of devices, lack of standardization, and an expanding attack surface. Given that security is paramount to ensuring trust in these environments, this paper presents a comprehensive survey and a multi-dimensional analysis of the IoT threat landscape. It describes 28 common attacks, ranging from traditional threats, such as Man-in-the-Middle, to specialized IoT exploits, including node replication and skimming. To provide a structured understanding of these risks, we employ the STRIDE model for functional threat classification alongside the CVSS framework for quantitative criticality assessment. Furthermore, the research establishes a robust mapping between these threats and five foundational vulnerability classes (Process, Code, Communication, Operation, and Device), uncovering the specific technical entry points exploited by adversaries. Beyond threat identification, the survey presents state-of-the-art mitigation techniques and discusses emerging paradigms and research gaps, working as a roadmap for future investigation and providing a consolidated technical foundation for both researchers and practitioners aiming to build resilient and secure IoT ecosystems. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2605_03744 |
| institution | arXiv |
| publishDate | 2026 |
| record_format | arxiv |
| spellingShingle | Internet of Things Security: A Survey on Common Attacks Valadares, Dalton Cézane Gomes Silva, Luiz Antonio Pereira Marques, Daniel Hindemburg de Miranda Sobrinho, Álvaro Alvares de Carvalho César Balieiro, Andson Marreiros Hail, Mohamed Ahmed Alshawki, Mohammed B. Gorgônio, Kyller Costa Cryptography and Security The exponential growth of the Internet of Things (IoT) has integrated connected devices into various sectors like smart cities, digital health, and Industry 4.0, generating vast amounts of real-time data to support intelligent decision-making. However, this widespread adoption is fundamentally challenged by significant security risks, primarily due to the inherent computational limitations of devices, lack of standardization, and an expanding attack surface. Given that security is paramount to ensuring trust in these environments, this paper presents a comprehensive survey and a multi-dimensional analysis of the IoT threat landscape. It describes 28 common attacks, ranging from traditional threats, such as Man-in-the-Middle, to specialized IoT exploits, including node replication and skimming. To provide a structured understanding of these risks, we employ the STRIDE model for functional threat classification alongside the CVSS framework for quantitative criticality assessment. Furthermore, the research establishes a robust mapping between these threats and five foundational vulnerability classes (Process, Code, Communication, Operation, and Device), uncovering the specific technical entry points exploited by adversaries. Beyond threat identification, the survey presents state-of-the-art mitigation techniques and discusses emerging paradigms and research gaps, working as a roadmap for future investigation and providing a consolidated technical foundation for both researchers and practitioners aiming to build resilient and secure IoT ecosystems. |
| title | Internet of Things Security: A Survey on Common Attacks |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2605.03744 |