A survey on IoT platforms: Communication, security, and privacy perspectives
A survey on IoT platforms: Communication, security, and privacy perspectives
复制标题
DOI：
10.1016/j.comnet.2021.108040
复制
发表时间：
2021-04-07
影响因子：
5.6
通讯作者：
Uluagac, A. Selcuk
中科院分区：
文献类型：
--
作者：
Babun, Leonardo;Denney, Kyle;Uluagac, A. Selcuk
物联网(IoT)重新定义了商品和工业任务的日常执行方式。传感器的集成、轻量级计算以及物联网平台上不同无线技术的激增，使人类能够轻松地与周围的物理世界进行彻底的互动。随着最近物联网的兴起，为研究人员和开发人员推出了几种不同的物联网平台，以简化对各种物联网设备的管理和控制。通常，物联网平台通过提供API充当核心物联网功能和用户之间的桥梁。由于其广泛的应用，物联网平台在其架构和设计上大多是独特的。因此，物联网管理员、开发人员和研究人员(即物联网用户)在物联网解决方案的正确配置、实施和保护方面面临着巨大的配置差异。在本次调查中，我们对不同应用领域的热门物联网平台进行了深入分析。更具体地说，我们定义了一个综合评估框架，该框架考虑了七个不同的技术比较标准：(1)拓扑设计、(2)编程语言、(3)第三方支持、(4)扩展协议支持、(5)事件处理、(6)安全性和(7)隐私。然后，我们使用该框架评估不同的物联网平台，突出它们在通信、安全和隐私方面的不同属性。首先，我们描述了接受调查的不同物联网平台支持的通信协议。然后，我们的目标不是揭示影响物联网的新威胁，而是分析不同的物联网平台如何处理影响机密性、完整性、可用性和访问控制等最常见安全服务的安全和隐私漏洞。此外，我们还介绍了这些平台可以实施的可能解决方案，以加强物联网解决方案中的安全和隐私。最后，我们讨论了每种物联网平台的优缺点，以便物联网管理员、开发人员和研究人员(即物联网用户)能够明智地决定使用特定平台来实施其物联网解决方案。据我们所知，这是第一次使用本工作中定义的标准评估不同物联网平台的全面调查。
The Internet of Things (IoT) redefines the way how commodity and industrial tasks are performed every day. The integration of sensors, lightweight computation, and the proliferation of different wireless technologies on IoT platforms enable human beings to easily interact with their surrounding physical world thoroughly. With the recent rise of IoT, several different IoT platforms have been introduced for researchers and developers to ease the management and control of various IoT devices. In general, the IoT platforms act as a bridge between core IoT functionalities and users by providing APIs. Due to their wide variety of applications, IoT platforms are mostly unique in their architectures and designs. Thus, IoT administrators, developers, and researchers (i.e., IoT users) are challenged with substantial configuration differences in the proper configuration, implementation, and protection of the IoT solutions. In this survey, we conduct an in-depth analysis of popular IoT platforms from different application domains. More specifically, we define a comprehensive evaluation framework that considers seven different technical comparison criteria: (1) topology design, (2) programming languages, (3) third-party support, (4) extended protocol support, (5) event handling, (6) security, and (7) privacy. Then, we use the framework to evaluate the different IoT platforms highlighting their distinguishing attributes on communications, security, and privacy. First, we describe the communication protocols supported by the different IoT platforms surveyed. Then, rather than uncovering novel threats affecting IoT, we aim to analyze how the different IoT platforms handle security and privacy vulnerabilities affecting the most common security services of confidentiality, integrity, availability, and access control. Further, we present possible solutions that these platforms could implement to strengthen security and privacy within the IoT solution. Finally, we discuss the advantages and disadvantages of every IoT platform, so IoT administrators, developers, and researchers (i.e., IoT users) can make an informed decision on the use of specific platforms to implement their IoT solutions. To the best of our knowledge, this is the first comprehensive survey to evaluate different IoT platforms using the criteria defined in this work.