Security Challenges in IoT: A Systematic Literature Review
Downloads
The rapid proliferation of the Internet of Things (IoT) has introduced transformative capabilities across diverse sectors but has also exposed critical security vulnerabilities due to the interconnected and often resource-constrained nature of IoT devices. This systematic literature review examines the prevailing security challenges within IoT environments, focusing on threat vectors, attack surfaces, and mitigation strategies. Drawing from a comprehensive analysis of peer-reviewed publications, the paper categorizes key challenges such as authentication weaknesses, data integrity threats, device heterogeneity, and privacy concerns. The review also explores the role of emerging security frameworks and technologies—including lightweight encryption, blockchain integration, and edge computing—in enhancing IoT resilience. Particular attention is paid to the evolving attack landscape, highlighting the increasing sophistication of threats like botnets, side-channel attacks, and firmware exploitation. The findings underscore the importance of adopting a holistic and layered security approach that encompasses hardware, software, and network-level protections. Furthermore, the paper identifies gaps in current research, especially around standardization, real-time anomaly detection, and scalable security architectures. The review concludes by recommending strategic directions for future work, including cross-domain policy enforcement and AI-driven security automation. This study contributes to a deeper understanding of IoT security, offering critical insights for researchers, developers, and enterprise stakeholders seeking to fortify IoT deployments against escalating cyber threats.
Ahmad, R., Alsmadi, I., Alhamdani, W. and Tawalbeh, L.A., 2022. A comprehensive deep learning benchmark for IoT IDS. Computers & Security, 114, p.102588.
Ajayi, R. and Masunda, M., 2025. Integrating edge computing, data science and advanced cyber defense for autonomous threat mitigation.
Alaba, F.A., Othman, M., Hashem, I.A.T. and Alotaibi, F., 2017. Internet of Things security: A survey. Journal of Network and Computer Applications, 88, pp.10-28.
https://doi.org/10.1016/j.jnca.2017.04.002
Alejandra, R. and Elena, P., 2025. PRIVACY-PRESERVING AI MODELS FOR CLOUD AND EDGE COMPUTING SECURITY. Synergy: Cross-Disciplinary Journal of Digital
Investigation, 3(3), pp.1-19.
Al-Fuqaha, A., Guizani, M., Mohammadi, M., Aledhari, M. and Ayyash, M., 2015. Internet of things: A survey on enabling technologies, protocols, and applications. IEEE communications surveys & tutorials, 17(4), pp.2347-2376.
https://doi.org/10.1109/COMST.2015.2444095
Almakhdhub, N.S., Clements, A.A., Payer, M. and Bagchi, S., 2019, June. Benchiot: A security benchmark for the internet of things. In 2019 49th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN) (pp. 234-246). IEEE.
Alrawais, A., Alhothaily, A., Hu, C. and Cheng, X., 2017. Fog computing for the internet of things: Security and privacy issues. IEEE Internet Computing, 21(2), pp.34-42.
https://doi.org/10.1109/MIC.2017.37
Aly, M., Khomh, F., Guéhéneuc, Y.G., Washizaki, H. and Yacout, S., 2018. Is Fragmentation a Threat to the Success of the Internet of Things?. IEEE Internet of Things Journal, 6(1), pp.472-487.
Ammar, M., Russello, G. and Crispo, B., 2018. Internet of Things: A survey on the security of IoT frameworks. Journal of information security and Applications, 38, pp.8-27.
https://doi.org/10.1016/j.jisa.2017.11.002
Babun, L., Denney, K., Celik, Z.B., McDaniel, P. and Uluagac, A.S., 2021. A survey on IoT platforms: Communication, security, and privacy perspectives. Computer Networks, 192, p.108040.
Baig, Z.A., Szewczyk, P., Valli, C., Rabadia, P., Hannay, P., Chernyshev, M., Johnstone, M., Kerai, P., Ibrahim, A., Sansurooah, K. and Syed, N., 2017. Future challenges for smart cities: Cyber-security and digital forensics. Digital Investigation, 22, pp.3-13. https://doi.org/10.1016/j.diin.2017.06.009
Chataut, R., Phoummalayvane, A. and Akl, R., 2023. Unleashing the power of IoT: A comprehensive review of IoT applications and future prospects in healthcare, agriculture, smart homes, smart cities, and industry 4.0. Sensors, 23(16), p.7194.
Chaudhary, S. and Mishra, P.K., 2023. DDoS
attacks in Industrial IoT: A survey. Computer Networks, 236, p.110015.
Chiang, M. and Zhang, T., 2016. Fog and IoT: An overview of research opportunities. IEEE Internet of things journal, 3(6), pp.854-864.
https://doi.org/10.1109/JIOT.2016.2584538
Da Xu, L., He, W. and Li, S., 2014. Internet of things in industries: A survey. IEEE Transactions on industrial informatics, 10(4), pp.2233-2243. https://doi.org/10.1109/TII.2014.2300753
Dhinakaran, D., Srinivasan, L., Sankar, S.U. and Selvaraj, D., 2024. Quantum-based privacy-preserving techniques for secure and trustworthy internet of medical things an extensive analysis. Quantum Inf. Comput., 24(3&4), pp.227-266.
Dorri, A., Kanhere, S.S. and Jurdak, R., 2017, April. Towards an optimized blockchain for IoT. In Proceedings of the second international conference on Internet-of-Things design and implementation (pp. 173-178).
https://doi.org/10.1145/3054977.3055003
Elkhodr, M., 2025. An AI-Driven Framework for Integrated Security and Privacy in Internet of Things Using Quantum-Resistant Blockchain. Future Internet, 17(6), p.246.
Fernandes, E., Paupore, J., Rahmati, A., Simionato, D., Conti, M. and Prakash, A., 2016. {FlowFence}: Practical data protection for emerging {IoT} application frameworks. In 25th USENIX security symposium (USENIX Security 16) (pp. 531-548).
Gellert, R., 2018. Understanding the notion of risk in the General Data Protection Regulation. Computer Law & Security
Review, 34(2), pp.279-288.
https://doi.org/10.1016/j.clsr.2019.105367
Geneiatakis, D., Kounelis, I., Neisse, R., Nai-Fovino, I., Steri, G. and Baldini, G., 2017, May. Security and privacy issues for an IoT based smart home. In 2017 40th international convention on information and communication technology, electronics and microelectronics (MIPRO) (pp. 1292-1297). IEEE.
Gopalsamy, M., 2020. Artificial Intelligence (AI) Based Internet-of-Things (IoT)-Botnet Attacks Identification Techniques to Enhance Cyber security. International Journal of Research and Analytical Reviews (IJRAR), 7(4), pp.414-420.
Gubbi, J., Buyya, R., Marusic, S. and Palaniswami, M., 2013. Internet of Things (IoT): A vision, architectural elements, and future directions. Future generation computer systems, 29(7), pp.1645-1660. https://doi.org/10.1016/j.future.2013.01.010
HaddadPajouh, H., Dehghantanha, A., Parizi, R.M., Aledhari, M. and Karimipour, H., 2021. A survey on internet of things security: Requirements, challenges, and solutions. Internet of Things, 14, p.100129.
HaddadPajouh, H., Khayami, R., Dehghantanha, A., Choo, K.K.R. and Parizi, R.M., 2020. AI4SAFE-IoT: An AI-powered secure architecture for edge layer of Internet of things. Neural Computing and Applications, 32(20), pp.16119-16133.
Hakeem, S.A.A. and Kim, H., 2025. Advancing Intrusion Detection in V2X Networks: A Comprehensive Survey on Machine Learning, Federated Learning, and Edge AI for V2X Security. IEEE Transactions on Intelligent Transportation Systems.
Hammi, B., Zeadally, S., Khatoun, R. and Nebhen, J., 2022. Survey on smart homes: Vulnerabilities, risks, and countermeasures. Computers & Security, 117, p.102677.
Hintaw, A.J., Manickam, S., Aboalmaaly, M.F. and Karuppayah, S., 2023. MQTT vulnerabilities, attack vectors and solutions in the internet of things (IoT). IETE Journal of Research, 69(6), pp.3368-3397.
Hossain, M.M., Fotouhi, M. and Hasan, R., 2015, June. Towards an analysis of security issues, challenges, and open problems in the internet of things. In 2015 ieee world congress on services (pp. 21-28). IEEE. https://doi.org/10.1109/SERVICES.2015.12
Hulayyil, S.B., Li, S. and Xu, L., 2023. Machine-learning-based vulnerability detection and classification in internet of things device security. Electronics, 12(18), p.3927.
Humayun, M., Tariq, N., Alfayad, M., Zakwan, M., Alwakid, G. and Assiri, M., 2024. Securing the Internet of Things in artificial intelligence era: A comprehensive survey. IEEE access, 12, pp.25469-25490.
Islam, S.R., Kwak, D., Kabir, M.H., Hossain, M. and Kwak, K.S., 2015. The internet of things for health care: a comprehensive survey. IEEE access, 3, pp.678-708.
https://doi.org/10.1109/ACCESS.2015.2437951
Javeed, D., Saeed, M.S., Ahmad, I., Adil, M., Kumar, P. and Islam, A.N., 2024. Quantum-empowered federated learning and 6G wireless networks for IoT security: Concept, challenges and future directions. Future Generation Computer Systems.
Jayalaxmi, P., Saha, R., Kumar, G., Kumar, N. and Kim, T.H., 2021. A taxonomy of security issues in Industrial Internet-of-Things: Scoping review for existing solutions, future implications, and research challenges. IEEE Access, 9, pp.25344-25359.
Keoh, S.L., Kumar, S.S. and Tschofenig, H., 2014. Securing the internet of things: A standardization perspective. IEEE Internet of things Journal, 1(3), pp.265-275.
Khalil, U., Malik, O.A., Uddin, M. and Chen, C.L., 2022. A comparative analysis on blockchain versus centralized authentication architectures for IoT-enabled smart devices in smart cities: a comprehensive review, recent advances, and future research directions. Sensors, 22(14), p.5168.
Khan, O.U., Abdullah, S.M., Olajide, A.O., Sani, A.I., Faisal, S.M.W., Ogunola, A.A. and Lee, M.D., 2024. The Future of Cybersecurity: Leveraging Artificial Intelligence to Combat Evolving Threats and Enhance Digital Defense Strategies. Journal of Computational Analysis and Applications, 33(8).
Kolluru, V., Mungara, S. and Chintakunta, A.N., 2019. Securing the IoT ecosystem: Challenges and innovations in smart device cybersecurity. International Journal on Cryptography and Information Security, 9(2),
pp.10-5121.
Kumar, S., Tiwari, P. and Zymbler, M., 2019. Internet of Things is a revolutionary approach for future technology enhancement: a review. Journal of Big data, 6(1), pp.1-21. https://doi.org/10.1186/s40537-019-0268-2
Lin, H. and Bergmann, N.W., 2016. IoT privacy and security challenges for smart home environments. Information, 7(3), p.44.
Magara, T. and Zhou, Y., 2024. Internet of things (IoT) of smart homes: privacy and security. Journal of Electrical and Computer Engineering, 2024(1), p.7716956.
Makhdoom, I., Abolhasan, M., Lipman, J., Liu, R.P. and Ni, W., 2018. Anatomy of threats to the internet of things. IEEE communications surveys & tutorials, 21(2), pp.1636-1675.
Makhdoom, I., Abolhasan, M., Lipman, J., Liu, R.P. and Ni, W., 2018. Anatomy of threats to the internet of things. IEEE communications surveys & tutorials, 21(2), pp.1636-1675.
Manyika, J., Chui, M., Bisson, P., Woetzel, J., Dobbs, R., Bughin, J. and Aharon, D., 2015. The Internet of Things: Mapping the value beyond the hype.
Mazhar, N., Salleh, R., Zeeshan, M. and Hameed, M.M., 2021. Role of device identification and manufacturer usage description in iot security: A survey. Ieee Access, 9, pp.41757-41786.
McCall, A., 2024. Cybersecurity in the Age of AI and IoT: Emerging Threats and Defense Strategies.
Mittal, C., 2024. Obstacles and countermeasures for protecting Internet of Things devices from emerging security risks. Cyber Security: A Peer-Reviewed Journal, 8(1), pp.48-62.
Mudgerikar, A. and Bertino, E., 2021. Iot attacks and malware. Cyber Security Meets Machine Learning, pp.1-25.
Mumtaz, S., Alsohaily, A., Pang, Z., Rayes, A., Tsang, K.F. and Rodriguez, J., 2017. Massive Internet of Things for industrial applications: Addressing wireless IIoT connectivity challenges and ecosystem fragmentation. IEEE industrial electronics magazine, 11(1), pp.28-33.
Nguyen, V.L., Nguyen, L.H., Hwang, R.H., Canberk, B. and Duong, T.Q., 2025. Quantum Machine Learning for 6G Network Intelligence and Adversarial Threats. IEEE Communications Standards Magazine.
Patel, N.D. and Singh, A., 2023. Security Issues, Attacks and Countermeasures in Layered IoT Ecosystem. International Journal of Next-Generation Computing, 14(2).
Pham, D.P., 2022. Leveraging side-channel signals for IoT malware classification and rootkit detection (Doctoral dissertation, Université Rennes 1).
Qahtan, S., Sharif, K.Y., Zaidan, A.A., AlSattar, H.A., Albahri, O.S., Zaidan, B.B., Zulzalil, H., Osman, M.H., Alamoodi, A.H. and Mohammed, R.T., 2022. Novel multi security and privacy benchmarking framework for blockchain-based IoT healthcare industry 4.0 systems. IEEE Transactions on Industrial Informatics, 18(9), pp.6415-6423.
Quincozes, V.E., Quincozes, S.E., Kazienko, J.F., Gama, S., Cheikhrouhou, O. and Koubaa, A., 2024. A survey on IoT application layer protocols, security challenges, and the role of explainable AI in IoT (XAIoT). International Journal of Information Security, 23(3), pp.1975-2002.
Rao, D.D., Waoo, A.A., Singh, M.P., Pareek, P.K., Kamal, S. and Pandit, S.V., 2024. Strategizing IoT network layer security through advanced intrusion detection systems and AI-driven threat analysis. Full Length Article, 12(2), pp.195-195.
Reyna, A., Martín, C., Chen, J., Soler, E. and Díaz, M., 2018. On blockchain and its integration with IoT. Challenges and opportunities. Future generation computer systems, 88, pp.173-190.
https://doi.org/10.1016/j.future.2018.05.046
Rizvi, S., Orr, R.J., Cox, A., Ashokkumar, P. and Rizvi, M.R., 2020. Identifying the attack surface for IoT network. Internet of Things, 9, p.100162.
Roman, R., Zhou, J. and Lopez, J., 2013. On the features and challenges of security and privacy in distributed internet of things. Computer networks, 57(10), pp.2266-2279.
https://doi.org/10.1016/j.comnet.2012.12.018
Sadeghi, A.R., Wachsmann, C. and Waidner, M., 2015, June. Security and privacy challenges in industrial internet of things. In Proceedings of the 52nd annual design automation conference (pp. 1-6).
Saleem, J., Hammoudeh, M., Raza, U., Adebisi, B. and Ande, R., 2018, June. IoT standardisation: Challenges, perspectives and solution. In Proceedings of the 2nd international conference on future networks and distributed systems (pp. 1-9). doi: 10.1145/3231053.3231103.
Salma, S., Begum, A. and Syed, H., 2024. Practical and Innovative Applications of IoT and IoT Networks (Smart Cities, Smart Mobility, Smart Home, Smart Health, Smart Grid, etc.). In AI for Climate Change and Environmental Sustainability (pp. 121-144). CRC Press.
Samaila, M.G., Neto, M., Fernandes, D.A., Freire, M.M. and Inácio, P.R., 2018. Challenges of securing Internet of Things devices: A survey. Security and Privacy, 1(2), p.e20.
doi: 10.1002/spy2.20.
Sebestyen, H., Popescu, D.E. and Zmaranda, R.D., 2025. A Literature Review on Security in the Internet of Things: Identifying and Analysing Critical Categories. Computers, 14(2), p.61.
Sfar, A.R., Natalizio, E., Challal, Y. and Chtourou, Z., 2018. A roadmap for security challenges in the Internet of Things. Digital Communications and Networks, 4(2), pp.118-137.
https://doi.org/10.1016/j.dcan.2017.04.003
Shindagi, K.S., Koppad, K.V., Ekbote, P.R., Bhandare, N.K., Revankar, D.D., Sonwalkar, P., Fadanis, B. and Shreyas, J., 2025. Federated Learning for Enhancing Cybersecurity in IoT-Integrated 6G Networks: Challenges, Opportunities, and Future Directions. 6G Cyber Security Resilience: Trends and Challenges, pp.249-262.
Sicari, S., Rizzardi, A., Grieco, L.A. and Coen-Porisini, A., 2015. Security, privacy and trust in Internet of Things: The road ahead. Computer networks, 76, pp.146-164.
https://doi.org/10.1016/j.comnet.2014.11.008
Silva, M., Cerdeira, D., Pinto, S. and Gomes, T., 2019. Operating systems for internet of things low-end devices: Analysis and benchmarking. IEEE Internet of Things Journal, 6(6), pp.10375-10383.
Srivastava, A., Gupta, S., Quamara, M., Chaudhary, P. and Aski, V.J., 2020. Future IoT‐enabled threats and vulnerabilities: State of the art, challenges, and future prospects. International Journal of Communication Systems, 33(12), p.e4443.
Szczepaniuk, H. and Szczepaniuk, E.K., 2022. Standardization of IoT ecosystems: open challenges, current solutions, and future directions. In Internet of Things (pp. 23-42). CRC Press.
Talal, M., Zaidan, A.A., Zaidan, B.B., Albahri, A.S., Alamoodi, A.H., Albahri, O.S., Alsalem, M.A., Lim, C.K., Tan, K.L., Shir, W.L. and Mohammed, K.I., 2019. Smart home-based IoT for real-time and secure remote health monitoring of triage and priority system using body sensors: Multi-driven systematic review. Journal of medical systems, 43, pp.1-34.
Thankappan, M., Rifà-Pous, H. and Garrigues, C., 2022. Multi-Channel Man-in-the-Middle attacks against protected Wi-Fi networks: A state of the art review. Expert Systems with Applications, 210, p.118401.
Touqeer, H., Zaman, S., Amin, R., Hussain, M., Al-Turjman, F. and Bilal, M., 2021. Smart home security: challenges, issues and solutions at different IoT layers. The Journal of Supercomputing, 77(12), pp.14053-14089.
Umair, M., Cheema, M.A., Cheema, O., Li, H. and Lu, H., 2021. Impact of COVID-19 on IoT adoption in healthcare, smart homes, smart buildings, smart cities, transportation and industrial IoT. Sensors, 21(11), p.3838.
ur Rehman, M.H., Salah, K., Damiani, E. and Svetinovic, D., 2019. Trust in blockchain cryptocurrency ecosystem. IEEE Transactions on Engineering Management, 67(4), pp.1196-1212. https://doi.org/10.1016/j.future.2019.05.019
Vermesan, O. and Friess, P., 2015. Building the hyperconnected society-internet of things research and innovation value chains, ecosystems and markets (p. 332). Taylor & Francis.
Weber, R.H., 2010. Internet of Things–New security and privacy challenges. Computer law & security review, 26(1), pp.23-30. https://doi.org/10.1016/j.clsr.2009.11.008
Wolfert, S., Ge, L., Verdouw, C. and Bogaardt, M.J., 2017. Big data in smart farming–a review. Agricultural systems, 153, pp.69-80.
https://doi.org/10.1016/j.agsy.2017.01.023
Xenofontos, C., Zografopoulos, I., Konstantinou, C., Jolfaei, A., Khan, M.K. and Choo, K.K.R., 2021. Consumer, commercial, and industrial iot (in) security: Attack taxonomy and case studies. IEEE Internet of Things Journal, 9(1), pp.199-221.
Zaman, S., Alhazmi, K., Aseeri, M.A., Ahmed, M.R., Khan, R.T., Kaiser, M.S. and Mahmud, M., 2021. Security threats and artificial intelligence based countermeasures for internet of things networks: a comprehensive survey. Ieee Access, 9, pp.94668-94690.
Zanella, A., Bui, N., Castellani, A., Vangelista, L. and Zorzi, M., 2014. Internet of things for smart cities. IEEE Internet of Things journal, 1(1), pp.22-32. https://doi.org/10.1109/JIOT.2014.2306328
