The Internet of (Unsecure) Things: Threats and Risks

This Chapter aims to shed light on the current state of security of Internet of Things (IoT) devices. Preliminary to that, however, a functional and sufficiently comprehensive definition of the IoT is provided. To this end, the first part of the technical analysis draws an architecture taxonomy of IoT systems resulting in a 3-layer model (device, network and application layers). As the aim of this book is to provide a cross-sectorial overview of the main security and privacy risks connected to IoT devices, this part does not dwell extensively on the various and diverse requirements across all IoT different devices & application domains. Building on the outcomes of the first part, the second part of the analysis presents an IoT security threat taxonomy by discussing and integrating the European Cybersecurity Agency’s (ENISA) report on IoT threat taxonomy with the more encompassing ENISA (cybersecurity) threat landscapes.