# Security of the Internet of Things: Vulnerabilities, Attacks and Countermeasures

arXiv: https://arxiv.org/abs/1910.13312 · HTML: https://mlsanity.com/paper/1910.13312/

## Key facts

- Cited by 12 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 29 Oct 2019.

## Built on by (most cited first, 12 of 12)

- [A Comparative Analysis of Machine Learning Techniques for IoT Intrusion Detection](https://mlsanity.com/paper/2111.13149/) (2021)
- [Towards Adversarial Realism and Robust Learning for IoT Intrusion Detection and Classification](https://mlsanity.com/paper/2301.13122/) (2023)
- [Machine Learning for the Detection and Identification of Internet of Things (IoT) Devices: A Survey](https://mlsanity.com/paper/2101.10181/) (2021)
- [Class-Incremental Learning for Wireless Device Identification in IoT](https://mlsanity.com/paper/2105.06381/) (2021)
- [Explainable Artificial Intelligence for Smart City Application: A Secure and Trusted Platform](https://mlsanity.com/paper/2111.00601/) (2021)
- [Zero-bias Deep Neural Network for Quickest RF Signal Surveillance](https://mlsanity.com/paper/2110.05797/) (2021)
- [Machine and Deep Learning for IoT Security and Privacy: Applications, Challenges, and Future Directions](https://mlsanity.com/paper/2210.13547/) (2022)
- [Trust Semantics Distillation for Collaborator Selection via Memory-Augmented Agentic AI](https://mlsanity.com/paper/2509.08151/) (2025)
- [Privacy-Enhanced Training-as-a-Service for On-Device Intelligence: Concept, Architectural Scheme, and Open Problems](https://mlsanity.com/paper/2404.10255/) (2024)
- [Enhancing Intrusion Detection in IoT Environments: An Advanced Ensemble Approach Using Kolmogorov-Arnold Networks](https://mlsanity.com/paper/2408.15886/) (2024)
- [Weaponizing Language Models for Cybersecurity Offensive Operations: Automating Vulnerability Assessment Report Validation; A Review Paper](https://mlsanity.com/paper/2505.04265/) (2025)
- [A Hierarchical IDS for Zero-Day Attack Detection in Internet of Medical Things Networks](https://mlsanity.com/paper/2508.10346/) (2025)

## Abstract (arXiv)

Wireless Sensor Networks (WSNs) constitute one of the most promising third-millennium technologies and have a wide range of applications in our surrounding environment. The reason behind the vast adoption of WSNs in various applications is that they have tremendously appealing features, e.g., low production cost, low installation cost, unattended network operation, autonomous and longtime operation. WSNs have started to merge with the Internet of Things (IoT) through the introduction of Internet access capability in sensor nodes and sensing ability in Internet-connected devices. Thereby, the IoT is providing access to huge amount of data, collected by the WSNs, over the Internet. However, owing to the absence of a physical line-of-defense, i.e. there is no dedicated infrastructure such as gateways to watch and observe the flowing information in the network, security of WSNs along with IoT is of a big concern to the scientific community. Besides, recent integration and collaboration of WSNs with IoT will open new challenges and problems in terms of security. Hence, this would be a nightmare for the individuals using these systems as well as the security administrators who are managing those networks. Therefore, a detailed review of security attacks towards WSNs and IoT, along with the techniques for prevention, detection, and mitigation of those attacks are provided in this paper. In this text, attacks are categorized and treated into mainly two parts, most or all types of attacks towards WSNs and IoT are investigated under that umbrella: "Passive Attacks" and "Active Attacks". Understanding these attacks and their associated defense mechanisms will help to pave a secure path towards the proliferation and public acceptance of IoT technology.