Table of Contents
Fetching ...

IoT and Man-in-the-Middle Attacks

Hamidreza Fereidouni, Olga Fadeitcheva, Mehdi Zalai

TL;DR

The paper addresses the vulnerability of IoT ecosystems to Man-in-the-Middle attacks by outlining the IoT landscape, MitM typologies, and their multi-layer impacts on confidentiality, integrity, availability, and privacy. It analyzes IoT vulnerabilities by architectural layer, surveys real-world MitM incidents, and reviews current and emerging prevention and mitigation techniques, including protocol fixes, network hardening, ML/DL-based intrusion detection, and regulatory considerations. Open issues are framed around device proliferation, data quality for learning-based defenses, and the lack of standardization, with recommendations centered on advanced detection methods, hybrid routing approaches, and standardization efforts. The work highlights the growing threat of MitM in heterogeneous IoT contexts and emphasizes the practical need for robust identity management, scalable monitoring, and policy/regulatory support to safeguard IoT deployments.

Abstract

This paper provides an overview of the Internet of Things (IoT) and its significance. It discusses the concept of Man-in-the-Middle (MitM) attacks in detail, including their causes, potential solutions, and challenges in detecting and preventing such attacks. The paper also addresses the current issues related to IoT security and explores future methods and facilities for improving detection and prevention mechanisms against MitM.

IoT and Man-in-the-Middle Attacks

TL;DR

The paper addresses the vulnerability of IoT ecosystems to Man-in-the-Middle attacks by outlining the IoT landscape, MitM typologies, and their multi-layer impacts on confidentiality, integrity, availability, and privacy. It analyzes IoT vulnerabilities by architectural layer, surveys real-world MitM incidents, and reviews current and emerging prevention and mitigation techniques, including protocol fixes, network hardening, ML/DL-based intrusion detection, and regulatory considerations. Open issues are framed around device proliferation, data quality for learning-based defenses, and the lack of standardization, with recommendations centered on advanced detection methods, hybrid routing approaches, and standardization efforts. The work highlights the growing threat of MitM in heterogeneous IoT contexts and emphasizes the practical need for robust identity management, scalable monitoring, and policy/regulatory support to safeguard IoT deployments.

Abstract

This paper provides an overview of the Internet of Things (IoT) and its significance. It discusses the concept of Man-in-the-Middle (MitM) attacks in detail, including their causes, potential solutions, and challenges in detecting and preventing such attacks. The paper also addresses the current issues related to IoT security and explores future methods and facilities for improving detection and prevention mechanisms against MitM.
Paper Structure (18 sections, 7 figures)

This paper contains 18 sections, 7 figures.

Figures (7)

  • Figure 1: A General Schema of Man-in-the-Middle Attack
  • Figure 2: A General View of IoT Devices
  • Figure 3: IoT Network Architecture Layers b14
  • Figure 4: Traditional Internet vs. Internet of Things b15
  • Figure 5: Privacy and Security Threats in IoT
  • ...and 2 more figures