IoT and Man-in-the-Middle Attacks
Hamidreza Fereidouni, Olga Fadeitcheva, Mehdi Zalai
TL;DR
The paper addresses the vulnerability of IoT ecosystems to Man-in-the-Middle attacks by outlining the IoT landscape, MitM typologies, and their multi-layer impacts on confidentiality, integrity, availability, and privacy. It analyzes IoT vulnerabilities by architectural layer, surveys real-world MitM incidents, and reviews current and emerging prevention and mitigation techniques, including protocol fixes, network hardening, ML/DL-based intrusion detection, and regulatory considerations. Open issues are framed around device proliferation, data quality for learning-based defenses, and the lack of standardization, with recommendations centered on advanced detection methods, hybrid routing approaches, and standardization efforts. The work highlights the growing threat of MitM in heterogeneous IoT contexts and emphasizes the practical need for robust identity management, scalable monitoring, and policy/regulatory support to safeguard IoT deployments.
Abstract
This paper provides an overview of the Internet of Things (IoT) and its significance. It discusses the concept of Man-in-the-Middle (MitM) attacks in detail, including their causes, potential solutions, and challenges in detecting and preventing such attacks. The paper also addresses the current issues related to IoT security and explores future methods and facilities for improving detection and prevention mechanisms against MitM.
