Threat modeling and security issues for the Internet of Things

The Internet of Things (IoT) aims at transforming everyday objects into smart or virtual objects, giving us control of objects and additionally keeping us informed of the condition of these objects. This idea is gaining traction, thanks to the large number of gadgets connected to the web, ranging from cell phones to appliances. However, the development of the IoT gives rise to various security-related, privacy and ethical issues due to the complexity of the systems being implemented and the heterogeneity of these networks. It is furthermore imperative to stress that the greater part of connected objects are often left unattended or are not properly secured. In light of these issues, this study addresses the Internet of Things concepts through deliberate audit of academic research papers, corporate white papers and online databases. The primary goal of this study is to addresses challenges regarding privacy and security of Internet of Things, within some of its key application areas, namely Smart Homes, Smart Cities, Wearables, Smart Retail, Connected Cars, and Health-Care. Moreover, this paper provides a threat model for all aforementioned areas and provide extensive countermeasures for each of them, highlighting the benefits of security and privacy by design.