Analysis of security issues in the development process of the Internet of Things that are vulnerable to attack

　　The development speed of the Internet of Things in our country is obvious to all, but research on the information security of the Internet of Things is relatively lagging behind. The Internet is the foundation for the construction of the Internet of Things, so the security threats of the Internet of Things include two aspects. First of all, security problems encountered in the Internet will appear in the Internet of Things; secondly, the Internet of Things system itself and related applications are also vulnerable to attacks.

In the overall architecture of the Internet of Things, the perception layer is at the bottom and most basic level. Information security at this level is most vulnerable to threats. In the process of collecting information, the perception layer mainly applies radio frequency identification technology (RFID) and wireless sensor network (WSN). The security issues of the IoT perception layer are essentially the security issues of RFID systems and WSN systems.

When sensors receive information through WSN, a large number of sensor nodes will be generated. These nodes are often exposed in public places and controlled remotely by people or computers. They lack effective protection and are easily subject to signal interference or even node capture. Furthermore, there are many security weaknesses in the routing protocol of WSN, and criminals can inject malicious routing information into WSN to paralyze the network.

Regarding WSN vulnerabilities, the industry has put forward many suggestions for protective measures, such as strengthening the security protection of the gateway node deployment environment, strengthening security control over the confidentiality of the sensor network, and adding node authentication mechanisms and intrusion detection mechanisms. But despite this, there is still very little research work on WSN security issues, and there are still many challenging issues that need to be solved: such as using limited memory space to manage a large number of pre-distributed keys, key pre-distribution technology to support the addition of new nodes, low-energy encryption methods, intrusion models and intrusion prevention methods, secure routing methods, secure in-network data processing technologies, etc.

RFID is a non-contact automatic identification technology and one of the key technologies in Internet of Things applications. The Internet of Things will equip each item that needs to collect information with a tag, and then communicate with the reader through electromagnetic waves. This non-contact method has serious security risks. Since RFID tags lack the ability to ensure their own security, illegal users can communicate with electromagnetic waves through self-made readers and writers, causing the outflow of important information. Secondly, without the knowledge of the terminal device and the RFID tag user, the information on the tag can be easily tracked, tampered with, and then sent back to the user with modified information, causing problems such as false information and incorrect decision-making.

In view of the shortcomings of RFID and the two major factors of cost and security, the most reliable solution at present is to use cryptography to enhance transmission-level security and create a security mechanism.

In addition to technological research and development for IoT security protection, a complete legal mechanism should also be implemented. At present, our country does not have complete privacy protection regulations for the Internet of Things. With the continuous application of Internet of Things technology, it is necessary to provide detailed regulations on the sources and channels of information collection, as well as how to implement detailed punishment rules once other people's information is illegally collected.

This article is reprinted from the "Internet" and supports the protection of intellectual property rights. Please indicate the original source and author when reprinting. If there is any infringement, please contact us to delete it.