Security and Privacy Issues in the Internet of Things (IoT)

ITC 595: Information Security Term 1, 2019
Assessment item 5: Project research report
Security and privacy issues in the Internet of things (IoT)
Student Name: Jogeswara Krishna Chaitanya Samanthapudi
Student Number: 11634571

Abstract
The “Internet of Things” (IoT) encompasses the interconnection of everyday devices
through the internet. Internet of Thing links physical and virtual objects through the use of
communication and data capture capabilities. The technology has different problems regarding
privacy and security. Privacy is the state that ensures that personal information is not shared.
Privacy also involves the users being free from security surveillance and to decide to whom and
how one’s personal information can be revealed. The customers using the Internet of Things
technology require privacy and protection. Devices in the Internet of Things are critical because
they can collect private information about the users. The existing security mechanisms may not
be adequate in coping with the security situations that arise as a result of the use of IoT devices.
There is a need to adopt privacy and security mechanisms that would ensure that the security
and privacy of individuals are not endangered and allow the users to reap the benefits of IoT.
The IoT security and privacy problems are worsened by the need for interoperability between
different devices manufactured by different vendors.
Keywords: Security issues, privacy, Internet of things, IoT.

Introduction
Internet of Things refers to a scenario where the objects, animals, and people are given a
unique identifier or an ability to move data through a network with no interaction between the
humans or an interaction between the humans with the computers. IoT has developed from the
group of technologies which are wireless, systems of micro-electromechanical together with the
Internet(Zhou, Jia, Peng, Zhang, & Liu, 2019).
The privacy issues in IoT depend on the ability of the users to configure security settings.
Configuration of security settings requires a high level of competence in IT security; therefore,
the security may fail, often leaving the users’ private data prone to attacks. This paper proposes
the development of a mechanism that will determine how personally identifiable private
information may be treated depending on the services the customer uses on the IoT device
(Maple, 2017).
When implementing privacy policies in IoT, the usage can be considered to determine
whether personal data should be saved, exposed to other connected devices, or be deleted. The
paper will examine how considering the usage while deciding which data should be exposed,
saved, or deleted can be an effective way of protecting the privacy of the consumers. The
purpose of this research is to investigate how user-based approaches can help in protecting the
privacy of the consumers (Sicari, Rizzardi, Grieco, & Coen, 2015).
Addressing privacy issues through user-based approaches can greatly improve the
acceptance of IoT products and end devices. IoT will allow a large number of devices that were
previously unconnected to connect, communicate, and share data with other devices. The user-
based approach will provide a framework through which the consumers can easily and