{"id":"https://openalex.org/W3160751182","doi":"https://doi.org/10.1109/jiot.2021.3079916","title":"Consumer, Commercial, and Industrial IoT (In)Security: Attack Taxonomy and Case Studies","display_name":"Consumer, Commercial, and Industrial IoT (In)Security: Attack Taxonomy and Case Studies","publication_year":2021,"publication_date":"2021-05-13","ids":{"openalex":"https://openalex.org/W3160751182","doi":"https://doi.org/10.1109/jiot.2021.3079916","mag":"3160751182"},"language":"en","primary_location":{"id":"doi:10.1109/jiot.2021.3079916","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2021.3079916","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102960249","display_name":"Christos Xenofontos","orcid":"https://orcid.org/0009-0004-7637-5199"},"institutions":[{"id":"https://openalex.org/I103163165","display_name":"Florida State University","ror":"https://ror.org/05g3dte14","country_code":"US","type":"education","lineage":["https://openalex.org/I103163165"]},{"id":"https://openalex.org/I96673099","display_name":"Technical University of Denmark","ror":"https://ror.org/04qtj9h94","country_code":"DK","type":"education","lineage":["https://openalex.org/I96673099"]}],"countries":["DK","US"],"is_corresponding":false,"raw_author_name":"Christos Xenofontos","raw_affiliation_strings":["Center of Advanced Power Systems, Florida State University, Tallahassee, FL, USA","Department of Applied Mathematics and Computer Science, Richard Petersens Plads, Technical University of Denmark, Lyngby, Denmark"],"raw_orcid":"https://orcid.org/0000-0002-0450-8018","affiliations":[{"raw_affiliation_string":"Center of Advanced Power Systems, Florida State University, Tallahassee, FL, USA","institution_ids":["https://openalex.org/I103163165"]},{"raw_affiliation_string":"Department of Applied Mathematics and Computer Science, Richard Petersens Plads, Technical University of Denmark, Lyngby, Denmark","institution_ids":["https://openalex.org/I96673099"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070079466","display_name":"Ioannis Zografopoulos","orcid":"https://orcid.org/0000-0002-0453-4347"},"institutions":[{"id":"https://openalex.org/I103163165","display_name":"Florida State University","ror":"https://ror.org/05g3dte14","country_code":"US","type":"education","lineage":["https://openalex.org/I103163165"]},{"id":"https://openalex.org/I71920554","display_name":"King Abdullah University of Science and Technology","ror":"https://ror.org/01q3tbs38","country_code":"SA","type":"education","lineage":["https://openalex.org/I71920554"]}],"countries":["SA","US"],"is_corresponding":false,"raw_author_name":"Ioannis Zografopoulos","raw_affiliation_strings":["Center of Advanced Power Systems, Florida State University, Tallahassee, FL, USA","Division of Computer, Electrical and Mathematical Sciences and Engineering, King Abdullah University of Science and Technology, Thuwal, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-0453-4347","affiliations":[{"raw_affiliation_string":"Center of Advanced Power Systems, Florida State University, Tallahassee, FL, USA","institution_ids":["https://openalex.org/I103163165"]},{"raw_affiliation_string":"Division of Computer, Electrical and Mathematical Sciences and Engineering, King Abdullah University of Science and Technology, Thuwal, Saudi Arabia","institution_ids":["https://openalex.org/I71920554"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017966599","display_name":"Charalambos Konstantinou","orcid":"https://orcid.org/0000-0002-3825-3930"},"institutions":[{"id":"https://openalex.org/I103163165","display_name":"Florida State University","ror":"https://ror.org/05g3dte14","country_code":"US","type":"education","lineage":["https://openalex.org/I103163165"]},{"id":"https://openalex.org/I71920554","display_name":"King Abdullah University of Science and Technology","ror":"https://ror.org/01q3tbs38","country_code":"SA","type":"education","lineage":["https://openalex.org/I71920554"]}],"countries":["SA","US"],"is_corresponding":false,"raw_author_name":"Charalambos Konstantinou","raw_affiliation_strings":["Center of Advanced Power Systems, Florida State University, Tallahassee, FL, USA","Division of Computer, Electrical and Mathematical Sciences and Engineering, King Abdullah University of Science and Technology, Thuwal, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-3825-3930","affiliations":[{"raw_affiliation_string":"Center of Advanced Power Systems, Florida State University, Tallahassee, FL, USA","institution_ids":["https://openalex.org/I103163165"]},{"raw_affiliation_string":"Division of Computer, Electrical and Mathematical Sciences and Engineering, King Abdullah University of Science and Technology, Thuwal, Saudi Arabia","institution_ids":["https://openalex.org/I71920554"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045461052","display_name":"Alireza Jolfaei","orcid":"https://orcid.org/0000-0001-7818-459X"},"institutions":[{"id":"https://openalex.org/I99043593","display_name":"Macquarie University","ror":"https://ror.org/01sf06y89","country_code":"AU","type":"education","lineage":["https://openalex.org/I99043593"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Alireza Jolfaei","raw_affiliation_strings":["Department of Computing, Macquarie University, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0001-7818-459X","affiliations":[{"raw_affiliation_string":"Department of Computing, Macquarie University, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I99043593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072011650","display_name":"Muhammad Khurram Khan","orcid":"https://orcid.org/0000-0001-6636-0533"},"institutions":[{"id":"https://openalex.org/I28022161","display_name":"King Saud University","ror":"https://ror.org/02f81g417","country_code":"SA","type":"education","lineage":["https://openalex.org/I28022161"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Muhammad Khurram Khan","raw_affiliation_strings":["Center of Excellence in Information Assurance, King Saud University, Riyadh, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0001-6636-0533","affiliations":[{"raw_affiliation_string":"Center of Excellence in Information Assurance, King Saud University, Riyadh, Saudi Arabia","institution_ids":["https://openalex.org/I28022161"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001746807","display_name":"Kim\u2010Kwang Raymond Choo","orcid":"https://orcid.org/0000-0001-9208-5336"},"institutions":[{"id":"https://openalex.org/I170239107","display_name":"University of South Australia","ror":"https://ror.org/01p93h210","country_code":"AU","type":"education","lineage":["https://openalex.org/I170239107"]},{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["AU","US"],"is_corresponding":false,"raw_author_name":"Kim-Kwang Raymond Choo","raw_affiliation_strings":["Department of Information Systems and Cyber Security, Department of Electrical and Computer Engineering, and Department of Computer Science, University of Texas at San Antonio, San Antonio, TX, USA","UniSASTEM, University of South Australia, Adelaide, SA, Australia"],"raw_orcid":"https://orcid.org/0000-0001-9208-5336","affiliations":[{"raw_affiliation_string":"Department of Information Systems and Cyber Security, Department of Electrical and Computer Engineering, and Department of Computer Science, University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]},{"raw_affiliation_string":"UniSASTEM, University of South Australia, Adelaide, SA, Australia","institution_ids":["https://openalex.org/I170239107"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":13.9494,"has_fulltext":false,"cited_by_count":164,"citation_normalized_percentile":{"value":0.99297248,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"9","issue":"1","first_page":"199","last_page":"221"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7377310991287231},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.677926242351532},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.6055769324302673},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.48718589544296265},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.462027370929718},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.457394003868103}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7377310991287231},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.677926242351532},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.6055769324302673},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.48718589544296265},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.462027370929718},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.457394003868103},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/jiot.2021.3079916","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2021.3079916","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},{"id":"pmh:oai:repository.kaust.edu.sa:10754/669494","is_oa":false,"landing_page_url":"http://hdl.handle.net/10754/669494","pdf_url":null,"source":{"id":"https://openalex.org/S4306401596","display_name":"King Abdullah University of Science and Technology Repository (King Abdullah University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I71920554","host_organization_name":"King Abdullah University of Science and Technology","host_organization_lineage":["https://openalex.org/I71920554"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5799999833106995,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306078","display_name":"U.S. Department of Defense","ror":"https://ror.org/0447fe631"},{"id":"https://openalex.org/F4320306101","display_name":"National Aeronautics and Space Administration","ror":"https://ror.org/027ka1x80"},{"id":"https://openalex.org/F4320310677","display_name":"University of Texas at San Antonio","ror":"https://ror.org/01kd65564"},{"id":"https://openalex.org/F4320311089","display_name":"National Security Agency","ror":"https://ror.org/0047bvr32"},{"id":"https://openalex.org/F4320315501","display_name":"Government of South Australia","ror":"https://ror.org/04g3scy39"},{"id":"https://openalex.org/F4320315885","display_name":"Australian Government","ror":"https://ror.org/0314h5y94"},{"id":"https://openalex.org/F4320320487","display_name":"auDA Foundation","ror":"https://ror.org/00602dv83"},{"id":"https://openalex.org/F4320334714","display_name":"National Drug Law Enforcement Research Fund","ror":"https://ror.org/02swcnz29"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":79,"referenced_works":["https://openalex.org/W62385984","https://openalex.org/W1529728259","https://openalex.org/W1549082862","https://openalex.org/W1562080458","https://openalex.org/W2011166454","https://openalex.org/W2095343582","https://openalex.org/W2095577883","https://openalex.org/W2097156747","https://openalex.org/W2101992994","https://openalex.org/W2104473821","https://openalex.org/W2121544862","https://openalex.org/W2125212367","https://openalex.org/W2149769074","https://openalex.org/W2157852252","https://openalex.org/W2160095256","https://openalex.org/W2182325856","https://openalex.org/W2275343082","https://openalex.org/W2304769060","https://openalex.org/W2320204756","https://openalex.org/W2354520588","https://openalex.org/W2508317201","https://openalex.org/W2515710253","https://openalex.org/W2556954913","https://openalex.org/W2563575697","https://openalex.org/W2564566221","https://openalex.org/W2572193563","https://openalex.org/W2578649485","https://openalex.org/W2604760284","https://openalex.org/W2604813584","https://openalex.org/W2733765803","https://openalex.org/W2740528846","https://openalex.org/W2746386264","https://openalex.org/W2756097445","https://openalex.org/W2764129961","https://openalex.org/W2791258732","https://openalex.org/W2794890550","https://openalex.org/W2796846206","https://openalex.org/W2800306076","https://openalex.org/W2801778313","https://openalex.org/W2803684864","https://openalex.org/W2937619061","https://openalex.org/W2945846547","https://openalex.org/W2964010649","https://openalex.org/W2967794576","https://openalex.org/W2968774960","https://openalex.org/W2968873649","https://openalex.org/W2979346274","https://openalex.org/W2983008824","https://openalex.org/W2984195658","https://openalex.org/W3002422540","https://openalex.org/W3004344782","https://openalex.org/W3011505412","https://openalex.org/W3020927716","https://openalex.org/W3034938050","https://openalex.org/W3042119036","https://openalex.org/W3044855437","https://openalex.org/W3047186623","https://openalex.org/W3048264349","https://openalex.org/W3092207285","https://openalex.org/W3094174376","https://openalex.org/W3099580559","https://openalex.org/W3099618991","https://openalex.org/W3099736358","https://openalex.org/W3108696712","https://openalex.org/W3110885177","https://openalex.org/W3115392585","https://openalex.org/W3117497104","https://openalex.org/W3127371088","https://openalex.org/W3128849487","https://openalex.org/W3131988611","https://openalex.org/W3163838069","https://openalex.org/W4235049501","https://openalex.org/W4248051611","https://openalex.org/W4287661859","https://openalex.org/W4390545436","https://openalex.org/W6675957391","https://openalex.org/W6724375459","https://openalex.org/W6750583632","https://openalex.org/W6782385920"],"related_works":["https://openalex.org/W4311097251","https://openalex.org/W4245926026","https://openalex.org/W2586548817","https://openalex.org/W2625093826","https://openalex.org/W2950174689","https://openalex.org/W4200598720","https://openalex.org/W2921026492","https://openalex.org/W4361251261","https://openalex.org/W3031181660","https://openalex.org/W3155146721"],"abstract_inverted_index":{"Internet":[0],"of":[1,23,29,131,197,206],"Things":[2],"(IoT)":[3],"devices":[4,25,162],"are":[5,71],"becoming":[6],"ubiquitous":[7],"in":[8,58,82,116,164],"our":[9],"lives,":[10],"with":[11],"applications":[12],"spanning":[13],"from":[14],"theconsumerdomain":[15],"tocommercialandindustrialsystems.":[16],"The":[17],"steep":[18],"growth":[19],"and":[20,31,66,85,91,101,109,139,141,168,180,184,200,226],"vast":[21],"adoption":[22],"IoT":[24,61,113,133,161,198],"reinforce":[26],"the":[27,36,50,55,60,128,132,165,173,193,202,211,223],"importance":[28],"sound":[30],"robust":[32],"cybersecurity":[33,156],"practices":[34,93],"during":[35],"device":[37,51,62],"development":[38],"life":[39],"cycles.":[40],"IoT-related":[41,174],"vulnerabilities,":[42,175],"if":[43,74],"successfully":[44],"exploited":[45,149],"can":[46,80,94,147],"affect,":[47],"not":[48,75],"only":[49],"itself":[52],"but":[53],"also":[54],"application":[56],"field":[57],"which":[59,124,146],"operates.":[63],"Evidently,":[64],"identifying":[65],"addressing":[67],"every":[68],"single":[69],"vulnerability":[70],"an":[72,121],"arduous,":[73],"impossible,":[76],"task.":[77],"Attack":[78],"taxonomies":[79],"assist":[81],"classifying":[83],"attacks":[84,108,220],"their":[86],"corresponding":[87,227],"vulnerabilities.":[88],"Security":[89],"countermeasures":[90],"best":[92],"then":[95],"be":[96,148],"leveraged":[97],"to":[98,218],"mitigate":[99],"threats":[100],"vulnerabilities":[102],"before":[103],"they":[104],"emerge":[105],"into":[106,126],"catastrophic":[107],"ensure":[110],"overall":[111],"secure":[112],"operation.":[114],"Therefore,":[115],"this":[117],"article,":[118],"we":[119,171],"provide":[120],"attack":[122,204],"taxonomy,":[123],"takes":[125],"consideration":[127],"different":[129],"layers":[130],"stack,":[134],"i.e.,":[135],"device,":[136],"infrastructure,":[137],"communication,":[138],"service,":[140],"each":[142],"layer\u2019s":[143],"designated":[144],"characteristics,":[145],"by":[150],"adversaries.":[151],"Furthermore,":[152],"using":[153],"nine":[154],"real-world":[155],"incidents":[157,191],"that":[158],"had":[159],"targeted":[160],"deployed":[163],"consumer,":[166],"commercial,":[167],"industrial":[169],"sectors,":[170],"describe":[172],"exploitation":[176],"procedures,":[177],"attacks,":[178],"impacts,":[179],"potential":[181,203],"mitigation":[182],"mechanisms":[183],"protection":[185],"strategies.":[186],"These":[187],"(and":[188],"many":[189],"other)":[190],"highlight":[192],"underlying":[194],"security":[195],"concerns":[196],"systems":[199],"demonstrate":[201],"impacts":[205],"such":[207],"connected":[208],"ecosystems,":[209],"while":[210],"proposed":[212],"taxonomy":[213],"provides":[214],"a":[215],"systematic":[216],"procedure":[217],"categorize":[219],"based":[221],"on":[222],"affected":[224],"layer":[225],"impact.":[228]},"counts_by_year":[{"year":2026,"cited_by_count":16},{"year":2025,"cited_by_count":41},{"year":2024,"cited_by_count":37},{"year":2023,"cited_by_count":37},{"year":2022,"cited_by_count":25},{"year":2021,"cited_by_count":8}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}