Towards a Multilayer Strategy against Attacks on IoT Environments

The Internet of Things market has seen a large growth in numbers in the recent past. With it, security is becoming a usual concern among consumers. By taking as a starting point an already existing categorization of typical IoT attacks grouped by TCP/IP network layers, we did a non-exhaustive search of solutions addressing each attack. We found that solutions are typically focused on a single layer or even a specific attack only. Furthermore, these solutions lack flexibility to incorporate new attacks. To avoid the non-practical approach of having multiple non-extensible tools, this paper presents an ongoing work that focuses on a multilayer approach to IoT threats. The proposed system leverages an autonomic architecture to analyze network traffic in a distributed manner, detecting suspicious behavior with preconfigured rules being applied by a Complex Event Processing (CEP) engine.