Advancing IoT Security: Cryptographic Enhancements and Open Challenges

Jawaher Abdulwahab Fadhil; Marwan  Aziz Mohammed

doi:10.21271/ZJPAS.37.5.7

Authors

Jawaher Abdulwahab Fadhil 1 Department of Information Technology, Technical College of Informatics, Duhok Polytechnic University, Duhok, Kurdistan Region, Iraq. 2 Department of Information Technology, Technical College of Informatics- Akre, Akre University for Applied Sciences, Duhok, Kurdistan Region, Iraq.
Marwan Aziz Mohammed 3Software Engineering Department, College of Engineering, Salahaddin University-Erbil, Kurdistan Region – F.R. Iraq 4Department of Computer Engineering, College of Engineering, Knowledge University, Erbil 44001, Iraq

DOI:

https://doi.org/10.21271/ZJPAS.37.5.7

Keywords:

Cybersecurity, Internet of Things, cryptographic algorithms, privacy challenges, enhancement strategies.

Abstract

The tremendous increase of data produced by Internet of Things (IoT) networks emphasizes how important to have robust security mechanisms in place to guarantee authenticity, integrity, and confidentiality. Due to inherent limitations of IoT devices, like limited memory, computing power, and energy consumption, they are particularly vulnerable to security threats and attacks. This paper comprehensively surveys possible cryptographic solutions to enhance IoT cybersecurity, discusses cryptographic algorithm classification, implementation problems, and performance parameters in the IoT ecosystem. This study explores common cryptographic optimization techniques using meta-heuristic algorithms (MHA), machine learning (ML), and blockchain (BC). A taxonomy of emerging technology solutions was demonstrated based on IoT security issues. Additionally, the paper explores cryptographic improvement challenges in the IoT environment with possible solutions.

References

ABDLRAZAQ, A. A., AZZEZ, S. N., ANWER, & M.A. AND HASSEN, S. I. 2023. Proposed Solutions for the Main Challenges and Security Issues in IoT Smart Home Technology. Zanco Journal of Pure and Applied Sciences, 35, 84–96.

AHAKONYE, L. A. C., NWAKANMA, C. I. & KIM, D. S. 2024. Tides of Blockchain in IoT Cybersecurity. Sensors, 24.

AHMED, A. A. & BARUKAB, O. M. 2022. Unforgeable Digital Signature Integrated into Lightweight Encryption Based on Effective ECDH for Cybersecurity Mechanism in Internet of Things. Processes, 10.

AIYSHWARIYA DEVI, R. & ARUNACHALAM, A. R. 2023. Enhancement of IoT device security using an Improved Elliptic Curve Cryptography algorithm and malware detection utilizing deep LSTM. High-Confidence Computing, 3.

AL SHAHRANI, A. M., RIZWAN, A., SÁNCHEZ-CHERO, M., ROSAS-PRADO, C. E., SALAZAR, E. B. & AWAD, N. A. 2022. An Internet of Things (IoT)-Based Optimization to Enhance Security in Healthcare Applications. Mathematical Problems in Engineering, 2022.

ALI, A., ALMAIAH, M. A., HAJJEJ, F., PASHA, M. F., FANG, O. H., KHAN, R., TEO, J. & ZAKARYA, M. 2022. An Industrial IoT-Based Blockchain-Enabled Secure Searchable Encryption Approach for Healthcare Systems Using Neural Network. Sensors, 22.

ALI, A. S. & HASAN, D. S. 2023. An iot-based smart airport check-in system via three-factor authentication (3fa). Zanco Journal of Pure and Applied Sciences, 35, 1–13.

ALIZADEHSANI, R., ROSHANZAMIR, M., IZADI, N. H., GRAVINA, R., KABIR, H. M. D., NAHAVANDI, D., ALINEJAD-ROKNY, H., KHOSRAVI, A., ACHARYA, U. R., NAHAVANDI, S. & FORTINO, G. 2023. Swarm Intelligence in Internet of Medical Things: A Review. Sensors, 23.

ALZUBI, J. A., ALZUBI, O. A., BESEISO, M., BUDATI, A. K. & SHANKAR, K. 2022. Optimal multiple key-based homomorphic encryption with deep neural networks to secure medical data transmission and diagnosis. Expert Systems, 39.

ANNAMALAI, C., VIJAYAKUMARAN, C., PONNUSAMY, V. & KIM, H. 2023. Optimal ElGamal Encryption with Hybrid Deep-Learning-Based Classification on Secure Internet of Things Environment. Sensors, 23.

ARYA, L., SHARMA, Y. K., KUMAR, R., PADMANABAN, H., DEVI, S. & TYAGI, L. K. Maximizing IoT Security: An Examination of Cryptographic Algorithms. 2023 International Conference on Power Energy, Environment and Intelligent Control, PEEIC 2023, 2023. Institute of Electrical and Electronics Engineers Inc., 1548–1552.

ASLAN, Ö., AKTUĞ, S. S., OZKAN-OKAY, M., YILMAZ, A. A. & AKIN, E. 2023. A Comprehensive Review of Cyber Security Vulnerabilities, Threats, Attacks, and Solutions. Electronics (Switzerland). MDPI.

AZROUR, M., MABROUKI, J., GUEZZAZ, A. & KANWAL, A. 2021. Internet of Things Security: Challenges and Key Issues. Security and Communication Networks. Hindawi Limited.

BABU, M. R. & K.N.VEENA 2021. Implementing optimized classifier for distributed attack detection and BAIT-based attack correction in IoT. International Journal of Systems Assurance Engineering and Management.

BADR, A. M., FOURATI, L. C., AYED, S. & MUDHEHER BADR, A. 2023. An Improved GIFT Lightweight Encryption Algorithm to Protect Medical Data In IoT. 1–7.

BAKHSH, S. A., KHAN, M. A., AHMED, F., ALSHEHRI, M. S., ALI, H. & AHMAD, J. 2023. Enhancing IoT network security through deep learning-powered Intrusion Detection System. Internet of Things (Netherlands), 24.

BEDOUI, M., BOUALLEGUE, B., M. AHMED, A., HAMDI, B., MACHHOUT, M., MAHMOUD & KHATTAB, M. 2023. A Secure Hardware Implementation for Elliptic Curve Digital Signature Algorithm. Computer Systems Science and Engineering, 44, 2177–2193.

CHANAL, P. M. & KAKKASAGERI, M. S. 2020. Security and Privacy in IoT: A Survey. Wireless Personal Communications. Springer.

CHERBAL, S., ZIER, A., HEBAL, S., LOUAIL, L. & ANNANE, B. 2024. Security in internet of things: a review on approaches based on blockchain, machine learning, cryptography, and quantum computing. Journal of Supercomputing, 80, 3738–3816.

CORTHIS, P. B., RAMESH, G. P., GARCÍA-TORRES, M. & RUÍZ, R. 2024. Effective Identification and Authentication of Healthcare IoT Using Fog Computing with Hybrid Cryptographic Algorithm. Symmetry, 16.

DURAISAMY, A., SUBRAMANIAM, M. & ROBIN, C. R. R. 2021. An Optimized Deep Learning Based Security Enhancement and Attack Detection on IoT Using IDS and KH-AES for Smart Cities. Studies in Informatics and Control, 30, 121–131.

EL-SOFANY, H., EL-SEOUD, S. A., KARAM, O. H. & BOUALLEGUE, B. 2024. Using machine learning algorithms to enhance IoT system security. Scientific Reports, 14.

GAJENDRAN, S., MUTHUSAMY, R., RAVI, K., CHANDRAUMAKANTHAM, O. & MARAPPAN, S. 2024. Elliptic Crypt With Secured Blockchain Assisted Federated Q-Learning Framework for Smart Healthcare. IEEE Access, 12, 45923–45935.

GIANNOUTAKIS, K. M., SPATHOULAS, G., FILELIS-PAPADOPOULOS, C. K., COLLEN, A., ANAGNOSTOPOULOS, M., VOTIS, K. & NIJDAM, N. A. A Blockchain Solution for Enhancing Cybersecurity Defence of IoT. Proceedings - 2020 IEEE International Conference on Blockchain, Blockchain 2020, 2020/11// 2020. Institute of Electrical and Electronics Engineers Inc., 490–495.

GURUPRAKASH, J. & KOPPU, S. 2020. EC-ElGamal and Genetic Algorithm-Based Enhancement for Lightweight Scalable Blockchain in IoT Domain. IEEE Access, 8, 141269–141281.

HAMDARE, S., KAIWARTYA, O., ALJAIDI, M., JUGRAN, M., CAO, Y., KUMAR, S., MAHMUD, M., BROWN, D. & LLORET, J. 2023. Cybersecurity Risk Analysis of Electric Vehicles Charging Stations. Sensors. Multidisciplinary Digital Publishing Institute (MDPI).

HASAN, M. K., SHAFIQ, M., ISLAM, S., PANDEY, B., BAKER EL-EBIARY, Y. A., NAFI, N. S., CIRO RODRIGUEZ, R. & VARGAS, D. E. 2021. Lightweight Cryptographic Algorithms for Guessing Attack Protection in Complex Internet of Things Applications. Complexity, 2021.

JAWED, M. S. & SAJID, M. A Swarm Intelligence-based Faster and Secure Algorithm for Improved Industrial IoT-Cloud Computing Communication. 2024 ASU International Conference in Emerging Technologies for Sustainability and Intelligent Systems, ICETSIS 2024, 2024. Institute of Electrical and Electronics Engineers Inc., 1299–1303.

KALYANI, G. & CHAUDHARI, S. 2020. An efficient approach for enhancing security in Internet of Things using the optimum authentication key. International Journal of Computers and Applications, 42, 306–314.

KATHAMUTHU, N. D., CHINNAMUTHU, A., IRUTHAYANATHAN, N., RAMACHANDRAN, M. & GANDOMI, A. H. 2022. Deep Q‐Learning‐Based Neural Network with Privacy Preservation Method for Secure Data Transmission in Internet of Things (IoT) Healthcare Application. Electronics (Switzerland), 11.

KHAN, S., SINGH, R., KHAN, S. & NGAH, A. H. 2023. Unearthing the barriers of Internet of Things adoption in food supply chain: A developing country perspective. Green Technologies and Sustainability, 1, 100023–100023.

KUMARI, S., TULSHYAN, V. & TEWARI, H. 2024. Cyber Security on the Edge: Efficient Enabling of Machine Learning on IoT Devices. Information, 15, 126–126.

KURESHI, R. R. & MISHRA, B. K. 2022. A Comparative Study of Data Encryption Techniques for Data Security in the IoT Device. Lecture Notes in Electrical Engineering. Springer Science and Business Media Deutschland GmbH.

LALEM, F., LAOUID, A., KARA, M., AL-KHALIDI, M. & ELEYAN, A. 2023. A Novel Digital Signature Scheme for Advanced Asymmetric Encryption Techniques.

LATURKAR, K. & LATURKAR, K. 2023. Internet of things: Architectures, applications, and challenges. Handbook of Research on Data Science and Cybersecurity Innovations in Industry 4.0 Technologies. IGI Global.

M, S. S. H., AKSHAYA, V., MANDALA, V., ANILKUMAR, C., VISHNURAJA, P. & AARTHI, R. 2023. Security enhancement and attack detection using optimized hybrid deep learning and improved encryption algorithm over Internet of Things. Measurement: Sensors, 30.

MAHMOOD, M. S. & AL DABAGH, N. B. 2023. Blockchain technology and internet of things: review, challenge and security concern. International Journal of Electrical and Computer Engineering, 13, 718–735.

MAKARENKO, I., SEMUSHIN, S., SUHAI, S., AHSAN KAZMI, S. M., ORACEVIC, A. & HUSSAIN, R. A Comparative Analysis of Cryptographic Algorithms in the Internet of Things. 2020 International Scientific and Technical Conference Modern Computer Network Technologies (MoNeTeC), 2020/10// 2020. IEEE, 1–8.

MEHTA, K., SINGH, H., KUMAR, Y. & SIDHU, H. S. 2020. Cryptographic Algorithms for Secure Internet of Things. International Journal of Control and Automation, 13, 1010–1018.

MIRANI, A. A., VELASCO-HERNANDEZ, G., AWASTHI, A. & WALSH, J. 2022. Key Challenges and Emerging Technologies in Industrial IoT Architectures: A Review. Sensors, 22, 5836–5836.

MOHAMMED, M. A. & WAHAB, H. B. A. 2024. Enhancing IoT Data Security with Lightweight Blockchain and Okamoto Uchiyama Homomorphic Encryption. Computer Modeling in Engineering & Sciences, 138, 1731–1748.

MOHAN, M., KAVITHADEVI, M. K. & JEEVAN PRAKASH, V. Improved ElGamal Cryptosystem for Secure Data Transfer in IoT Networks. Proceedings of the 4th International Conference on IoT in Social, Mobile, Analytics and Cloud, ISMAC 2020, 2020/10// 2020. Institute of Electrical and Electronics Engineers Inc., 295–302.

MOUSAVI, S. K., GHAFFARI, A., BESHARAT, S. & AFSHARI, H. 2021a. Improving the security of internet of things using cryptographic algorithms: a case of smart irrigation systems. Journal of Ambient Intelligence and Humanized Computing, 12, 2033–2051.

MOUSAVI, S. K., GHAFFARI, A., BESHARAT, S. & AFSHARI, H. 2021b. Security of internet of things based on cryptographic algorithms: a survey. Wireless Networks, 27, 1515–1555.

NEWROZ, N. A. 2024. Generating of A Dynamic and Secure S-Box for AES Block Cipher System Based on Modified Hexadecimal Playfair Cipher. Zanco Journal of Pure and Applied Sciences, 36, 82–94.

NGABO, D., WANG, D., IWENDI, C., ANAJEMBA, J. H., AJAO, L. A. & BIAMBA, C. 2021. Blockchain-based security mechanism for the medical data at fog computing architecture of internet of things. Electronics (Switzerland), 10.

OBAIDAT, M. A., OBEIDAT, S., HOLST, J., AL HAYAJNEH, A. & BROWN, J. 2020. A Comprehensive and Systematic Survey on the Internet of Things: Security and Privacy Challenges, Security Frameworks, Enabling Technologies, Threats, Vulnerabilities and Countermeasures. Computers, 9, 44–44.

OZKAN-OKAY, M., AKIN, E., ASLAN, O., KOSUNALP, S., ILIEV, T., STOYANOV, I. & BELOEV, I. 2024. A Comprehensive Survey: Evaluating the Efficiency of Artificial Intelligence and Machine Learning Techniques on Cyber Security Solutions. IEEE Access, 12, 12229–12256.

PEREIRA, G. C. C. F., ALVES, R. C. A., DA SILVA, F. L., AZEVEDO, R. M., ALBERTINI, B. C. & MARGI, C. B. 2017. Performance evaluation of cryptographic algorithms over IoT platforms and operating systems. Security and Communication Networks, 2017.

PRABHAKARAN, V. & KULANDASAMY, A. 2021. Hybrid semantic deep learning architecture and optimal advanced encryption standard key management scheme for secure cloud storage and intrusion detection. Neural Computing and Applications, 33, 14459–14479.

RADHAKRISHNAN, I., JADON, S. & HONNAVALLI, P. B. 2024. Efficiency and Security Evaluation of Lightweight Cryptographic Algorithms for Resource-Constrained IoT Devices. Sensors, 24.

RAHMAN, Z., YI, X., BILLAH, M., SUMI, M. & ANWAR, A. 2022. Enhancing AES Using Chaos and Logistic Map-Based Key Generation Technique for Securing IoT-Based Smart Home. Electronics (Switzerland), 11.

RANJAN, A. K. & KUMAR, P. 2024. Ensuring the privacy and security of IoT-medical data: a hybrid deep learning-based encryption and blockchain-enabled transmission. Multimedia Tools and Applications.

RESHI, I. A. & SHOLLA, S. 2022. Challenges for Security in IoT, Emerging Solutions, and Research Directions. International Journal of Computing and Digital Systems, 12, 1231–1241.

SADHU, P. K., YANAMBAKA, V. P. & ABDELGAWAD, A. 2022. Internet of Things: Security and Solutions Survey. Sensors, 22, 7433–7433.

SAINI, A. & SEHRAWAT, R. 2024. Enhancing Data Security through Machine Learning-based Key Generation and Encryption. Engineering, Technology and Applied Science Research, 14, 14148–14154.

SALEH, M., JHANJHI, N., ABDULLAH, A. & SAHER, R. IoTES (A Machine learning model) Design dependent encryption selection for IoT devices. International Conference on Advanced Communication Technology, ICACT, 2022. Institute of Electrical and Electronics Engineers Inc., 239–246.

SARKER, V. K., GIA, T. N., TENHUNEN, H. & WESTERLUND, T. Lightweight Security Algorithms for Resource-constrained IoT-based Sensor Nodes. IEEE International Conference on Communications, 2020/6// 2020. Institute of Electrical and Electronics Engineers Inc.

SATYANARAYANA, P., SRIRAMDAS, N., MADHAVI, B., ARUN, M., PHANI SAI KUMAR, N. V. & GOKULA KRISHNAN, V. Enhancement of Security in IoT Using Modified AES Algorithm for IoT Applications. International Conference on Sustainable Communication Networks and Application, ICSCNA 2023 - Proceedings, 2023. Institute of Electrical and Electronics Engineers Inc., 380–386.

SILVA, C., CUNHA, V. A., BARRACA, J. P. & AGUIAR, R. L. 2024. Analysis of the Cryptographic Algorithms in IoT Communications. Information Systems Frontiers, 26, 1243–1260.

SINGH, S., SHARMA, P. K., MOON, S. Y. & PARK, J. H. 2024. Advanced lightweight encryption algorithms for IoT devices: survey, challenges and solutions. Journal of Ambient Intelligence and Humanized Computing, 15, 1625–1642.

THABIT, F., CAN, O., ALJAHDALI, A. O., AL-GAPHARI, G. H. & ALKHZAIMI, H. A. 2023. Cryptography Algorithms for Enhancing IoT Security. Internet of Things, 22, 100759–100759.

THAKOR, V. A., RAZZAQUE, M. A. & KHANDAKER, M. R. A. 2021. Lightweight Cryptography Algorithms for Resource-Constrained IoT Devices: A Review, Comparison and Research Opportunities. IEEE Access, 9, 28177–28193.

TIDREA, A., KORODI, A. & SILEA, I. 2023. Elliptic Curve Cryptography Considerations for Securing Automation and SCADA Systems. Sensors, 23.

TSANTIKIDOU, K. & SKLAVOS, N. 2022. Hardware Limitations of Lightweight Cryptographic Designs for IoT in Healthcare. Cryptography, 6, 45–45.

VELLIANGIRI, S., MANOHARN, R., RAMACHANDRAN, S., VENKATESAN, K., RAJASEKAR, V., KARTHIKEYAN, P., KUMAR, P., KUMAR, A. & DHANABALAN, S. S. 2022. An Efficient Lightweight Privacy-Preserving Mechanism for Industry 4.0 Based on Elliptic Curve Cryptography. IEEE Transactions on Industrial Informatics, 18, 6494–6502.

VELMURUGADASS, P., DHANASEKARAN, S., SHASI ANAND, S. & VASUDEVAN, V. Enhancing Blockchain security in cloud computing with IoT environment using ECIES and cryptography hash algorithm. Materials Today: Proceedings, 2020. Elsevier Ltd, 2653–2659.

WILLIAMS, P., DUTTA, I. K., DAOUD, H. & BAYOUMI, M. 2022. A survey on security in internet of things with a focus on the impact of emerging technologies. Internet of Things, 19, 100564–100564.

ZHANG, L. & WANG, L. 2024. A hybrid encryption approach for efficient and secure data transmission in IoT devices. Journal of Engineering and Applied Science, 71.

ZHOU, W., JIA, Y., PENG, A., ZHANG, Y. & LIU, P. 2019. The effect of IoT new features on security and privacy: New threats, existing solutions, and challenges yet to be solved. IEEE Internet of Things Journal, 6, 1606–1616.

ZHOU, X., XU, K., WANG, N., JIAO, J., DONG, N., HAN, M. & XU, H. 2021. A Secure and Privacy-Preserving Machine Learning Model Sharing Scheme for Edge-Enabled IoT. IEEE Access, 9, 17256–17265.