Understanding the Security Landscape of Control-Data and Non-Control-Data Attacks Against IoT Systems

With the recent tendency of deploying software applications in the edge and the popularity of home-based IoT system deployments there are more IoT devices than ever. Consequently, the exploitation of these devices has become more common. Security researchers have focused on understanding the threat model that targets the data centre or the cloud, but their research has not focused yet on understanding the unique security challenges faced by IoT systems. Our work reviews the state-of-the-art exploitation techniques as well as the proposed defences, classifies IoT devices to better understand their threat model, and performs a security analysis of the devices based on their specific threat models.