@article {IonnaisPanosMihalisAlcarazLopez2018, title = {Survey of IoT-enabled Cyberattacks: Assessing Attack Paths to Critical Infrastructures and Services}, journal = { IEEE Communications Surveys and Tutorials}, volume = {20}, year = {2018}, month = {07/2018}, pages = {3453-3495}, publisher = {IEEE}, abstract = {

As the deployment of Internet of Things (IoT)\ is experiencing an exponential growth, it is no surprise that\ many recent cyber attacks are IoT-enabled: The attacker initially\ exploits some vulnerable IoT technology as a first step towards\ compromising a critical system that is connected, in some way,\ with the IoT. For some sectors, like industry, smart grids,\ transportation and medical services, the significance of such\ attacks is obvious, since IoT technologies are part of critical backend\ systems. However, in sectors where IoT is usually at the enduser\ side, like smart homes, such attacks can be underestimated,\ since not all possible attack paths are examined. In this paper\ we survey IoT-enabled cyber attacks, found in all application\ domains since 2010. For each sector, we emphasize on the latest,\ verified IoT-enabled attacks, based on known real-world incidents\ and published proof-of-concept attacks. We methodologically\ analyze representative attacks that demonstrate direct, indirect\ and subliminal attack paths against critical targets. Our goal is\ threefold: (i) To assess IoT-enabled cyber attacks in a risk-like\ approach, in order to demonstrate their current threat landscape;\ (ii) To identify hidden and subliminal IoT-enabled attack paths\ against critical infrastructures and services, and (iii) To examine\ mitigation strategies for all application domains.

}, keywords = {Critical Infrastructures, Cyber Attacks, Intelligent Transportation Systems, Internet of Things, SCADA, Smart grids, Smart Home, Smart Medical Systems}, issn = {1553-877X}, doi = {https://doi.org/10.1109/COMST.2018.2855563}, url = {https://ieeexplore.ieee.org/document/8410404}, author = {Ioannis Stellios and Panayiotis Kotzanikolaou and Mihalis Psarakis and Cristina Alcaraz and Javier Lopez} }