Logic Bugs in IoT Platforms and Systems: A Review

TL;DR

This paper reviews recent logic bugs and vulnerabilities specific to IoT platforms, highlighting the increased complexity and unique security challenges in IoT systems compared to traditional networked systems.

Contribution

It provides a comprehensive review of 17 logic bugs and one weakness across seven vulnerability categories in IoT platforms, offering insights into IoT-specific security issues.

Findings

Identified 17 logic bugs in IoT systems

Categorized vulnerabilities into seven groups

Highlighted the complexity and security challenges of IoT

Abstract

In recent years, IoT platforms and systems have been rapidly emerging. Although IoT is a new technology, new does not mean simpler (than existing networked systems). Contrarily, the complexity (of IoT platforms and systems) is actually being increased in terms of the interactions between the physical world and cyberspace. The increased complexity indeed results in new vulnerabilities. This paper seeks to provide a review of the recently discovered logic bugs that are specific to IoT platforms and systems. In particular, 17 logic bugs and one weakness falling into seven categories of vulnerabilities are reviewed in this survey.