IoT Security Frameworks: A Comparative Review with a Focus on Privacy

The privacy of sensitive data within the Internet of Things (IoT) is at risk due to potential privacy violations. These violations can occur through illegal access by external entities, as well as inadvertent disclosures or intentional attacks by those within the system who exceed their authorized access privileges. Furthermore, there needs to be more control experienced by data owners regarding their sensitive data as it transitions from their domain to other entities within the Internet of Things (IoT) ecosystem. Numerous methods have been presented in the academic literature over the past few years to effectively tackle the privacy concerns associated with the Internet of Things (IoT). This paper aims to classify existing literature by organizing it according to the specific technology or technique employed to safeguard privacy. The classification encompasses four primary areas of privacy solutions, specifically, solutions based on encryption, solutions based on identity management, solutions based on policy enforcement, and solutions focused on self-protection. The paper examines various state-of-the-art solutions within each category. It begins by providing a broad comparison between these solutions and our work. Subsequently, it focuses on a specific comparison of the privacy objectives of the offered PEFM solutions.