IEEE Consumer Electronics Magazine - January/February 2024 - 13

unprecedented data acquisition and exchange
among diverse peer devices enables the integration
of cyber and physical world, and enhances
decision-making processes.
Nevertheless, such benefits also imply providing
the involved devices with security. If the security
of any component becomes compromised, a
data leak may cause serious privacy threats,
enable surveillance, bring about material losses,
or even jeopardize people's lives. For instance, a
smart home equipped with intelligent devices'
control (the most common consumer IoT application
nowadays4), could be compromised and
then start switching devices ON and OFF intermittently,
which could burn individual components
or even short circuit the house, leading to disastrous
consequences. Another example would be
a tampered control of an autonomous driving car
in an intelligent transport system, which can
cause vehicles to crash. Besides financial loss, a
security flaw can lead to the violation of data privacy
and, in the worst cases, it may even incur
physical damage to living beings. Therefore,
there is a need to understand the underpinning
security risks, and the new requirements and
challenges in the design of IoT systems and consumer
applications. In particular, the trust
aspects of the communication among IoT devices
are of a paramount importance,5-9 due the challenge
of managing each device individually,
which are potentially exposed to a variety of risky
and compromised networks, especially in the
context of applications that present an ultrareliability
requirement.
In accordance with the Yan et al.'s work6 and
Arabsorkhi et al.'s work,10
establishing trust
between IoT devices is challenging and includes
fundamental aspects, such as belief, integrity, reliability,
and availability, among others. In particular,
there are difficulties that still persist for IoT
consumers, such as the lack of information about
devices management, how their personal data are
stored, how their privacy is sustained, and how
they can identify security vulnerabilities on their
gadgets.4,11,12 All these issues hinder the adoption
of IoT and impact the trust about it.
Specifically, in terms of trust, there is a variety
of definitions for this concept (as described inYan
et al.'s,6 Arabsorkhi et al.'s,10
and Saputra's13
work), which are inherited from the user's
January/February 2024
context to IoT devices. In fact, trust is a complex
conception yet with no consensus in the community.
Meanwhile, we consider that the trust concept
for IoT should comprise at least four
aspects, namely, identity assurance, network
behavior, data integrity, and protection aspects.
In the next coming years, a lot more connected
devices are expected to exist than nowadays.1
Taking into account the potential increase of the
attack surface on the Internet, which will result
from the huge quantity of connected appliances,
the focus of this article is concentrated on the
issues and challenges related to security and trust
in the context of consumer IoT applications. In
addition, by considering the approach introduced
in Macedo et al.'s work,14 we propose to measure
the trust in IoT devices by using a two-level
approach that is based on information from the
network traffic behavior of IoT devices, and from
the application layer, which stands for the
devices' reputation.Oneadvantage of such a strategy
is the use of data obtained from two different
perspectives, which provide more information to
continuouslymonitor and establish trust between
devices. The characteristics of low level (network
perspective) and high level (application perspective)
compose a comprehensive trust metric,
capable of capturing changes in the acting of devices
and isolating those presenting unexpected
misbehavior. Another advantage is to stipulate an
initial trust value when the communicating devices
do not know each other beforehand and, consequently,
do not have a history of interactions in
order to infer about trust. We envision that our
approach is mainly applied in IoT applications in
which devices primarily rely on device-to-device
communication.
The following is a summary of the main ideas
developed and presented in this article.
We discuss the concept of trust and its
importance in the context of consumer IoT.
We point out the issues and challenges to
provide trust in such environments.
We argue that trust models should involve
more than one level of information gathering
to compound a trust metric.
We outline potential future research works.
We propose a trust model and show how it
correctly captures the intended aspects.
13
IEEE Consumer Electronics Magazine - January/February 2024

Table of Contents for the Digital Edition of IEEE Consumer Electronics Magazine - January/February 2024
