# Securing the Future of Web-Enabled IoT: A Critical Analysis of Web of Things Security
## 3 Related Works  
Here, we review the existing literature on security enumeration for the Web of Things. This review focuses on identifying key contributions and findings from recent studies to provide a comprehensive overview of the current state of security of the WoT. Although most of the work found in the literature focuses on secure architectures for the IoT, these studies provide a foundational basis for developing secure WoT architectures. At the end of the section, we summarize a comparison of the WoT security frameworks in Table 1.  
Authors in [8] explored the privacy challenges in the IoT, emphasizing the need for a comprehensive privacy framework. They discuss the inadequac  
current legislation in addressing the unique characteristics of IoT environments. Their work highlights privacy principles and guidelines aimed at enhancing user trust and ensuring data protection. This study underscores the importance of a holistic and adaptable privacy framework, providing valuable insights that can inform the development of secure WoT architectures. The authors in [4] provided a comprehensive review of security, privacy, and trust in the IoT, identifying various vulnerabilities and proposing general security mechanisms. They categorize threats and outline security challenges across different IoT application domains, including smart cities and healthcare. However, their work primarily focuses on the IoT rather than the WoT, and while it highlights significant threats, it does not offer a detailed enumeration of architectural threats. Further, the authors in [39] conducted a survey on security in smart homes, a critical component of the WoT ecosystem. They analyzed security challenges specific to smart home applications and proposed various countermeasures to mitigate these threats. Despite providing a thorough examination of security issues, their work did not systematically map these threats to specific architectural components, which is essential for understanding the propagation of attacks and implementing effective defenses. Authors in [40] analyzed security issues specific to the WoT, identifying potential threats and vulnerabilities. They provided an extensive survey of existing security challenges, open problems, and potential research directions in WoT environments. Their study is a notable contribution, offering a broad overview of WoT security issues. However, it lacks a detailed architectural framework for threat enumeration, which is crucial for understanding how attacks can propagate through a WoT system and where defenses should be implemented. A security architecture for 5G networks is presented by [38], which shares similarities with the WoT in terms of complexity and the need for robust security mechanisms. They categorized threats by type, such as misuse of resources and malicious insiders, providing a broad overview of potential security issues. However, their work lacked the granularity needed for an architectural perspective, which is necessary for effectively addressing the unique challenges of the WoT. The authors of [41] addressed the security and privacy issues in WoT communication protocols, identifying several vulnerabilities and proposing potential countermeasures. Their focus on communication protocols provides valuable insights, especially concerning data transmission security in WoT environments. However, their study did not extend to a comprehensive enumeration of architectural threats, leaving a gap in understanding how these vulnerabilities affect the overall WoT system architecture. Our work differs by offering a systematic enumeration of threats directly tied to the WoT architecture, using UML models to provide a clear and structured approach. This detailed mapping allows for the precise identification of vulnerabilities within specific components and layers of the WoT system, facilitating the design of targeted defenses. Additionally, we reviewed significant references on security patterns and their application in WoT environments.