# From Bottom of Sea to Space: Quo Vadis IoT? So What About Security?
## 3 Security Challenges and Mechanisms
### IoT on the Ground
#### 3.2.2 Extensions with Applications in Transportation
Quantum computing is a growing technology that raises concerns in most facets of cybersecurity. This could allow for solving some major cryptography problems in polynomial time. The authors of [145] propose a quantum-defended scheme that uses a novel certificateless data authentication protocol. The scheme is protected from quantum attacks using lattice-based cryptography. The use of this in conjunction with a blockchain allows the scheme to be secure while being more energy efficient and storage efficient than other methods for lightweight use in IoV. To maintain the safety of the IoV, communication is happening constantly between vehicles and the infrastructure. This makes authentication important to the integrity of the system. To create a system that is able to keep the identity and location of a vehicle separate while allowing the authentication of the vehicle, the authors of [146] propose a conditional anonymous authentication method. The system uses a third party, called tracer, to allow for the scheme to reveal malicious vehicles falsely authenticating. The scheme uses group signatures and pseudonyms to allow for a tracer to strongly identify malicious actors. For the authentication portion of the scheme, the authors propose a privacy-preserving authentication method that works in tandem with the third party tracer scheme to block abusive behavior on the network. The scheme uses multiple tracers when revealing a vehicle's identity in order to prevent the wrongful reveal of a trusted user on the network. The scheme uses a tracing key in a distributed manner that makes it impossible for a single tracer to reveal a vehicle. Through testing, the scheme was proven to be abuse-resistant and secure against malicious attackers. * Fraud Detection Fraud detection has ample uses in IoV. In [147], the authors propose a spatio-temporal cost combination-based framework. This can be used in the detection of fraud in taxi driving. When the taxi first connects to the network, a predicted trajectory is created to determine the route the taxi would typically take. This is then used with a statistical model that is based off of three elements: time of travel, distribution trajectory, and the cost of travel. The real-time data are then collected and used to create graphs that can be monitored for abnormalities against the predicted statistical model. This is an example of an outlier detection algorithm being used to find a fraudulent actor in a network. * Encryption SDNs are widely used in network management systems. The authors of [148] have previously presented a routing protocol that is able to use road-side units (RSU) in ad hoc networks for vehicles to route communications [149]. The authors upgrade the previous work with a scheme they call SURFER. The scheme takes advantage of the SDN architecture as well as a blockchain of RSUs to more efficiently route packages. The authors implement the scheme in two different ways. The first method is to utilize SURFER entirely inside the RSU network. This is similar to the previous work in all instances of communication except for infrastructure-to-infrastructure communication. The second method is to utilize the SURFER within the entire IoV network. This is a different communication method than the previous work. Each of the SURFER methods was proven to be effective through testing in the security and management of packet communication. SURFER-1 has a lower overall control overhead, traffic flow, and packet loss than SURFER-2, but the overall performance remains similar. With everything becoming connected into the infrastructure of IoV, security is becoming a big concern to the safety of these large scale networks. For this to be possible, much of the communication must happen over open channels. The authors of [150] propose a method using a blockchain-assisted certificateless key agreement protocol. As discussed in previously mentioned schemes, the authentication agreement happens with the cluster head and then with an RSU in order to establish secret keys.