# Privacy Framework for the Development of IoT-Based Systems
## 6 Proposal of Privacy Guidelines
### Proposal
#### 6.3.2 Proposal Part 2: Balancing Security and Performance in IoTS  
Designing privacy-aware IoTS often involves a delicate trade-off between ensuring strong security and maintaining acceptable performance. Many IoT devices operate with limited computational resources, making it important to choose encryption methods that provide adequate protection without overloading the system [29]. In this section, we explore how lightweight and more robust encryption techniques can be applied in practice, based on insights from recent studies. These considerations are incorporated into our framework to ensure it remains both secure and practically efficient in real-world IoT environments.  
Traditional Internet communication typically relies on faster, more secure wired or wireless methods, whereas IoT nodes face significant challenges due to their limited resources and the complexity of wireless protocols. These nodes often lack an operating system, and their data formats vary depending on the specific application. Many IoT systems also collect large amounts of personal data, often controlling physical environments. Unlike traditional devices, which benefit from robust security measures, the decentralized nature of IoT networks makes them inherently more vulnerable to security threats. To mitigate these challenges, IoT systems must implement lightweight and scalable security protocols that can operate effectively within the constraints of these resource-limited devices [42].  
As part of our investigation into selecting appropriate lightweight cryptographic algorithms for IoT applications, a comprehensive review of recent studies was conducted. These studies classified and compared cryptographic algorithms from various perspectives, reflecting the multifaceted nature of IoT environments and their diverse security requirements. For instance, [PERSON] et al. [43] adopted a classification based on the communication layer perspective, such as the transport and network layers. Their study highlighted critical issues, such as the high energy consumption required by the ECC algorithm, which poses challenges for energy-constrained IoT devices.  
[PERSON] et al. [44] presented a detailed great classification and comparison of lightweight block ciphers based on performance and resource-efficiency parameters. Building on their work, Table 5 offers a summary of the most relevant lightweight block ciphers currently in use. The study assessed these algorithms using well-established evaluation criteria, including structure, block size, key size, key space, time complexity, CPU clock cycles (cycles per block), code size, RAM usage, cipher type, and overall security strength.  
This domain-specific classification provides a strong foundation for identifying candidate cryptographic algorithms appropriate for different IoT domains based on structural and theoretical criteria. However, practical evaluation is crucial to confirm real-world performance. A recent benchmarking study [45] evaluated 122 lightweight cryptographic algorithms on metrics like code size, memory use, speed, and energy consumption. Results showed similar code size and ROM usage across platforms, but Raspberry Pi outperformed others significantly in RAM usage, processing speed, and energy efficiency. These benchmarking results complement the theoretical classification by offering practical insights into how lightweight ciphers perform on real IoT platforms. Such empirical evaluation is crucial for making informed decisions about cryptographic algorithm selection, ensuring both security and efficiency in resource-constrained IoT environments.