## 3 Literature Survey  
IoT-based critical infrastructures are subject to a wide variety of cyberattacks, particularly massive cyberattacks, which are orchestrated stealthily through IoT botnets [39]. Thus, the greatest issue in IoT is cybersecurity because the consequences of cyberattacks can have significant impacts. A previous study [40] discussed security and privacy issues related to the implementation of the wireless body area network. In Reference [41], the authors provided an overview of potential risks to healthcare data. The study was based on quantitative analysis methods of historical data related to security incidents. Furthermore, in Reference [42], the authors described IoT threats and vulnerabilities in the healthcare context, and the authors of [43] reviewed the most recent security and privacy solutions offered in the IoT. They specifically discussed benefits that can improve security and privacy in the IoT relative to flexibility and scalability, as well as blockchain and Software-Defined Networking (SDN) technologies. In addition, they presented a general classification of attacks and threats. The International Medical Informatics Association investigated data protection in healthcare networked systems [44], and the ISO/TS18308 standard defines the privacy and security issues for electronic health records [45]. The authors of [46] discussed the vulnerabilities faced by the edge-side layer of the IoT. The authors of [47] presented a study on cyber security problems for smart grid. The study is focused on security requirements, network vulnerabilities, security protocols, some countermeasures, and future research directions to secure smart grid. In [48], the authors discussed the potential threats for cyber-physical systems and proposed a matrix classification of threats based on four elements (attack type, attack impact, attack intent and attack incident). The authors of [49] focused on security threats of SCADA systems, software and hardware vulnerabilities, and potential points of attack occurred on SCADA architecture. In [50], the authors developed a survey on security control and attack detection inside cyber physical system. Three types of attack were discussed in this work namely: denial of service attacks, replay attacks and deception attacks. The authors of [51] reviewed the vulnerability assessment of SCADA systems, focusing on several aspects such as asset discovery, vulnerabilities and threats identification, attack mitigation and the presentation of main risks related to confidentiality. The work in [52] focused on the main threats, protection measures in terms of legal, technical and organizational aspect, as well as the cyberattacks attribution. The authors of [53] have investigated the cyber security issues related to CPS. An analysis of the different methods, approaches and tools are presented in order to highlight some cyber security features related to critical infrastructure. Vulnerability is seen as a weakness that can be exploited in IoT devices, mobile applications, firmware, operating systems, industrial equipment, medical devices, networks, people and business processes. A threat is the potential to exploit a vulnerability or a failure. In this regards, many researchers proposed different solutions. In [54], the authors review the cybersecurity risks of critical infrastructures such as supervisory control and data acquisition (SCADA) systems in the IoT environment. They provided security management strategies to beef up the security of SCADA networks. An overview of IoT reference model and related security concerns are reviewed as well. In addition, vulnerabilities of SCADA systems as well as risk assessment approaches and risk management strategies to help mitigate vulnerabilities and threats are also examined. In [55], the authors presented a comprehensive survey on attacks, security issues and blockchain as solution for IoT and IIoT. The survey attempts to classify the attacks based on the objects of vulnerability.