# A Review on Internet of Things for Defense and Public Safety
## 4 Operational Requirements
### Security Capabilities  
Security is a paramount challenge that needs to be addressed at every level of IoT, from the high volume of endpoint devices that gather data and execute tasks, to cloud-based control systems through network infrastructure [35]. Several protection mechanisms and Electronic Protection Measures (EPM) features have been identified within TRANSEC such as Low Probability of Interception (LPI) (e.g., secure PN-sequence generators to prevent easy sequence estimation, scrambling of transmission data and control information), Low Probability of Detection (LPD) (e.g., frequency hopping and spread-spectrum techniques) and Anti-Jamming (AJ), INFOSEC (e.g., NATO Level 3 security including IP security protocols (IPSec/HAIPE) as well as IP tunneling protocols), COMSEC and NETSEC capabilities. Privacy issues and profile access operations between IoT devices without interference are critical. IoT nodes require a variety of widely-used and well-established security mechanisms (e.g., SSL, IPSec, PKI) that perform numerous computationally intensive cryptographic operations [96]. The use of smaller cryptographic key sizes is examined in [97]. Sensitive data needs a transparent and easy access control management. Several proposals can be used, such as grouping devices, or present only the desired devices within each virtual network. Another approach is to support access control in the application layer on a per-vendor basis. Relevant projects that estimate the network location of objects to perform context-aware services are reviewed in [98]. Current methods for location estimation are based on IP. However, Named Data Networking (NDN) is one of the candidates for naming infrastructure in the future Internet [99]. Military equipment can be subject to either interference, sabotage, potential manipulation or disruption of data flows between different units, resulting either in service interruptions, intrusions, propagation of misinformation, or misleading the COP on the needs of support units. These failures in equipment can compromise both intelligent gathering and planned operations having obvious mission and life-threatening consequences. For example, inadequately secured networks can provide the enemy with intelligence (location, deployment), allowing the adversary to anticipate movements of forces. Furthermore, security vulnerabilities could allow enemies to take control or disable automated systems, preventing workforce from carrying out their mission, or even using their own assets against them. Next, we describe the main security challenges:  
* Device and network security: the potential of IoT is derived to a large extent from the ubiquity of devices and applications, and the connections between them. This myriad of links creates a massive number of potential entry points for cyber-attackers. The systems also depend on  
Figure 9: Mobility components and their security. backbone storage and processing functions, which can include other potential vulnerabilities. One of the ways to enhance the security of a complex network is to limit the number of nodes that an attacker can access from any given entry point. This approach conflicts with IoT, which generates much of its value from the integration of different systems. Securing a broad range of devices is also difficult. Many of them have limited capacity with no human interface and depend on real-time integration of data. This complicates traditional approaches to security, like multi-factor authentication or advanced encryption, which can hinder the exchange of data on the network, requiring more computing power on devices, or needing human interaction. * Insider misuse: cyber risks and insider threats are a challenge for large organizations. A single mistake from a single user can allow an attacker to gain access to the system. * Electronic warfare: most technologies communicate wirelessly on radio frequencies. Adversaries can use jamming techniques to block those signals making the devices unable to communicate with backbone infrastructure.