## 2 Basic Concept
### IoT Security and Privacy Challenges  
Within the broader scope of cybersecurity, IoT security is a specialized area with a focus on safeguarding, overseeing, and mitigating threats associated with the Internet of Things. IoT is characterized as a network encompassing a diverse set of interconnected devices, allowing for the collection, storage, and exchange of data over the Internet. The IoT has brought numerous advantages for users, including increased convenience, efficiency, and connectivity. However, there are some challenges associated with it. Considering that many components of the IoT have serious weaknesses in security due to limitations such as power and low energy, many security challenges in this field have been discussed by security researchers. Thanks to the Internet of Things, an extensive amount of devices (billions of devices) have successfully accessed the Internet and generated numerous data points where the primary demand is security. With so many Internet-connected devices, the potential for cyber-attacks rises, making it crucial for users to take steps to protect their privacy and security when using IoT devices. Because of the growing frequency of network attacks, cybersecurity and privacy component threats have become major concerns for security researchers and professionals. These threats pose significant challenges for both commercial and public organizations. Common cybersecurity attacks have exposed the inherent weaknesses of IoT technologies, highlighting the need for stronger security measures to protect against these threats. One of the main reasons for the vulnerabilities in IoT devices is that their networks and users have access to the anonymous and untrustworthy Internet and can establish their communications on this open and insecure platform. This can make it easier for cybercriminals to exploit vulnerabilities in these devices and access sensitive data without proper permission. It is very important for all users of a network to be aware of these types of network risks and to take the necessary security measures to protect privacy when using the advantages of the network or network devices. The new infrastructure and communication platform of the Internet of Things requires new and effective security solutions to increase the security of its entities [16; 17; 18; 19; 20; 21; 22; 23; 24; 25]. Unfortunately, typical network users do not pay enough attention to the impact of security on preserving their information and privacy. They often do not understand its importance until a security breach occurs. This lack of attention can lead to major damages, such as the loss of critical data on the network. Due to the multitude of available methods for network penetration and the existence of security vulnerabilities, consumers are increasingly inclined towards weak security measures. Considering the inherent vulnerability of the IoT to various security threats, there is an authentic risk related to the exposure of information or economic detriment if necessary security precautions are not diligently implemented [17; 18]. Many attacks have compromised the safety measures for IoT components and made them vulnerable [19; 20]. Physical attacks and eavesdropping due to the use of wireless communication media are among the vulnerabilities of this network. Additionally, the components of the IoT have restricted computational capacity, which necessitates the need for security algorithms with low computational costs. On the other hand, authentication within the IoT is of paramount importance. This sub-network is exposed to various vulnerabilities and stands as one of the most critical aspects of ensuring security in numerous applications. The presence of a robust authentication mechanism can safeguard the network against hazards, including Denial of Service (DoS) attacks and replay attacks.