# Efficient Secure Routing Mechanisms for the Low-Powered IoT Network: A Literature Review
## 8 Categories of Network Attacks in WSN-IoT Layers
### Network Layer Attacks  
(1) Traffic analysis attacks  
These attacks, such as eavesdropping attacks, rely on what the attacker hears in the network. Furthermore, without getting close to the network, the intruder will sniff confidential information or data flowing to and from the computers. However, the perpetrator must sacrifice the actual data in this attack [56].  
A wormhole attack is when an attacker creates a low-latency connection between two sensor nodes to mislead them, which impacts network routing, and then tunnels packets from one point to another across this link [85].  
RFID spoofing and unauthorized access  
Because of the lack of proper authentication protocols, an attacker can read, alter, or erase data stored on RFID nodes. On the other hand, RFID spoofing entails reading and recording a data transmission from an RFID tag without being detected. When the data is re-sent, the original tag's Tag Identifier (TID) is used, making it appear accurate [86].  
A peer-to-peer network attack is one in which a node executes several identities simultaneously, violating credibility schemes' legitimacy and control. In this case, a single malicious node takes on several roles (known as Sybil nodes) and transfers them around the network [87].  
The routing information attack is a defunct network routing tactic to launch distributed denial of service (DDoS) reflection attacks against several targets, including direct attacks. The attacker spoofs or alters routing information and causes annoyance through events such as routing loops, error messages, and so on [88].  
Man-in-the-middle attack  
The attack happens when an intruder introduces himself into a conversation between a receiver and an application, either to listen in or impersonate one of the participants. An attacker can listen in on or exploit an exchange between two IoT devices to access their private data while making it seem as if the conversation is expected [89].  
Selective forwarding  
In this network attack, malicious nodes fail to facilitate data packets to prevent them from being transmitted to other nodes. All messages sent to other nodes in the network can be altered, dropped, or selectively forwarded by the malicious node. Consequently, the information sent to the intended receiver is inadequate [14].  
Replay attack  
When a cybercriminal listens in on a protected network file, intercepts it, and fraudulently delays or re-sends it to the target, a DDoS assault results. A DoS assault is launched using a distributed strategy. [48].  
The attack in which all packets (control and data) routed through it are dropped by the malicious node. However, it is considered a DoS attack, but in conjunction with a blackhole attack and rank or sinkhole attacks, it becomes exceptionally hazardous [90].  
Denial/distributed denial of service attack  
DDoS is a distributed denial of service (DDoS) attack launched by several sites simultaneously. A DDoS attack makes a web resource inaccessible to visitors by overloading the expected URL with more requests than the server can handle. Unlike a DoS attack, a DDoS attack requires multiple infected nodes to flood a single target with messages or connection requests to slow down or even crash the device server or network resource [91; 92].