## 4 Devices' Vulnerabilities and Requirements
### Classification of IoT Security Attacks on Different Layers of IoT Networks
#### 4.6.3 Network Attacks  
These attacks are focused on the network of IoT systems to extract large amounts of data remotely [97]. * Traffic Analysis Attacks: Unlike eavesdropping attacks, the attacker does not need to compromise the original data, whereas the attacker listens to the network to gain some information using sniffing applications such as port scan, packet sniff, etc. Like eavesdropping attacks, in a traffic analysis attack, the adversary hears the communication flow of the network to analyze traffic to find critical nodes' locations, the routing diagram, and even application patterns of behavior. Once an attacker reveals the required information, s/he can accurately host attacks like jamming, eavesdropping, sybil, etc., [126; 127]. * RFID Cloning: Making a replica of a user's RFID without knowledge is another way to overthrow RFID access systems. Even without accessing physically to the RFID \begin{table}
\begin{tabular}{p{56.9 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Encryption Attacks** & **Compromised Security Requirements** & **Effects** & **Countermeasures** \\ \hline Man In The Middle Attack & C, I, P, NR & Extract critical network information [102] & Encryption of the RFID communication medium, authentication techniques [96] \\ \hline Side-Channel Attacks & C, AU, NR, P & Secret key [84] & Shielding [122], Adding randomized delay [123], Randomization [124], Blocking, isolation, sleep instruction, kill command, tamper proofing and self-destruction, lowering information leakage, obfuscating methods \\ \hline Cryptanalysis Attacks & ALL & Encryption Key & Ultra-lightweight cryptography algorithm (SLIM) [125] \\ \hline \hline \end{tabular}
\end{table} 
Table 7: Encryption attacks with compromised security goals and countermeasures. card, an intruder can clone an RFID tag by copying data from the victim's RFID tag onto another RFID tag [96]. The attacker can get the information and write the data to a similar blank RFID using off-the-shelf components by standing several feet away [128]. The integrity of the system will be violated as cloning results circulation of identical tags. * RFID Spoofing: Unlike RFID cloning, in an RFID spoofing attack, an attacker does not physically replicate an RFID tag. Technically, cloning and spoofing attacks are made back-to-back. In this type of attack, an adversary impersonates a valid RFID tag to gain its privileges, reads, and records a data communication from an RFID tag. The attacker can obtain complete control of the system by posing as a legitimate source and sending his own data that includes the authentic tag ID. Spoofing attacks take place when a hacker successfully makes a position as an authorized user in the system [96,129]. * RFID Unauthorized Access: Different levels of security features can be available in RFID. If proper authentication mechanisms are not deployed in the RFID system, tags can be accessed by an attacker. The attacker can simply read, edit, or even destroy data on the RFID devices for his own gains. The attacker needs to execute complicated steps if strong level security measures such as access to the backend are required to retrieve the necessary credentials [130]. * Man In the Middle Attack: A perpetrator positions himself in an interface between two sensors, collecting private data and invading privacy by eavesdropping or impersonating one of the clients so that it looks like a normal information flow is taking place. The goal of this attempt is to obtain personal information that can be utilized for a variety of things, such as identity theft, unauthorized financial transfers, or unauthorized password changes. This attack relies exclusively on an IoT system's network communication protocols. Therefore, physical presence is not necessary [94,131,132]. * Denial of Service: To carry out a successful denial of service attack, the attacker floods the IoT network with a large number of requests, resulting in a significant quantity of data traffic; this continues until the target cannot respond or simply crashes.