## 4 Security and Privacy Countermeasures and Solutions in EC-Based IoT
\begin{table}
\begin{tabular}{p{142.3 pt} p{284.5 pt}} \hline \hline
**Fundamental** & **Definition** \\ \hline Confidentiality & To ensure that information is only available or disclosed to unauthorized individuals, entities, or processes Integrity & To ensure that information is accurate and complete without any manipulation by unauthorized people Availability & To ensure that information and services are accessible and usable when requested by an authorized entity Accountability \\ Accountability & An individual is responsible for proper authority for their actions \\ Nonrepudiation & To be able to prove the occurrence of a claimed event or action \\ Trust & To be able to provide confidence to others of the qualifications, capabilities, and reliability of that entity to perform specific tasks and fulfill assigned responsibilities \\ Privacy & To ensure that the confidentiality of, and access to, certain information is protected \\ \hline \hline \end{tabular}
\end{table} 
Table 3: Security principles. analysis; therefore, it provides real time and precise protections. HD-IDS is mainly for detecting traffic injection attacks. Another approach is called the real-time traffic monitoring system (RTMS) [125], which thoroughly inspects data packets and matches the SQLI pattern in the IDS database to form signature rules, avoiding the workload of manually writing signature rules. The RTMS detects traffic injection attacks more efficiently. This approach mainly updates the traffic injection signature rules through historical attack data analysis, which requires relatively low real-time requirements for rule updates. 5. _Cryptographic schemes_ are strong and efficient encryption countermeasure strategies that are used to secure communication protocols against different attacks, such as eavesdrop dropping or routing attacks. There is a wide variety of encryption/decryption strategies that can enhance network security and privacy [126, 127, 128], but these solutions are applicable for wired networks. Since EC nodes are usually small sensors with limited resources, e.g., battery power, computing/processing capabilities, and storage memory, employing standard encryption/decryption techniques will cause high memory usage, delay, and power consumption [92, 98, 105]. The architectures and ideas of several key cryptosystems, such as proxy encryption, attribute-based encryption, searchable encryption, identity-based encryption, and homomorphic encryption, have been explored by [PERSON] et al. [108]. The work in [129] proposes a secure data-sharing scheme for IoT based on EC smart devices. The proposed scheme uses both public key and secret key encryptions. Moreover, a searching strategy is presented that enables authorized users to perform secure data searches within shared, encrypted, and stored data in IoT based on EC networks without leaking data, secret keys, or keywords. An architecture based on the data proxy concept has been presented in [130] that applies process knowledge to enable security via abstraction and also privacy via remote data fusion. 6. In the EC-based IoT environment, entities are required to be authenticated mutually with one another across different trust domains. There are _authentication_ mechanisms such as single/cross-domain and handover authentication. These mechanisms are discussed in detail in [8, 32, 98, 105, 108, 111, 131]. 7. _Accounting (auditing)_ is collecting network activity data to be able to effectively analyze the security of a network and respond to security incidents. For networks with strict security policies, all attempts to achieve authentication and authorization by any person should be included in audit data. Logging \"anonymous\" or \"guest\" access to public servers is especially important. All attempts by users to modify their access rights should also be logged in the data. More information about the collected data in accounting can be found in [120].