## 4 Devices' Vulnerabilities and Requirements
### Classification of IoT Security Attacks on Different Layers of IoT Networks
#### 4.6.3 Network Attacks
\begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Network Attacks** & **Compromised Security Requirements** & **Effects** & **Countermeasures** \\ \hline RFID Unauthorized Access & ALL & Data manipulation [97], Data Modification (Read, Write, Delete) & Authentication, Field detectors, Shift data to the backend [96], Arbitrator over the Universal Software Radio Peripheral (USRP) platform [150], Control circuit to notify and software [151] \\ \hline Man In the Middle Attack & C, I, P, NR & Data Privacy violation, source integrity [152] & Encryption, Secure channel, Authentication protocol, Multidimensional plausibility check [132], Radio frequency fingerprint technology [153] \\ \hline Denial of Service & P, A & Network Flooding, Network Crash & One-way hash chain [154], Policies provided by providers \\ \hline Sinkhole Attack & A, C, I & Routing protocol [155], Data alteration or leakage & Watchdog scheme, pathrater scheme [156], Geographic routing protocol [155], Radial bias function [108], Attribute-based access control and trust-based behavioral tracking [157],IDS solution, parent fail-over, identity certificates, and a rank authentication scheme \\ \hline Routing Information Attacks & I, NR & Routing Loops & Authentication, localized encryption and authentication protocol (LEAP) [156], Sink-based intrusion detection system [158] \\ \hline Sybil Attack & C, I, AC, NR, P & Multi-path routing [156], Unfair resource allocation, Redundancy & Radio resource testing and random key distribution [156], Rule-based anomaly detection system [159], ID-based public keys [160], Attribute-based access control and trust-based behavioral tracking [157], Artificial bee colony (ABC) of honey bees [139], Classification-based Sybil detection (BCSD) \\ \hline Replay Attack & ALL & Network congestion, DoS & Key agreement based on ECC, PUF, Hash etc [161], Gaussian-tag-embedded physical-layer authentication (GTEA) framework using a weighted fractional Fourier transform (WFRFT) [162], A challenge and response technique, the time-based or counter-based mechanism \\ \hline HELLO flood attack & C, I, AC, NR, P, A & Advertise fake route, Routing protocol [156], Resource consumption [163] & Link-layer metric as a feature in the determination of the default path, limit size of connections [110], Amalgamation the merits of probability-based and location-based flooding algorithms [164], Deep learning [163] \\ \hline Blackmail attack & C, I, P, NR & Isolation of legitimate device [143] & Deep learning [165], Authentication mechanism \\ \hline Blackhole Attack & C, I, AC, NR, P & Drop packets [156] & Multiple routing path [110], Attribute-based access management and trust-based behavioral tracking [157], Ad-hoc on-demand distance vector (AODV) with encryption [166], Proactive reputation updating algorithm and a reputation-based probabilistic forwarding strategy [167] \\ \hline Wormhole attack & C, I, AC, NR, P & Routing protocol [155], Delete files and documents [84], Packet tunneling & packet leash [156], Markle tree authentication, binding geographic information, Geographic routing protocol [155], Increment of alternative routing path and reduce timeout duration [144] \\ \hline Grayhole attack & C, I, AC, NR, P & Packet drop [145] & Multiple routing path [110], Acknowledgment count [168], Overhear the transmission of neighbor node for failure detection framework [169], Multihop communication [145] \\ \hline \hline \end{tabular}
\end{table} 
Table 8: _Cont._