## 4 Devices' Vulnerabilities and Requirements
### IoT Attacks
#### 4.5.1 Spoofing Attacks  
A spoofing attack occurs when an attacker gains access to another device or user on a network. The adversary exploits the user's device in addition to launching attacks against network hosts, stealing data, spreading malware, or getting around access controls [65]. In [66], spoofing attacks are distinguished into two types: (i) spoofing in the link layer: the whole communication between the two entities can be spoofed, and (ii) spoofing at the end to end layer: the attacker can counterfeit a certain service. There are different types of spoofing attacks that can be initiated by attackers. Among different types of spoofing attacks, IP address spoofing attacks, ARP spoofing attacks, and DNS server spoofing attacks are some of the most frequent methods discussed here [67]. * IP Address Spoofing Attacks: While a node communicates, it exchanges network data packets, each of which contains several headers for routing and transmission continuity. The 'Source IP Address' header, for example, shows the packet's sender's IP address. In an IP address spoofing attack, an attacker falsifies the content of the origin IP header generally with random numbers in order to disguise itself. Most DDoS malware kits and attack scripts include IP spoofing as a standard feature. In two processes, IP spoofing attacks can make use of network traffic to flood targets. In one process, multiple spoofed addresses can be used to flood a selected target. This approach operates by sending more data to a target than it can manage. In another method, the victim's IP address is spoofed, and packets are being sent from that address to numerous receivers on the network. When other nodes receive the packet, those will send a response to the target's address, and the target will be flooded. Lack of controls against Denial of Service: Services can be targeted in such a way that they \begin{table}
\begin{tabular}{l l l} \hline \hline
**Security Requirements** & **Definition** & **Abbreviations** \\ \hline \multirow{3}{*}{Confidentiality} & The process in which secret and confidential of the on-air and stored information is strictly preserved and only permitted objects or users have access to it. & \multirow{3}{*}{C} \\ \cline{1-1} \multirow{2}{*}{Integrity} & The process in which there is no alternation of data and accuracy is taken care of. & \\ \hline \multirow{2}{*}{Nonrepudiation} & The procedure through which an IoT system verifies an event’s legitimacy and origin. & \multirow{2}{*}{NR} \\ \hline \multirow{3}{*}{Availability} & The process of making sure services are accessible to who needs them, even if there is a power outage or a breakdown. & \multirow{3}{*}{A} \\ \cline{1-1} \multirow{2}{*}{Privacy} & The method by which an IoT system is to access private data by following rules and policies. & \multirow{2}{*}{P} \\ \cline{1-1} \multirow{2}{*}{Auditability} & The process by which an IoT system monitors & \\  & it actions. & \\ \hline \multirow{3}{*}{Accountability} & The mechanism through which IoT system users will be responsible for their actions. & \multirow{3}{*}{AC} \\ \cline{1-1} \multirow{2}{*}{Trustworthiness} & The method through which an IoT system can verify an individual’s identification and establish trust in a third party. & \multirow{3}{*}{TW} \\ \cline{1-1} \cline{3-3}  & & \\ \hline \hline \end{tabular}
\end{table} 
Table 4: IoT Security Requirements. deny service to the entire network or device itself. The surface attack area is device network services for this case [68]. * ARP Spoofing Attacks: ARP (Address Resolution Protocol) is a protocol that translates IP to MAC and vice versa, allowing network communications to reach a particular destination on the network. ARP Spoofing Attacks, also called as ARP Poisoning, involve an attacker sending forged ARP answers over a neighborhood region conducive to getting the IP address of a legitimate member of the network, which will be used to link with the attacker's MAC address.