{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T22:06:12Z","timestamp":1783029972561,"version":"3.54.6"},"reference-count":29,"publisher":"MDPI AG","issue":"11","license":[{"start":{"date-parts":[[2023,10,26]],"date-time":"2023-10-26T00:00:00Z","timestamp":1698278400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"\u201c100% discount\u201d","award":["\u201c100% discount\u201d"],"award-info":[{"award-number":["\u201c100% discount\u201d"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Symmetry"],"abstract":"<jats:p>The Internet of Things (IoT) is rapidly growing and is projected to develop in future years. The IoT connects everything from Closed Circuit Television (CCTV) cameras to medical equipment to smart home appliances to smart automobiles and many more gadgets. Connecting these gadgets is revolutionizing our lives today by offering higher efficiency, better customer service, and more effective goods and services in a variety of industries and sectors. With this anticipated expansion, many challenges arise. Recent research ranked IP cameras as the 2nd highest target for IoT attacks. IoT security exhibits an inherent asymmetry where resource-constrained devices face attackers with greater resources and time, creating an imbalanced power dynamic. In cybersecurity, there is a symmetrical aspect where defenders implement security measures while attackers seek symmetrical weaknesses. The SILEX malware case highlights this asymmetry, demonstrating how IoT devices\u2019 limited security made them susceptible to a relatively simple yet destructive attack. These insights underscore the need for robust, proactive IoT security measures to address the asymmetrical risks posed by adversaries and safeguard IoT ecosystems effectively. In this paper, we present the IoT vulnerabilities, their causes, and how to detect them. We focus on SILEX, one of the famous malware that targets IoT, as a case study and present the lessons learned from this malware.<\/jats:p>","DOI":"10.3390\/sym15111978","type":"journal-article","created":{"date-parts":[[2023,10,27]],"date-time":"2023-10-27T03:33:51Z","timestamp":1698377631000},"page":"1978","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":35,"title":["IoT Vulnerabilities and Attacks: SILEX Malware Case Study"],"prefix":"10.3390","volume":"15","author":[{"given":"Basem Ibrahim","family":"Mukhtar","sequence":"first","affiliation":[{"name":"School of Information Technology and Computer Science, Nile University, Cairo 12566, Egypt"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2416-7481","authenticated-orcid":false,"given":"Mahmoud Said","family":"Elsayed","sequence":"additional","affiliation":[{"name":"School of Computer Science, University College Dublin, D04 V1W8 Dublin, Ireland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2705-1823","authenticated-orcid":false,"given":"Anca D.","family":"Jurcut","sequence":"additional","affiliation":[{"name":"School of Computer Science, University College Dublin, D04 V1W8 Dublin, Ireland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8068-5120","authenticated-orcid":false,"given":"Marianne A.","family":"Azer","sequence":"additional","affiliation":[{"name":"School of Information Technology and Computer Science, Nile University, Cairo 12566, Egypt"},{"name":"Computers and Systems Department, National Telecommunication Institute, Cairo 12677, Egypt"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2023,10,26]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"113292","DOI":"10.1109\/ACCESS.2021.3103725","article-title":"Recent security trends in internet of things: A comprehensive survey","volume":"9","author":"Harbi","year":"2021","journal-title":"IEEE Access"},{"key":"ref_2","unstructured":"Sikder, A.K., Petracca, G., Aksu, H., Jaeger, T., and Uluagac, A.S. (2018). A survey on sensor-based threats to internet-of-things (iot) devices and applications. arXiv."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"109094","DOI":"10.1016\/j.comnet.2022.109094","article-title":"A value-added IoT service for cellular networks using federated learning","volume":"213","author":"Mian","year":"2022","journal-title":"Comput. Netw."},{"key":"ref_4","first-page":"1","article-title":"Internet of things (IoT) security intelligence: A comprehensive overview, machine learning solutions, and research directions","volume":"14","author":"Sarker","year":"2022","journal-title":"Mob. Netw. Appl."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"09722629221074760","DOI":"10.1177\/09722629221074760","article-title":"Cyber Security: A Review of Cyber Crimes, Security Challenges and Measures to Control","volume":"17","author":"Verma","year":"2022","journal-title":"Vision"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Almaraz-Rivera, J.G., Perez-Diaz, J.A., and Cantoral-Ceballos, J.A. (2022). Transport and application layer DDoS attacks detection to IoT devices by using machine learning and deep learning models. Sensors, 22.","DOI":"10.3390\/s22093367"},{"key":"ref_7","unstructured":"En, S.X., Ling, L.S., and Hao, F.C. (2021). Honeypots for Internet of Things Research: An Effective Mitigation Tool. Preprints, 2021090461."},{"key":"ref_8","unstructured":"(2023, September 24). IoT Under Fire: Kaspersky Detects More than 100 Million Attacks on Smart Devices in H1 2019. Available online: https:\/\/www.kaspersky.com\/about\/press-releases\/2019_iot-under-fire-kaspersky-detects-more-than-100-million-attacks-on-smart-devices-in-h1-2019."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Abdullahi, M., Baashar, Y., Alhussian, H., Alwadain, A., Aziz, N., Capretz, L.F., and Abdulkadir, S.J. (2022). Detecting Cybersecurity Attacks in the Internet of Things Using Artificial Intelligence Methods: A Systematic Literature Review. Electronics, 11.","DOI":"10.3390\/electronics11020198"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s42400-021-00077-7","article-title":"A critical review of intrusion detection systems in the internet of things: Techniques, deployment strategy, validation strategy, attacks, public datasets, and challenges","volume":"4","author":"Khraisat","year":"2021","journal-title":"Cybersecurity"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"163","DOI":"10.3390\/iot2010009","article-title":"Cyber threats to industrial IoT: A survey on attacks and countermeasures","volume":"2","author":"Tsiknas","year":"2021","journal-title":"IoT"},{"key":"ref_12","unstructured":"Lee, Y., Lee, W., Shin, G., and Kim, K. (2017). Advanced Multimedia and Ubiquitous Engineering: MUE\/FutureTech, Springer."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Anirudh, M., Thileeban, S.A., and Nallathambi, D.J. (2017, January 10\u201311). Use of honeypots for mitigating DoS attacks targeted on IoT networks. Proceedings of the 2017 International Conference on Computer, Communication and Signal Processing (ICCCSP), Chennai, India.","DOI":"10.1109\/ICCCSP.2017.7944057"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Deogirikar, J., and Vidhate, A. (2017, January 10\u201311). Security attacks in IoT: A survey. Proceedings of the 2017 International Conference on I-SMAC (IoT in Social, Mobile, Analytics and Cloud) (I-SMAC), Palladam, India.","DOI":"10.1109\/I-SMAC.2017.8058363"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Seralathan, Y., Oh, T.T., Jadhav, S., Myers, J., Jeong, J.P., Kim, Y.H., and Kim, J.N. (2018, January 11\u201314). IoT security vulnerability: A case study of a Web camera. Proceedings of the 2018 20th International Conference on Advanced Communication Technology (ICACT), Chuncheon, Republic of Korea.","DOI":"10.23919\/ICACT.2018.8323686"},{"key":"ref_16","unstructured":"Favaretto, M., Tran Anh, T., Kavaja, J., De Donno, M., and Dragoni, N. (2020). Proceedings of 6th International Conference in Software Engineering for Defence Applications: SEDA 2018, Springer International Publishing."},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Silhavy, R. (2019). Software Engineering Methods in Intelligent Algorithms. CSOC 2019. Advances in Intelligent Systems and Computing, Springer.","DOI":"10.1007\/978-3-030-19807-7"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"17","DOI":"10.1109\/MCE.2019.2953740","article-title":"Consumer IoT: Security vulnerability case studies and solutions","volume":"9","author":"Alladi","year":"2020","journal-title":"IEEE Consum. Electron. Mag."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Rajendran, G., Nivash, R.S.R., Parthy, P.P., and Balamurugan, S. (2019, January 1\u20133). Modern security threats in the Internet of Things (IoT): Attacks and Countermeasures. Proceedings of the 2019 International Carnahan Conference on Security Technology (ICCST), Chennai, India.","DOI":"10.1109\/CCST.2019.8888399"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Valente, J., Koneru, K., and Cardenas, A. (2019, January 8\u201313). Privacy and Security in Internet-Connected Cameras. Proceedings of the 2019 IEEE International Congress on Internet of Things (ICIOT), Milan, Italy.","DOI":"10.1109\/ICIOT.2019.00037"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Krishna, R.R., Priyadarshini, A., Jha, A.V., Appasani, B., Srinivasulu, A., and Bizon, N. (2021). State-of-the-art review on IoT threats and attacks: Taxonomy, challenges, and solutions. Sustainability, 13.","DOI":"10.3390\/su13169463"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"100795","DOI":"10.1016\/j.iot.2023.100795","article-title":"Data acquisition and monitoring system framed in Industrial Internet of Things for PEM hydrogen generators","volume":"22","author":"Folgado","year":"2023","journal-title":"Internet Things"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Ahmed, Y.A., Huda, S., Al-rimy, B.A.S., Alharbi, N., Saeed, F., Ghaleb, F.A., and Ali, I.M. (2022). A Weighted Minimum Redundancy Maximum Relevance Technique for Ransomware Early Detection in Industrial IoT. Sustainability, 14.","DOI":"10.3390\/su14031231"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Dhirani, L.L., Armstrong, E., and Newe, T. (2021). Industrial IoT, Cyber Threats, and Standards Landscape: Evaluation and Roadmap. Sensors, 21.","DOI":"10.3390\/s21113901"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"168825","DOI":"10.1109\/ACCESS.2020.3022842","article-title":"IoT Vulnerability Assessment for Sustainable Computing: Threats, Current Solutions, and Open Challenges","volume":"8","author":"Anand","year":"2020","journal-title":"IEEE Access"},{"key":"ref_26","first-page":"27","article-title":"Analysis of Vulnerabilities of IoT-Devices and Methods of Their Elimination","volume":"2021","author":"Liashenko","year":"2021","journal-title":"Comput. Linguist. Intell. Syst."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"El-Gendy, S., and Azer, M.A. (2020, January 15\u201316). Security Framework for Internet of Things (IoT). Proceedings of the 2020 15th International Conference on Computer Engineering and Systems (ICCES), Cairo, Egypt.","DOI":"10.1109\/ICCES51560.2020.9334589"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1109\/MCE.2020.3024512","article-title":"Tsiropoulou EE. Artificially intelligent electronic money","volume":"10","author":"Fragkos","year":"2020","journal-title":"IEEE Consum. Electron. Mag."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"ElKashlan, M., and Azer, M. (2020, January 15\u201316). Mitigating IoT Security Challenges Using Blockchain. Proceedings of the 2020 15th International Conference on Computer Engineering and Systems (ICCES), Cairo, Egypt.","DOI":"10.1109\/ICCES51560.2020.9334644"}],"container-title":["Symmetry"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2073-8994\/15\/11\/1978\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T21:12:21Z","timestamp":1760130741000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2073-8994\/15\/11\/1978"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,26]]},"references-count":29,"journal-issue":{"issue":"11","published-online":{"date-parts":[[2023,11]]}},"alternative-id":["sym15111978"],"URL":"https:\/\/doi.org\/10.3390\/sym15111978","relation":{},"ISSN":["2073-8994"],"issn-type":[{"value":"2073-8994","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,10,26]]}}}