Repository logo

Twenty security considerations for cloud-supported Internet of Things

Accepted version

Repository DOI



Change log


Singh, Jatinder 
Pasquier, Thomas 
Bacon, Jean 
Ko, Hajoon 
Eyers, David 


To realise the broad vision of pervasive computing, underpinned by the “Internet of Things” (IoT), it is essential to break down application and technology-based silos and support broad connectivity and data sharing; the cloud being a natural enabler. Work in IoT tends towards the subsystem, often focusing on particular technical concerns or application domains, before offloading data to the cloud. As such, there has been little regard given to the security, privacy and personal safety risks that arise beyond these subsystems; that is, from the wide-scale, crossplatform openness that cloud services bring to IoT. In this paper we focus on security considerations for IoT from the perspectives of cloud tenants, end-users and cloud providers, in the context of wide-scale IoT proliferation, working across the range of IoT technologies (be they things or entire IoT subsystems). Our contribution is to analyse the current state of cloud-supported IoT to make explicit the security considerations that require further work.



Internet of Things, Cloud, Security, Privacy, Data

Journal Title

IEEE Internet of Things Journal

Conference Name

Journal ISSN


Volume Title


Engineering and Physical Sciences Research Council (EP/K011510/1)
This work was supported by UK Engineering and Physical Sciences Research Council grant EP/K011510 CloudSafetyNet: End-to-End Application Security in the Cloud and Microsoft through the Microsoft Cloud Computing Research Centre.