Cryptographic and discrete approaches to IoT cybersecurity : A risk management and security analysis
Ashish Tiwaridr.ashish.tiwari89@bbdnitm.ac.inDepartment of Computer Science and EngineeringBabu Banarasi Das Institute of Technology and ManagementLucknow, Uttar Pradesh, 226028, IndiaView full profile → , Shivani Guptashivani.gupta@vit.ac.inSchool of Computer Science and Engineering (SCOPE)Vellore Institute of Technology (VIT)Chennai, Tamil Nadu, 600127, IndiaView full profile → , Archana Sandhuarchana.sandhu@mmumullana.comM. M. Institute of Computer Technology and Business ManagementMaharishi Markandeshwar (Deemed to be University)Mullana-Ambala, Haryana, 133207, IndiaView full profile → , P. S. G. Aruna SriDepartment of Internet of ThingsKoneru Lakshmaiah Education Foundation (Deemed to be University)Vaddeswaram, Andhra Pradesh, 522501, IndiaView full profile → , Harwant Singh Arrihsarri@gmail.comDepartment of Computer Science and EngineeringLovely Professional UniversityPhagwara, Punjab, 144411, IndiaView full profile → , *Manmohan SharmaCorresponding authormanmohan.sharma@jaipur.manipal.eduDepartment of Computer Science and EngineeringManipal University JaipurJaipur, Rajasthan, 303007, IndiaView full profile →
* Corresponding author · click or hover a name for details
- Received:
- 01 Jan 2026
- Published Online:
- 14 Aug 2026
- Article type:
- Research Article
- Language:
- EN
- Article no.:
- JDMSC-2747
- Pages:
- 3207–3217
Abstract
Internet of Things (IoT) systems have experienced tremendous growth in all spheres of life that require a high level of security like smart cities, health, industrial automation, and smart transportation, which has resulted in a swelling of the cybersecurity threat spectrum. IoT environments may not be well covered by traditional security mechanisms because the devices are heterogeneous, have a small amount of computational resources, and are deployed in large scale and distributed. The literature review and risk management analysis of cryptographic and discrete approaches to cybersecurity of IoT is presented in this paper. The research methodologically analyzes lightweight cryptographic primitives, key administration protocols, authentication protocols as well as secure communication mechanisms specific to resource-constrained IoT devices. Simultaneously, discrete methods, such as graph theory, discrete event modeling, finite state machines, and combinatorial optimization, are discussed in terms of their usefulness in modeling attack surfaces, intrusion detection, trust management, and security policy enforcement. The paper also examines the IoT cyber risks by geographically mapping the various threats identified against the vulnerabilities and security controls using the current solutions, which reveals gaps between the identified vulnerabilities and the current solutions. According to the review, a formal risk management framework is addressed to facilitate a secure design of an IoT system, mitigate threats, and make decisions. The results highlight that the combination of cryptographic security and discrete modeling approaches can be used to increase resilience, scalability, and flexibility to changing cyber threats. The article is an informative resource to the researcher and practitioners interested in developing effective and resilient security solutions of next-generation IoT systems.
Keywords
Subject Classifications
References
[1] L. Atzori, A. Iera, and G. Morabito, “The Internet of Things: A survey,” Comput. Netw., vol. 54, no. 15, pp. 2787-2805 (Oct. 2010).
[2] A. Gubbi, R. Buyya, S. Marusic, and M. Palaniswami, “Internet of Things (IoT): A vision, architectural elements, and future directions,” Future Gener. Comput. Syst., vol. 29, no. 7, pp. 1645-1660 (Sep. 2013).
[3] R. Roman, J. Zhou, and J. Lopez, “On the features and challenges of security and privacy in distributed Internet of Things,” Comput. Netw., vol. 57, no. 10, pp. 2266-2279 (Jul. 2013).
[4] S. Sicari, A. Rizzardi, L. A. Grieco, and A. Coen-Porisini, “Security, privacy and trust in Internet of Things: The road ahead,” Comput. Netw., vol. 76, pp. 146-164 (Jan. 2015).
[5] A. Perrig, R. Canetti, J. D. Tygar, and D. Song, “Efficient authentication and signing of multicast streams over lossy channels,” in Proc. IEEE Symp. Security Privacy, Berkeley, CA, USA, pp. 56–73 (2000).
[6] S. Noel and S. Jajodia, “Understanding complex network attack graphs through clustered adjacency matrices,” in Proc. Annu. Comput. Security Appl. Conf. (ACSAC), Tucson, AZ, USA, pp. 160–169 (2005).
[7] A. Tiwari, R. K. Pandey, S. Mishra, A. Singh, S. Singh, and V. K. Chaudhary, “Machine learning pipelines with AWS SageMaker for customer churn analysis,” in Proc. Int. Conf. Sustainability, Innovation Technol. (ICSIT), pp. 1–6 (Aug. 2025).
[8] A. Tiwari, S. Mishra, and S. Tiwari, “AI/ML: Developing algorithms for handling imbalanced datasets in classification tasks,” in Computational Intelligence Techniques for 5G Enabled IoT Networks. Cham, Switzerland: Springer Nature, pp. 17–29 (2025).
[9] S. Mishra and A. Tiwari, “Medical insurance cost prediction using AWS SageMaker,” in Proc. Int. Conf. Augmented Reality, Intelligent Systems, and Industrial Automation (ARIIA), pp. 1–6 (Dec. 2024).
[10] A. Tiwari, S. S. Chauhan, S. Singh, and V. Singh, “Evolution of cybersecurity in the age of IoT and cloud computing,” in Proc. Int. Conf. Augmented Reality, Intelligent Systems, and Industrial Automation (ARIIA), pp. 1–4 (Dec. 2024).
[11] N. K. Singh, A. Lakhanpal, S. Srivastava, K. S. Sandhu, S. Arya, and A. Tiwari, “Ubiquitous intelligent machine learning resource allocation system in IoT,” in Proc. Int. Conf. Augmented Reality, Intelligent Systems, and Industrial Automation (ARIIA), pp. 1–6 (Dec. 2024).
[12] Y. A. Adi, M. K. Jameel, M. A. Mustafa, A. A. Hussein, M. A. Farhan, A. A. Ftaiet, S. A. K. Al-Janabi, K. Al-Azzawi, M. S. Ahmed, H. T. Salim, and B. A. Mohammed, “An analysis of the effects that cloud computing providers have on their customers’ decisions to use cloud computing,” in Proc. Int. Conf. Data Science and Big Data Analytics (DSBDA), Singapore: Springer, pp. 735–757 (2025), doi: 10.1007/978-981-97-9855-1_52.
[13] R. Parvez, V. Singh, S. Singh, B. Hazela, and A. Tiwari, “Emotion detection from speech for improved communication accessibility,” in Proc. Emerging Technologies for Intelligent Systems (ETIS), pp. 1–6 (Feb. 2025).
[14] G. K. Arora, R. Koshti, G. Swamy, A. Mehbodniya, J. L. Webber, and A. Tiwari, “Multi objective eagle optimization feature selection for cloud systems,” in Computer Science Engineering and Emerging Technologies. Boca Raton, USA: CRC Press, pp. 690–696 (2024).
[15] S. Kamble, D. K. J. Saini, V. Kumar, A. K. Gautam, S. Verma, A. Tiwari, and D. Goyal, “Detection and tracking of moving cloud services from video using saliency map model,” J. Discrete Math. Sci. Cryptogr., vol. 25, no. 4, pp. 1083–1092 (2022).
[16] R. Manikandan, R. K. Maurya, T. Rasheed, S. S. C. Bose, J. L. Arias-Gonzáles, U. Mamodiya, and A. Tiwari, “Adaptive cloud orchestration resource selection using rough set theory,” J. Interdiscip. Math., vol. 26, no. 3, pp. 311–320 (2023).
[17] S. Kumar, P. K. Srivastava, G. K. Srivastava, P. Singhal, D. Singh, and D. Goyal, “Chaos based image encryption security in cloud computing,” J. Discrete Math. Sci. Cryptogr., vol. 25, no. 4, pp. 1041–1051 (2022).
[18] S. Kumar, K. K. Dubey, A. K. Gautam, S. Verma, V. Kumar, and U. Mamodiya, “Detection of recurring vulnerabilities in computing services,” J. Discrete Math. Sci. Cryptogr., vol. 25, no. 4, pp. 1063–1071 (2022).
[19] S. Kumar, P. K. Srivastava, A. K. Pal, V. P. Mishra, P. Singhal, G. K. Srivastava, and U. Mamodiya, “Protecting location privacy in cloud services,” J. Discrete Math. Sci. Cryptogr., vol. 25, no. 4, pp. 1053–1062 (2022).
[20] D. Goyal, A. Kumar, P. Mathur, F. Sheth, and A. K. Gupta, “Robust cybersecurity through discrete and large language models for effective phishing attack detection,” J. Discrete Math. Sci. Cryptogr., vol. 28, no. 5-A, pp. 1621–1638 (2025).
[21] A. Noonia, D. Thakral, P. Mathur, F. Sheth, H. Shaikh, and A. K. Gupta, “A discrete mathematical model and cryptography for secure medical image analysis: Encrypted chest X-ray classification,” J. Discrete Math. Sci. Cryptogr., vol. 28, no. 5-A, pp. 1473–1486 (2025).
[22] D. Goyal, F. Sheth, P. Mathur, and A. K. Gupta, “Discrete mathematical models for enhancing cybersecurity: A mathematical and statistical analysis of machine learning approaches in phishing attack detection,” J. Discrete Math. Sci. Cryptogr., vol. 27, no. 2-B, pp. 569–599 (2024).
