Security in the Internet of Things (IoT) remains a predominant area of concern. This survey updates the state of the art covered in previous surveys and focuses on defending against threats rather than on the threats alone. This area is less extensively covered by other surveys and warrants particular attention. A life-cycle approach is adopted, articulated to form a "defence in depth" strategy against malicious actors compromising an IoT network laterally within it and from it. This study highlights the challenges of each mitigation step, emphasises novel perspectives, and reconnects the discussed mitigation steps to the ground principles they seek to implement.

翻译：物联网（IoT）安全仍是一个首要关注领域。本综述更新了先前综述中涵盖的最新进展，并专注于防御威胁而非仅关注威胁本身。这一领域在其他综述中涉及较少，值得特别关注。本文采用生命周期方法，构建了一种针对恶意行为者从横向和外部入侵物联网网络的“纵深防御”策略。本研究强调了每个缓解步骤的挑战，突出了新颖视角，并将所讨论的缓解步骤与其旨在实现的基本原则重新关联起来。