The constant development of interrelated computing devices and the emergence of new network technologies have caused a dramatic growth in the number of Internet of Things (IoT) devices. It has brought great convenience to people’s lives where its applications have been leveraged to revolutionize everyday objects connected in different life aspects such as smart home, healthcare, transportation, environment, agriculture, and military. This interconnectivity of IoT objects takes place through networks on centralized cloud infrastructure that is not constrained to national or jurisdictional boundaries. It is crucial to maintain security, robustness, and trustless authentication to guarantee secure exchange of critical user data among IoT objects. Consequently, blockchain technology has recently emerged as a tenable solution to offer such prominent features. Blockchain’s secure decentralization can overcome security, authentication, and maintenance limitations of current IoT ecosystem. In this paper we conduct a comprehensive literature review to address recent security and privacy challenges related to IoT where they are categorized according to IoT layered architecture: perception, network, and application layer. Further, we investigate blockchain technology as a key pillar to overcome many of IoT security and privacy problems. Additionally, we explore the blockchain technology and its added values when combined with other new technologies as machine learning especially in intrusion detection systems. Moreover, we highlight challenges and privacy issues resulted due to integration of blockchain in IoT applications. Finally, we propose a framework of IoT security and privacy requirements via blockchain technology. Our main contribution is to exhaust the literature to highlight the recent IoT security and privacy issues and how blockchain can be utilized to overcome these issues, nevertheless; we address challenges and open security issues that blockchain may impose on the current IoT systems. Research findings formulate a rigid foundation upon which an efficient and secure adoption of IoT and blockchain is highlighted accordingly.

相互关联的计算设备的不断发展以及新网络技术的出现，导致了物联网（IoT）设备数量的急剧增长。它为人们的生活带来了极大的便利，利用它的应用来彻底改变连接在不同生活方面的日常对象，例如智能家居，医疗保健，交通，环境，农业和军事。物联网对象的这种互连性通过中央云基础架构上的网络实现，该网络不受国家或管辖范围的限制。维持安全性，鲁棒性和无信任认证对于确保IoT对象之间关键用户数据的安全交换至关重要。所以，区块链技术最近已成为可提供此类突出功能的可行解决方案。区块链的安全分权可以克服当前物联网生态系统的安全性，身份验证和维护限制。在本文中，我们进行了全面的文献综述，以解决与物联网相关的最新安全性和隐私挑战，并根据物联网分层架构对它们进行分类：感知，网络和应用程序层。此外，我们将区块链技术作为克服许多物联网安全和隐私问题的关键支柱。此外，当与其他新技术（例如机器学习，尤其是入侵检测系统）结合使用时，我们将探索区块链技术及其附加值。此外，我们重点介绍了由于将区块链集成到物联网应用程序而导致的挑战和隐私问题。最后，我们通过区块链技术提出了物联网安全和隐私要求框架。我们的主要贡献是穷举文献，重点介绍最近的物联网安全和隐私问题，以及如何利用区块链克服这些问题。我们解决了区块链可能对当前物联网系统施加的挑战和开放安全性问题。研究结果奠定了坚实的基础，因此在此基础上着重强调了物联网和区块链的有效和安全采用。我们的主要贡献是穷举文献，重点介绍最近的物联网安全和隐私问题，以及如何利用区块链克服这些问题。我们解决了区块链可能对当前物联网系统施加的挑战和开放安全性问题。研究结果奠定了坚实的基础，因此在此基础上着重强调了物联网和区块链的有效和安全采用。我们的主要贡献是穷举文献，重点介绍最近的物联网安全和隐私问题，以及如何利用区块链克服这些问题；我们解决了区块链可能对当前物联网系统施加的挑战和开放安全性问题。研究结果奠定了坚实的基础，因此在此基础上着重强调了物联网和区块链的有效和安全采用。