Internet of Things (IoT) has fundamentally changed the way information technology and communication environments work, with significant advantages derived from wireless sensors and nanotechnology, among others. While IoT is still a growing and expanding platform, the current research in privacy and security shows there is little integration and unification of security and privacy that may affect user adoption of the technology because of fear of personal data exposure. The surveys conducted so far focus on vulnerabilities based on information exchange technologies applicable to the Internet. None of the surveys has brought out the integrated privacy and security perspective centered on the user. The aim of this paper is to provide the reader with a comprehensive discussion on the current state of the art of IoT, with particular focus on what have been done in the areas of privacy and security threats, attack surface, vulnerabilities and countermeasures and to propose a threat taxonomy. IoT user requirements and challenges were identified and discussed to highlight the baseline security and privacy needs and concerns of the user. The paper also proposed threat taxonomy to address the security requirements in broader perspective. This survey of IoT Privacy and Security has been undertaken through a systematic literature review using online databases and other resources to search for all articles that meet certain criteria, entering information about each study into a personal database, and then drawing up tables summarizing the current state of literature. As a result, the paper distills the latest developments in IoT privacy and security, highlights the open issues and identifies areas for further research.

物联网（IoT）从根本上改变了信息技术和通信环境的工作方式，其中无线传感器和纳米技术等方面具有显着优势。尽管物联网仍是一个不断发展和扩展的平台，但目前对隐私和安全性的研究表明，由于担心暴露个人数据，安全性和隐私的集成和统一很少会影响用户采用该技术。迄今为止进行的调查集中于基于适用于Internet的信息交换技术的漏洞。没有一项调查显示出以用户为中心的集成隐私和安全性观点。本文的目的是为读者提供有关物联网技术现状的全面讨论，特别关注隐私和安全威胁，攻击面，漏洞和对策方面的工作，并提出威胁分类法。确定并讨论了物联网用户需求和挑战，以强调基线安全性和隐私需求以及用户关注的问题。本文还提出了威胁分类法，以从更广泛的角度解决安全要求。这项IoT隐私和安全性调查是通过使用在线数据库和其他资源进行的系统文献综述来进行的，以搜索满足特定条件的所有文章，将有关每个研究的信息输入到个人数据库中，然后绘制汇总当前状态的表格文学。因此，本文摘录了物联网隐私和安全性的最新进展，