Recent years have seen the rapid development and integration of the Internet of Things (IoT) and cloud computing. The market is providing various consumer-oriented smart IoT devices; the mainstream cloud service providers are building their software stacks to support IoT services. With this emerging trend even growing, the security of such smart IoT cloud systems has drawn much research attention in recent years. To better understand the emerging consumer-oriented smart IoT cloud systems for practical engineers and new researchers, this article presents a review of the most recent research efforts on existing, real, already deployed consumer-oriented IoT cloud applications in the past five years using typical case studies. Specifically, we first present a general model for the IoT cloud ecosystem. Then, using the model, we review and summarize recent, representative research works on emerging smart IoT cloud system security using 10 detailed case studies, with the aim that the case studies together provide insights into the insecurity of current emerging IoT cloud systems. We further present a systematic approach to conduct a security analysis for IoT cloud systems. Based on the proposed security analysis approach, we review and suggest potential security risk mitigation methods to protect IoT cloud systems. We also discuss future research challenges for the IoT cloud security area.

中文翻译：

---

物联网云安全审查

近年来，物联网（IoT）和云计算的快速发展和融合。市场提供各种面向消费者的智能物联网设备；主流云服务提供商正在构建他们的软件堆栈来支持物联网服务。随着这种新兴趋势的发展，这种智能物联网云系统的安全性近年来引起了很多研究关注。为了让实用工程师和新研究人员更好地了解新兴的面向消费者的智能物联网云系统，本文回顾了最近关于现有的，真实的，已经部署的过去五年面向消费者的物联网云应用使用典型案例研究。具体来说，我们首先提出了物联网云生态系统的通用模型。然后，使用该模型，我们使用 10 个详细的案例研究回顾和总结了有关新兴智能物联网云系统安全性的近期代表性研究工作，目的是通过案例研究共同提供对当前新兴物联网云系统不安全性的见解。我们进一步提出了一种对物联网云系统进行安全分析的系统方法。基于所提出的安全分析方法，我们审查并建议潜在的安全风险缓解方法来保护物联网云系统。我们还讨论了物联网云安全领域未来的研究挑战。