  Although CIoT has improved the convenience of daily activities, it also
introduces new security and privacy concerns. Network traffic analysis, a
common technique employed by the security community, has been extensively
utilized to investigate security and privacy concerns, and it has also been
applied to CIoT. However, compared to network traffic analysis in other fields
such as mobile apps and websites, CIoT presents special new characteristics,
which may introduce new challenges and research opportunities. In this study,
we reviewed 310 publications on traffic analysis within the CIoT security and
privacy domain, covering the period from January 2018 to December 2023.
Initially, we summarized the CIoT traffic analysis process, highlighting the
newly identified characteristics of CIoT. Subsequently, we classified existing
research according to its application objectives: device fingerprinting, user
activity inference, malicious traffic detection, and measurement. Lastly, we
explore emerging challenges and potential future research avenues.
