IoT Security: Why Is It Challenging and What Can We Do