Deception techniques have been widely used in network and computer security to detect and mitigate modern cyber attacks and suggested as effective countermeasures to design proactive security solutions. The adaption of deception for the security of IoT devices in existing studies does not explore its full potential as it is limited to data collection only. This thesis explores the development of a deception-based security framework for IoT devices by performing an in-depth analysis of the attack processes followed for IoT devices. We also examine the potential of applying a wide range of deception systems and techniques to lure and manipulate the attackers at different phases of the IoT attack process(es).