Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

For questions relating to the security of IoT devices (especially those connected directly to the internet) and how to mitigate these issues or avoid them altogether. Do not confuse this with device safety (If it gets hacked it's a security question, if it explodes it's a safety question).

5
votes
0answers
27 views

Provisioning “things” on AWS IoT without certificates confusion

I am new to AWS IoT. I wish to use AWS IoT's feature called JITP (Just In Time Provisioning) to provision my gateways automatically. I am using BeagleBone boards as device gateways. I followed the ...
1
vote
0answers
44 views

All attacks on internet of things mentioning their application, layer, solution? [closed]

Doing research to make complete model which include all devices (falling in IoT) on which layer attacks occur and their specific solutions but mostly covering just 1 or 2 attacks and their solutions. ...
7
votes
1answer
70 views

Privacy with Voice Assistants

I am interested in getting a Smart Home system with a good voice assistant, but my wife refuses to allow a voice assistant like Google Home or Amazon Alexa because she does not want ANY recordings ...
8
votes
2answers
33 views

Rogue Start-Up of Robot sweeper

I have an Xiaomi Mi robot sweeper and at 7:00:40pm each day it is being started up by a rogue internet message. I saved the active IP table from the DD-WRT router firmware immediately before and ...
3
votes
1answer
60 views

Entropy depletion in /dev/random on Beaglebone

I have a Beagleblone Black with an ARMv7 SoC. /proc/cpuinfo says the hardware is Generic AM33XX. It is running Debian and the 4.1.15-ti-rt-r40 kernel. I run a lot of stress tests as part of my ...
4
votes
0answers
46 views

How to use dedicated cryptochips

I have a chip that needs to send arbitrary data to a server that I do not control. We're using mbed TLS at the moment, however the binary is quite large. So, we introduced a dedicated cryptographic ...
6
votes
1answer
49 views

How can I view the website from the Maker Pro IoT Smoke Alarm?

https://maker.pro/arduino/projects/iot-smoke-alarm-arduino-esp8266-gas-sensor I'm a layman who wants to do this. Have completed it as shown in the link. But I don't know how to see the website and ...
3
votes
1answer
41 views

Possibility of integrating secure elements with sensor networks?

Assume we need to do a type of digital signature such as ECDSA with sensors used in sensor networks. So, is there a secure and possible approach to store the keys in these sensors? For example, is ...
8
votes
2answers
114 views

How can I use End-to-end encryption in sensors network?

I have been reading about XMPP and its extensions. One of them called (XEP-xxxx: Sensor-Over-XMPP) which is really interesting. I have read also about another XMPP extension which is OMEMO protocol ...
6
votes
2answers
91 views

By what mechanism are IoT widgets vulnerable to hacking?

I hear news stories that millions of thermostats and fridges have not been properly secured by their manufacturers. I could understand how something running linux with sshd running (as it might well ...
4
votes
1answer
60 views

How to configure Wifi on a headless smart device?

I am looking to build a smart device with no external controls (no buttons, display, etc.) and am trying to figure out how to most easily allow a user to supply Wifi configuration to it. A specific ...
6
votes
1answer
126 views

How to register an IoT device to a user account

I'm designing on an IoT device that connects to a web server and publishes/subscribes to the MQTT service. Users download an iOS app to setup/register/use their device. Question: What's the ...
8
votes
1answer
121 views

Can One-way SSL secure an IoT device?

I am considering an IoT device connected to my local network (default settings, no VPN, no NAT, no DMZ) with or without Internet access. My device will run as a HTTP server offering a RPC mechanism ...
5
votes
0answers
181 views

Solutions to secure MQTT-SN over UDP with DTLS (or alternatives)

We want to secure the transport of MQTT-SN messages send over UDP e.g. with DTLS. Searching the internet showed that there are considerations and activities on using DTLS to secure the transport of ...
4
votes
1answer
139 views

mosquitto - allow_anonymous false shows connected message

I have set the acl_file property in /etc/mosquitto/mosquitto.conf to /home/ubuntu/my.acl. In the ACL file, I have allow_anonymous false to disallow connections from clients that do not have user name. ...
7
votes
2answers
2k views

Are there any surveillance cameras/devices that are EU General Data Protection Regulation (GDPR) compliant?

I recently came across the EU General Data Protection Regulation (GDPR) meant for data privacy regulation. The final Version of GDPR was released December/2015. Any surveillance camera or devices ...
5
votes
0answers
26 views

Home intrusion detection system - UltraSync 1347 - reliability

Does anyone have information about UltraSync 1347, a system that allows you to control a home intrusion system remotely from your smartphone (receive alerts, arm or disarm the system)? I could not ...
5
votes
1answer
46 views

Secure pairing support in various RF standards

I would like to understand if secure pairing can be implemented in all (or none?) IoT RF standards. For example: BLE provides Out-of-band possibility, which seems like only really secure option to ...
6
votes
2answers
313 views

How does URL Remote Access method work?

Unfortunately, I still have no answer to my question: Techniques of remote access to non IP IoT devices. Even though, I made some researches and I found two remote access techniques that do not ...
8
votes
1answer
139 views

How do Smart Home Security Boxes work?

With the increased security risks against IoT based smart homes, many security appliances have been commercialized. These appliances or boxes claim to protect the home network from malware, cyber-...
7
votes
2answers
493 views

Techniques of remote access to non IP IoT devices

I have asked a question about Port Forwarding for non IP IoT Devices I understand that the hub is the controller of non IP devices attached to it, and each group of devices with the same wireless ...
5
votes
1answer
173 views

Port Forwarding for non IP IoT devices

A smart home contains both IP and non-IP devices (figure). My questions are: Does a smart hub have an IP address ? To access IoT devices from the outside, is the port forwarding only for IP devices ...
3
votes
1answer
211 views

Secure EEPROM Reading from Another Device [closed]

We are working on some Embedded device (Tag, the Tag hardware is: MCU, external EEPROM, Temperature and Humidity sensors) that collects temperature and humidity, the Tag save the samples in the ...
10
votes
1answer
302 views

When is Z-Wave S2 Security Mandatory?

When Z-Wave had security problems last year, I was pleased to see it announced that S2 Security would be mandatory for all new certifications as of April and that they didn't back off at that time. ...
9
votes
2answers
244 views

How do car insurance tracking devices connect to the internet?

There are these devices that you can plug into your car and the insurance company can get real time data to "lower" your insurance cost. Image from U.S.News, 2016. How do they connect to the ...
1
vote
2answers
142 views

Build a “Smart Home”—Lack of Security [closed]

I am preparing to make my home smarter and for some reasons I am not happy. I read several articles about secure the smart home, but there was no clear solution. I don't know why, but it seems that ...
8
votes
1answer
212 views

Set up home Wi-Fi access for a device without a screen

I'm building a connected device without a screen that needs to be connected to home Wi-Fi. WPS is not an option. The device will have a Bluetooth module in addition to Wi-Fi hardware. QR codes can be ...
8
votes
3answers
423 views

Standards for keeping devices' security up-to-date

With IoT devices typically being built with low profit margins and low power specifications, functionality is typically limited to that which is needed. But for a device that is expected to last a ...
-2
votes
1answer
217 views

How is LTE organized in NB-IoT [closed]

How is LTE organized in NB-IoT? And can one find vulnerabilities in NB-IoT technology (security)?
6
votes
1answer
162 views

Creating a Tor 'hidden service' on Windows IoT Core

The Background I'm prototyping some basic home automation software using Windows IoT Core and Azure. I have built a Windows Universal Application that sends data to a Web App hosted in Azure via Web ...
7
votes
1answer
224 views

How to secure a Samsung Smart Refrigerator against BlueBorne?

Armis Labs lately revealed a new attack vector that attacks essentially all major OS including those used on IoT devices via Bluetooth. BlueBorne is reported to spread malware laterally to adjacent ...
13
votes
4answers
809 views

Can programs loaded onto NodeMCU board be extracted?

I am using a NodeMCU board with WiFi capabilities to build a simple asset tracker. I have managed to find a few Arduino sketches that enables connectivity to Azure IoT Hub and post messages. One of ...
8
votes
2answers
150 views

Using OpenIoT for detecting sensor node attacks

I just read about OpenIoT project. There are some points which I want to be clear about. I want to perform SYN-Flood attack detection in wireless sensor nodes. A transmitter module is made from ...
3
votes
0answers
129 views

What's the difference between Jackdaw and KillerBee on RZ Raven USB Stick [closed]

What is the difference between Jackdaw and KillerBee on ZigBee USB Stick, both seem to be sniffing packet, but Jackdaw can act as a network interface, and KillerBee is only used for pentest? As far as ...
8
votes
1answer
186 views

Quantum mechanics and Blockchain to secure IoT

I came across this article on IoT Security with Blockchain and Quantum mechanics. So, what's a quantum-secure blockchain and why is it more secure in an IoT setting?
5
votes
1answer
133 views

How to limit SmartThings Lock to prevent accidental unlock?

I have a Schlage Connect Z-Wave door lock. I can control it via my SmartThings App but I do not feel secure knowing that someone who hacked my account or my phone can easily gain access to my home. ...
5
votes
2answers
183 views

Is it ever a good idea to 'roll your own' protocol for IoT device communication?

I've heard many people mention that their embedded IoT devices aren't powerful enough to process known protocols, like HTTPS or even TLS security for sockets. Instead, they turn to creating their own ...
11
votes
3answers
2k views

Performance of MQTT over TLS vs. MQTT

While MQTT is quite versatile it is also not secured on itself. This is by design. According to Stanford-Clark, security was consciously left out of the protocol initially because he and Nipper ...
7
votes
2answers
3k views

How to prevent access to a Sonos system

I have a Sonos in a pub (although this applies to any public place which shares the wifi). The router (TP-LINK Archer VR4000) has a guest network and this is locked to not share the local network. ...
6
votes
1answer
215 views

Secure access to IoT small device

I'm building a small server at home, and I'd like to have a sort of "smart" board to control its power. This board will have, at the beginning, to simply turn it on or off (more features will be added ...
10
votes
3answers
2k views

How to protect Raspberry Pi from attack in an IoT setup connected through a Broadband network?

The Setup: I have a Raspberry Pi as the master node which is connected to the internet through a broadband connection, the raspberry pi connects several sensors and other microcontrollers. The Pi is ...
6
votes
2answers
187 views

Is a 'chain reaction' of ZigBee bulbs being hacked feasible?

I recently saw this video, in which some students attached an 'attack kit' to a drone and flew it near office blocks. According to their paper: We managed to tie a fully autonomous attack kit ...
8
votes
2answers
766 views

Set Arlo Mode with SmartThings

If it's possible, how can I set the "Mode" for an Arlo device using a SmartThings Routine? Ideally, I would simply set the camera modes when SmartThings goes into various security modes. I've found ...
7
votes
2answers
2k views

Does Arlo Pro communicate via WiFi?

I just setup an Arlo Pro security camera (made by Netgear) and found it interesting that the system didn't explicitly have me configure a WiFi connection. The setup process consists of hard-wiring the ...
7
votes
2answers
157 views

How to secure root on IoT device while remaining open to tinkerers

I'm currently spitballing ideas for an Internet of Things device. It will be running Linux on a widely available development board, I'm not too concerned about physical security or the end user doing ...
15
votes
3answers
4k views

What is the difference between a DDoS attack and a PDoS attack?

I've read a certain amount about the Mirai worm, a virus that attacks Internet of Things devices using default usernames and passwords and essentially is wired to produce a Distributed Denial of ...
8
votes
2answers
401 views

Ways of testing IoT sensor security

I am supervising a group of students and their task is to build iot sensors for a few different tasks (ie temperature, movement). I want to score them on how securely they design their sensors among ...
7
votes
1answer
141 views

Keep my Teddy Bear from being hacked

I recently ran across an article on arstechnica.com which outlines a recently discovered hack for teddy bears. Apparently, Spiral Toys, the manufacturer of Cloud Pets Stuffed Animals, implemented a ...
10
votes
5answers
278 views

Are there any ready cloud services or frameworks for firmware update over the air?

I have prototype of the resource constrained-device (8-bit MCU with no-OS firmware), interacting with a web server. I wonder are there any solutions, frameworks or cloud services for updating my ...
18
votes
4answers
4k views

Is my Samsung Smart TV vulnerable to the “weeping angel” attack?

On CNet, there's a report about Samsung UNF 8000 smart TVs being vulnerable to a hack developed by the CIA: In June 2014, the CIA and UK's MI5 held a joint workshop to improve the "Weeping Angel" ...