Questions tagged [security]
For questions relating to the security of IoT devices (especially those connected directly to the internet) and how to mitigate these issues or avoid them altogether. Do not confuse this with device safety (If it gets hacked it's a security question, if it explodes it's a safety question).
142
questions
2
votes
0
answers
49
views
High level architecture for cloud/IOT solution with multiple customers/users
We're at the early planning stage for a new cloud IOT solution and I'm looking for some guidance or direction for the high level architecture for our use case:
Assume we sell 10,000 edge devices to ...
9
votes
1
answer
187
views
How do Smart Home Security Boxes work?
With the increased security risks against IoT based smart homes, many security appliances have been commercialized. These appliances or boxes claim to protect the home network from malware, cyber-...
2
votes
3
answers
75
views
HTTPS inside a LAN
I read this before posting. I hope my question is on-topic here.
I'm working on an almost-IoT device that has a limited interaction with the Internet.
Let's think about an "offline" product ...
3
votes
2
answers
172
views
How can I make a topic/action to be allowed only to authorized users?
This is the scenario: I have a machine connected to a MQTT AWS-IoT Core broker. This machine is authorized with the AWS certificates to publish in the topic P/serialnb/deleterecords/record_id. This ...
1
vote
0
answers
41
views
What simulator is appropriate for modeling intrusion detection and prevention in large-scale static wireless sensor networks and simulated attacks?
When it comes to simulating intrusion detection and prevention in large-scale static WSNs, the choice of simulator is crucial. These networks, comprising stationary sensors (independent low-power ...
18
votes
2
answers
705
views
How to implement Wi-Fi for a headless IoT device?
Recently I purchased a TP-Link HS100 smart plug which I configured using an app and all is working well. Now I am trying to understand the underlying software and hardware architecture for such an ...
17
votes
1
answer
1k
views
Secure Home Network Partition for IoT Devices
What is the best approach to partitioning IoT devices from non-IoT devices at home?
I have heard that setting up separate networks, one for IoT devices and one for everything else, is a good ...
2
votes
0
answers
39
views
AWS security certificates with Shelly smart plug
When creating a "Thing" in "IoT Core" AWS let me download 5 security related files:
Device certificate: ???-certificate.pem.crt
Public key file: ???-public.pem.key
Private key ...
0
votes
0
answers
7
views
Verification of CMAC
How to Verify CMAC in install for install command in javacard..
I used the process given below but this method not able to verify
Key = Session Key for CMAC,
IV = CMAC which is given in external ...
1
vote
0
answers
20
views
Magnetic sensor NAS-DS01W0 (security concern about my network)
I am writing because I am a little unsure about a device I have just purchased and installed in my home network. I have bought a magnetic sensor to detect if a door is opened and closed. The model is ...
0
votes
1
answer
39
views
How can this PV-monitoring system communicate bidirectional
I've got a solar panel system with a Growatt inverter.
The system has a monitoring platform. To connect the inverter to the internet to let it communicate with the monitoring portal, you need a "...
14
votes
4
answers
3k
views
Is it a bad practice to keep certificates on external memory?
We're working on AWS-IoT using an STM32 microcontroller.
Till today, we were writing the certificates to the flash and locking the flash from external reading. As the application code increases, we'...
0
votes
1
answer
180
views
Mqtt in production
I am using Mqtt to build a project. I am wanting to move my whole work to prod ready.
My hardware is ESP-07 and custom PCB design the broker is mosquitto the app (Nodejs,react native)
I implemented ...
0
votes
1
answer
76
views
How can I disable voice commands (Google Assistant and Amazon Alexa) on iRobot?
I have 2x iRobot (vacuum cleaner and mop) and use their proprietary app, but block internet access for both iRobots on OpenWrt firewall.
Now I want to disable voice commands (Google Assistant and ...
-1
votes
1
answer
52
views
Notifications for LG WebOS updates and security fixes (e.g. a mailing list)
I have a LG WebOS TV (2021) which has no connection to the internet. Every few months I activate the internet connection in the firewall (OpenWrt) and check if updates are available. A somewhat manual ...
10
votes
1
answer
495
views
How do I generate a Time-based One-time Password with IFTTT?
I recently registered with IFTTT, which seems like a fantastic service to chain events together in order to create a smart home or automate various services.
I've just found the Maker channel which ...
2
votes
1
answer
345
views
How can I identify what kind of IoT device is in my network?
I am trying to build a system in which IoT devices can connect and are classified without the need for manual checks by the system administrator. In this system, IoT devices will send data, and on the ...
2
votes
0
answers
143
views
PTZ Security Camera Stuck in a Tour
I have an outdoor PTZ Dome Camera of unknown manufacturer but it has a type number sticker saying, NG4RT-42718. It came with CMS V3.1.0.8 software. This seemed to drive the camera adequately until I ...
10
votes
2
answers
1k
views
Connect IoT devices directly to Wi-Fi , through VLAN or through a Raspberry Pi?
I have a bunch of IoT switches connected to my Wi-Fi.
I am aware of three possibilities to connect and control them.
Through the Wi-Fi directly (like Samsung SmartThings does)
Connect them to a ...
1
vote
0
answers
88
views
How to play specific sound to speaker when motions detected at specific time?
If motion 1,2,3 detected at midnight, I would like to play this sound to my deck speaker and flash my smart bulb red (on repeat).
What is the basic way to achieve this?
Tools:
Samsung SmartThings hub, ...
3
votes
2
answers
133
views
How secure connection between modem and microchip
My board has a separate Quectel MC66 modem and STM32 microchip. The communication between modem and microchip is AT Commands.
If a hacker connected a wire between modem and microchip, he could have ...
2
votes
1
answer
95
views
Certificate Management for IOT devices
What is the best practice for certificate management on an IOT device (bare metal microcontroller with GSM modem that communicates to a secured MQTT broker)?
Looking at Let's Encrypt certbot, they ...
3
votes
3
answers
203
views
Are there Arduino boards that can be used as a small web server, supporting HTTPS?
I would like to control a relay from over the internet.
I was thinking of making this using an Arduino and some wifi/ethernet shield. Searching the internet, I see a lot of shields and modules that ...
4
votes
1
answer
128
views
Smart Locks with Alert feature
Are there any smart lock products that are capable of sending out alerts:
Alert via text/email when lock is opened with code
Alerts when lock is forcefully opened
Alerts when lock becomes unreachable ...
0
votes
1
answer
56
views
Can traffic spy see username and password of MQTT client
Can Traffic spy see the username and password of client send to broker when broker don't use TLS ?
0
votes
0
answers
142
views
Block GSM communication of a cellular modem with AT commands
I have a cellular modem that supports GSM, 3G and LTE.
I want for security reasons to block/disable GSM support, meaning that it will not be able to connect to any GSM BTS.
Partial solutions I came up ...
1
vote
2
answers
345
views
How to authenticate a device in the IoT platform?
I am building an IoT platform that should receive data from a Raspberry Pi over a REST API. Assuming the platform could in the future be used to manage multiple devices of multiple users, my question ...
3
votes
1
answer
74
views
LoRaWAN end-to-end security with Over The Air Activation
We are planning to connect several thousands of door opening and other home security sensors to a public LoRaWAN network country-wide, but our concern is, that in theory our public LoRaWAN network ...
31
votes
3
answers
2k
views
Intercepting web traffic going over cellular network
If you can plug a device into the wall, or use it in Wi-Fi, it's easy to see the traffic with software like WireShark.
But it seems more tricky to do it with a device that uses LTE/3G or other ...
3
votes
1
answer
103
views
Bare minimum infrastructure to keep a fleet of IoT devices running and ensure updates to OS and applications?
The number of currently available tools to run and maintain a fleet of IoT devices is staggering. To compare all is not feasible, however a list of the bare minimum required features to look for would ...
6
votes
1
answer
109
views
Why does LoRaWAN 1.1 use MAC-then-encrypt for Join-Accept messages?
In the LoRaWAN 1.1. standard it says on Page 16 "For Join-Accept frame, the MIC field is encrypted with the payload and is not a separate field".
In other scenarios the message integrity code is a ...
-1
votes
1
answer
58
views
How to fix this problem "connection to this site is not secure"? [closed]
I tried to access this website http://www.oaic.dz:9001/forms/frmservlet many times, but it denied me accessing (only white page) as it shows in the attached file (screenshot)
I tried installing Java, ...
1
vote
0
answers
28
views
IoT Malware and Botnets
According to Wikipedia, A botnet is a logical collection of Internet-connected devices such as computers, smartphones or Internet of things (IoT) devices whose security have been breached and control ...
0
votes
0
answers
39
views
Security concerns
I'm not very versed in WiFi technology and jargon, so please keep this simple. Suppose you have an item that you don't want to give access to your main WiFi network, for security reasons. Suppose ...
6
votes
1
answer
68
views
Securing first connection of non provisioned IoT device
Assumptions
The IoT Device is actually a software installable on supported operating system, e.g. Windows or Linux. Lets named it Software-Device.
The Software-Device is available to download by ...
0
votes
1
answer
51
views
Can I disable read access to an SD card by removing the read wire? [closed]
I want an internet connected host, such as a Raspberry Pi, to be able to write uploaded files to a directly-connected SD card, but I don't want it to be able to read the card. This is for protection ...
129
votes
4
answers
15k
views
How can I stop Alexa from ordering things if it hears a voice on TV?
According to The Register, lots of Amazon Echo devices were accidentally triggered by a presenter saying 'Alexa ordered me a dollhouse'.
Telly station CW-6 said the blunder happened during a Thursday ...
16
votes
2
answers
2k
views
What simple security tests can I perform on my MQTT network?
I am about to set up an MQTT network at home. I want to build up some knowledge by practical exercises. It would be a small network with the broker hosted on my laptop (Windows 7) and some Raspberry ...
4
votes
0
answers
277
views
Monitor Eufy Homebase from iPhone Apple Home?
I have a Eufy Homebase 2 with 6 EufyCam 2C and a wired doorbell connected. The Homebase is setup as a “room” in Apple HomeKit. The Homebase is Ethernet connected to Xfinity new router, with wifi ...
5
votes
1
answer
119
views
Do I need different certificates for every thing?
I'm learning AWS and I created a new thing with the required certificates to access it via MQTT:
root-CA.crt
.private.key
.cert.pem
If I'm not wrong the root-CA.crt file will be the same for all the ...
2
votes
0
answers
2k
views
How to have a Nedis smart device to connect to WiFi network without app and registering?
I have a Nedis WIFIHTPL20FWT Smart conversion heater. It seems that I need to register to Nedis cloud service and only then using Nedis SmartLife App this device could be connected to my local WLAN.
I ...
1
vote
0
answers
44
views
Guidance for a data logger and radio
I've currently been working with a consultant, whom recommended we utilize an architecture that is based off the Microchip ATMELAVR 8 bit Arduino framework. The board is called a Mayfly, picture ...
1
vote
1
answer
226
views
Prevent a remote MQTT client from connecting to a broker
I am a newbie to MQTT, I was wondering how could one prevent a client who is not running in the same processor, where the broker is also running, to connect with the broker. In other way, restricting ...
2
votes
1
answer
78
views
MQTT Client Broker communication - can a malicious client masquerade as a legitimate one after being connected with credentials
I would like to ask a question that I have about MQTT client broker communication. Let's say, a client C1 is connected to the broker with user name and password (with no encryption).
What happens when ...
1
vote
0
answers
130
views
OOB pairing without NFC
I'm building a medical device with NFC capability. This medical device can be connected to a mobile phone/tablet over Bluetooth and operated by an App.
During the pairing process, the App asks the ...
5
votes
2
answers
111
views
Testing security of IoT devices
Searching the archives for "fuzz" and "pentest" only results in 2-3 relevant threads on this topic and they are all from 2016/2017.
I would really like to subject my IoT devices (e....
0
votes
0
answers
42
views
What does the abbreviation "SPINS" for the security protocol for WSN mean?
Since the protocol SPINS is as far as I understand it commonly spread I would like what exactly the abbreviation means in the paper "SPINS: Security Protocols for Sensor Networks" by Perrig et al. he ...
3
votes
1
answer
108
views
Creating a secure MQTT session with TLS while employing smartphone gateway
My IoT device creates a BLE connection with a smartphone from which it connects to cloud. When integrating a TLS, should it be above MQTT or below? All implementation I have reviewed so far does it ...
27
votes
7
answers
4k
views
Could a blockchain really prevent malware in the Internet of Things?
This article claims that using a blockchain-based security system for an IoT network would prevent some types of attacks:
Blockchain technology may help offer an answer. Gada observes that blockchain ...
1
vote
1
answer
39
views
Tools to generate Access Tokens for Devices without the use of platforms
According to the present IoT landscape the Users of the data can either use the following interfaces to access IoT information:
Web Apps
Smart Phone Apps
However with the user of new technologies as ...