Questions tagged [security]

For questions relating to the security of IoT devices (especially those connected directly to the internet) and how to mitigate these issues or avoid them altogether. Do not confuse this with device safety (If it gets hacked it's a security question, if it explodes it's a safety question).

Filter by
Sorted by
Tagged with
126
votes
4answers
14k views

How can I stop Alexa from ordering things if it hears a voice on TV?

According to The Register, lots of Amazon Echo devices were accidentally triggered by a presenter saying 'Alexa ordered me a dollhouse'. Telly station CW-6 said the blunder happened during a Thursday ...
36
votes
5answers
2k views

Can I monitor my network for rogue IoT device activity?

In order to mitigate or manage the risk from having some of the devices on my home network compromised, is it feasible to monitor network traffic so as to detect a compromise? I'm specifically ...
53
votes
8answers
2k views

Securing small home automation setup

I have a small home automation lab (that I keep saying I'll expand, but haven't). In this setup, I have a control system to control lights (utilizing the x10 protocol), blinds, a Nest thermostat and ...
20
votes
5answers
963 views

Is there any advantage in encrypting sensor data that is not private?

Some sites, such as this article on end-to-end encryption for IoT, suggest that all traffic sent across the IoT network should be encrypted, saying: Enterprises, government agencies and other ...
7
votes
1answer
241 views

Will changing my user name and password block Mirai attacks?

I've recently been reading about Mirai, malware whose source has been revealed which is designed to infect IoT devices. It is appears to be a serious threat to security compromised Internet of ...
15
votes
2answers
2k views

How do consumer IoT devices typically enable Internet connection?

As far as I know there are 2 general methods for enabling remote (Internet, not LAN) access to IoT devices: Via a server that the device polls periodically (e.g. MQTT) Direct remote access I'm ...
25
votes
7answers
4k views

Could a blockchain really prevent malware in the Internet of Things?

This article claims that using a blockchain-based security system for an IoT network would prevent some types of attacks: Blockchain technology may help offer an answer. Gada observes that blockchain ...
7
votes
3answers
1k views

How does the Norton Core increase the security of a “smart home”?

Symantec is releasing a new router, the Norton Core, which they describe as "The secure router for your connected home." I found out about this while reading an article on Engadget, but their ...
16
votes
1answer
762 views

Secure Home Network Partition for IoT Devices

What is the best approach to partitioning IoT devices from non-IoT devices at home? I have heard that setting up separate networks, one for IoT devices and one for everything else, is a good ...
12
votes
1answer
971 views

What, exactly, makes SPECK and SIMON particularly suitable for IoT devices?

For some IoT devices, the data that needs to be sent is confidential, and hence sending it in plain text is not acceptable. Therefore, I've been considering how to encrypt data sent between IoT ...
6
votes
2answers
237 views

Is it ever a good idea to 'roll your own' protocol for IoT device communication?

I've heard many people mention that their embedded IoT devices aren't powerful enough to process known protocols, like HTTPS or even TLS security for sockets. Instead, they turn to creating their own ...
27
votes
3answers
633 views

What are the best security practices to secure a remote IoT camera?

I have done a bit of home automation such as building a remote camera that can be turned on via SSH locally and publishes images on a Raspberry Pi run Linux server. I'm curious, though, as to what ...
16
votes
3answers
5k views

What is the difference between a DDoS attack and a PDoS attack?

I've read a certain amount about the Mirai worm, a virus that attacks Internet of Things devices using default usernames and passwords and essentially is wired to produce a Distributed Denial of ...
27
votes
4answers
4k views

How can I check if my IoT devices are infected with the Mirai worm?

I've recently heard about the Mirai worm, which infects vulnerable routers, IoT devices and other internet-connected appliances with insecure passwords. Mirai is suspected of being the cause of some ...
28
votes
2answers
1k views

Intercepting web traffic going over cellular network

If you can plug a device into the wall, or use it in Wi-Fi, it's easy to see the traffic with software like WireShark. But it seems more tricky to do it with a device that uses LTE/3G or other ...
18
votes
2answers
2k views

How do I secure communication between app and IoT device?

I am currently working on a project that includes Bluetooth communication between a mobile application (currently using the Ionic platform) and an embedded device. For comparison, our product is ...
14
votes
1answer
285 views

How to stop these toys from sending what my kids say to the cloud?

As reported by several news outlets like the Verge or ConsumerAffairs, the connected toys My Friend Cayla and the i-Que record what the kids say and send it back to a server to help answer kids' ...
13
votes
4answers
811 views

How do I protect my home from IoT devices being compromised and being used for DDoS attacks?

I am trying to understand the vulnerability of my home IoT devices. From what I understand, the big DDoS last year was caused by compromised IoT devices with generic or default usernames and passwords....
9
votes
5answers
354 views

Are there any ready cloud services or frameworks for firmware update over the air?

I have prototype of the resource constrained-device (8-bit MCU with no-OS firmware), interacting with a web server. I wonder are there any solutions, frameworks or cloud services for updating my ...
6
votes
2answers
661 views

Techniques of remote access to non IP IoT devices

I have asked a question about Port Forwarding for non IP IoT Devices I understand that the hub is the controller of non IP devices attached to it, and each group of devices with the same wireless ...
4
votes
1answer
296 views

Port Forwarding for non IP IoT devices

A smart home contains both IP and non-IP devices (figure). My questions are: Does a smart hub have an IP address ? To access IoT devices from the outside, is the port forwarding only for IP devices ...
2
votes
1answer
129 views

Should there be one device provisioning service for one IoT hub if it is associated with one tenant?

I have a multi-tenancy situation where I have created one IoT hub per tenant. Now if I have 5 tenants, and I create 5 Iot hub, should I also create 5 device provisioning service for those 5 IoT hubs (...