People who code: we want your input. Take the Survey

Questions tagged [security]

For questions relating to the security of IoT devices (especially those connected directly to the internet) and how to mitigate these issues or avoid them altogether. Do not confuse this with device safety (If it gets hacked it's a security question, if it explodes it's a safety question).

Filter by
Sorted by
Tagged with
4
votes
1answer
406 views

How to configure Wifi on a headless smart device?

I am looking to build a smart device with no external controls (no buttons, display, etc.) and am trying to figure out how to most easily allow a user to supply Wifi configuration to it. A specific ...
6
votes
1answer
645 views

How to register an IoT device to a user account

I'm designing on an IoT device that connects to a web server and publishes/subscribes to the MQTT service. Users download an iOS app to setup/register/use their device. Question: What's the ...
6
votes
2answers
262 views

How to secure root on IoT device while remaining open to tinkerers

I'm currently spitballing ideas for an Internet of Things device. It will be running Linux on a widely available development board, I'm not too concerned about physical security or the end user doing ...
4
votes
1answer
650 views

mosquitto - allow_anonymous false shows connected message

I have set the acl_file property in /etc/mosquitto/mosquitto.conf to /home/ubuntu/my.acl. In the ACL file, I have allow_anonymous false to disallow connections from clients that do not have user name. ...
7
votes
2answers
2k views

Are there any surveillance cameras/devices that are EU General Data Protection Regulation (GDPR) compliant?

I recently came across the EU General Data Protection Regulation (GDPR) meant for data privacy regulation. The final Version of GDPR was released December/2015. Any surveillance camera or devices ...
10
votes
1answer
456 views

When is Z-Wave S2 Security Mandatory?

When Z-Wave had security problems last year, I was pleased to see it announced that S2 Security would be mandatory for all new certifications as of April and that they didn't back off at that time. ...
14
votes
1answer
287 views

How to stop these toys from sending what my kids say to the cloud?

As reported by several news outlets like the Verge or ConsumerAffairs, the connected toys My Friend Cayla and the i-Que record what the kids say and send it back to a server to help answer kids' ...
5
votes
0answers
41 views

Home intrusion detection system - UltraSync 1347 - reliability

Does anyone have information about UltraSync 1347, a system that allows you to control a home intrusion system remotely from your smartphone (receive alerts, arm or disarm the system)? I could not ...
9
votes
2answers
519 views

Ways of testing IoT sensor security

I am supervising a group of students and their task is to build iot sensors for a few different tasks (ie temperature, movement). I want to score them on how securely they design their sensors among ...
5
votes
1answer
59 views

Secure pairing support in various RF standards

I would like to understand if secure pairing can be implemented in all (or none?) IoT RF standards. For example: BLE provides Out-of-band possibility, which seems like only really secure option to ...
27
votes
4answers
4k views

How can I check if my IoT devices are infected with the Mirai worm?

I've recently heard about the Mirai worm, which infects vulnerable routers, IoT devices and other internet-connected appliances with insecure passwords. Mirai is suspected of being the cause of some ...
6
votes
2answers
680 views

Techniques of remote access to non IP IoT devices

I have asked a question about Port Forwarding for non IP IoT Devices I understand that the hub is the controller of non IP devices attached to it, and each group of devices with the same wireless ...
8
votes
2answers
172 views

Using OpenIoT for detecting sensor node attacks

I just read about OpenIoT project. There are some points which I want to be clear about. I want to perform SYN-Flood attack detection in wireless sensor nodes. A transmitter module is made from ...
4
votes
1answer
313 views

Port Forwarding for non IP IoT devices

A smart home contains both IP and non-IP devices (figure). My questions are: Does a smart hub have an IP address ? To access IoT devices from the outside, is the port forwarding only for IP devices ...
6
votes
2answers
626 views

How does URL Remote Access method work?

Unfortunately, I still have no answer to my question: Techniques of remote access to non IP IoT devices. Even though, I made some researches and I found two remote access techniques that do not ...
11
votes
2answers
193 views

Is there a certificate to indicate the security level of IoT devices?

Is there any reliable certificate for IoT devices, which can be used to compare the provided security of these devices?1 Currently, the IoT landscape is completely scattered with different protocols, ...
8
votes
1answer
367 views

How to secure a Samsung Smart Refrigerator against BlueBorne?

Armis Labs lately revealed a new attack vector that attacks essentially all major OS including those used on IoT devices via Bluetooth. BlueBorne is reported to spread malware laterally to adjacent ...
8
votes
1answer
170 views

How do Smart Home Security Boxes work?

With the increased security risks against IoT based smart homes, many security appliances have been commercialized. These appliances or boxes claim to protect the home network from malware, cyber-...
37
votes
5answers
2k views

Can I monitor my network for rogue IoT device activity?

In order to mitigate or manage the risk from having some of the devices on my home network compromised, is it feasible to monitor network traffic so as to detect a compromise? I'm specifically ...
3
votes
1answer
570 views

Secure EEPROM Reading from Another Device [closed]

We are working on some Embedded device (Tag, the Tag hardware is: MCU, external EEPROM, Temperature and Humidity sensors) that collects temperature and humidity, the Tag save the samples in the ...
12
votes
4answers
2k views

Securing 433 MHz wall light switch

I'm planning to use a simple light switch, that is placed on the wall. The switch gets power from the battery or piezo and sends unique sequences of data (on on- and on off-events) over 433 MHz to the ...
7
votes
3answers
1k views

How does the Norton Core increase the security of a “smart home”?

Symantec is releasing a new router, the Norton Core, which they describe as "The secure router for your connected home." I found out about this while reading an article on Engadget, but their ...
7
votes
1answer
3k views

Connect to Chevrolet Cruze Hot-Spot Wi-Fi

The Chevrolet Cruze (2016) is supposed to have a Wi-Fi hot-spot. I do see it showing up in my available network connections, but how do I find the password? From my memory, the dealer didn't say ...
16
votes
1answer
612 views

How to implement Wi-Fi for a headless IoT device?

Recently I purchased a TP-Link HS100 smart plug which I configured using an app and all is working well. Now I am trying to understand the underlying software and hardware architecture for such an ...
12
votes
1answer
365 views

Can I implement a (weak) entropy source in FPGA?

I'm working with an IoT platform in FPGA for evaluation and prototyping. I need to provide support for TLS, and for that I need an entropy source. I understand that true random noise sources are ...
16
votes
3answers
168 views

Is the Subscriber-Publisher pattern applicable also to actuators?

There are tons of tutorials on the web, especially with RabbitMQ, on how to publish sensor data; for example, temperature, humidity, etc. Just publish the value to a message queue and anybody can ...
1
vote
2answers
184 views

Build a “Smart Home”—Lack of Security [closed]

I am preparing to make my home smarter and for some reasons I am not happy. I read several articles about secure the smart home, but there was no clear solution. I don't know why, but it seems that ...
8
votes
3answers
537 views

Standards for keeping devices' security up-to-date

With IoT devices typically being built with low profit margins and low power specifications, functionality is typically limited to that which is needed. But for a device that is expected to last a ...
8
votes
1answer
420 views

Set up home Wi-Fi access for a device without a screen

I'm building a connected device without a screen that needs to be connected to home Wi-Fi. WPS is not an option. The device will have a Bluetooth module in addition to Wi-Fi hardware. QR codes can be ...
-2
votes
1answer
251 views

How is LTE organized in NB-IoT [closed]

How is LTE organized in NB-IoT? And can one find vulnerabilities in NB-IoT technology (security)?
12
votes
4answers
436 views

Would using a Tor wifi router make IoT more secure?

Would using a Tor wifi router make IoT more secure from attacks etcetera? These routers provide a Tor client, and also tunnel all internet traffic through a VPN. This anonymises your internet access ...
6
votes
1answer
222 views

Creating a Tor 'hidden service' on Windows IoT Core

The Background I'm prototyping some basic home automation software using Windows IoT Core and Azure. I have built a Windows Universal Application that sends data to a Web App hosted in Azure via Web ...
13
votes
4answers
1k views

Can programs loaded onto NodeMCU board be extracted?

I am using a NodeMCU board with WiFi capabilities to build a simple asset tracker. I have managed to find a few Arduino sketches that enables connectivity to Azure IoT Hub and post messages. One of ...
13
votes
4answers
828 views

How do I protect my home from IoT devices being compromised and being used for DDoS attacks?

I am trying to understand the vulnerability of my home IoT devices. From what I understand, the big DDoS last year was caused by compromised IoT devices with generic or default usernames and passwords....
9
votes
2answers
263 views

Will multiple simultaneous biometric sensors create unbreakable security for devices?

This article quotes the CEO of Image Ware, [The solution] according to Miller, is multi-modal biometrics which he claims makes it virtually impossible for the wrong person to access computer ...
8
votes
1answer
251 views

Will changing my user name and password block Mirai attacks?

I've recently been reading about Mirai, malware whose source has been revealed which is designed to infect IoT devices. It is appears to be a serious threat to security compromised Internet of ...
6
votes
2answers
3k views

Does Arlo Pro communicate via WiFi?

I just setup an Arlo Pro security camera (made by Netgear) and found it interesting that the system didn't explicitly have me configure a WiFi connection. The setup process consists of hard-wiring the ...
9
votes
1answer
1k views

Harmony Hub Security

Today I—likely—stumbled upon a major security leak in my home automation setup. Scenario I installed the ha bridge github project on my Raspberry Pi, mainly to see what it can do. I literally just ...
4
votes
1answer
3k views

How to modify Mosquitto's Windows Firewall Inbound Rule to only allow connections from specific IP addresses?

I am trying to set up IP whitelisting for my Mosquitto broker on Windows 7. To do so I have performed the following steps, based on this article: How to Whitelist Your IP - Windows Dedicated. Open ...
3
votes
0answers
185 views

What's the difference between Jackdaw and KillerBee on RZ Raven USB Stick [closed]

What is the difference between Jackdaw and KillerBee on ZigBee USB Stick, both seem to be sniffing packet, but Jackdaw can act as a network interface, and KillerBee is only used for pentest? As far as ...
8
votes
1answer
229 views

Quantum mechanics and Blockchain to secure IoT

I came across this article on IoT Security with Blockchain and Quantum mechanics. So, what's a quantum-secure blockchain and why is it more secure in an IoT setting?
4
votes
1answer
170 views

How to limit SmartThings Lock to prevent accidental unlock?

I have a Schlage Connect Z-Wave door lock. I can control it via my SmartThings App but I do not feel secure knowing that someone who hacked my account or my phone can easily gain access to my home. ...
6
votes
2answers
243 views

Is it ever a good idea to 'roll your own' protocol for IoT device communication?

I've heard many people mention that their embedded IoT devices aren't powerful enough to process known protocols, like HTTPS or even TLS security for sockets. Instead, they turn to creating their own ...
5
votes
1answer
236 views

Secure access to IoT small device

I'm building a small server at home, and I'd like to have a sort of "smart" board to control its power. This board will have, at the beginning, to simply turn it on or off (more features will be added ...
11
votes
3answers
2k views

Performance of MQTT over TLS vs. MQTT

While MQTT is quite versatile it is also not secured on itself. This is by design. According to Stanford-Clark, security was consciously left out of the protocol initially because he and Nipper ...
9
votes
3answers
3k views

How to protect Raspberry Pi from attack in an IoT setup connected through a Broadband network?

The Setup: I have a Raspberry Pi as the master node which is connected to the internet through a broadband connection, the raspberry pi connects several sensors and other microcontrollers. The Pi is ...
8
votes
1answer
477 views

How can I set up IP whitelisting on an IP camera without support for whitelists?

The camera in question is a Ring Stick Up Cam. I want to add an additional layer of security and prevent anyone from peeking (listening) into my home. I thought that it might be good if I could set ...
5
votes
2answers
218 views

Is a 'chain reaction' of ZigBee bulbs being hacked feasible?

I recently saw this video, in which some students attached an 'attack kit' to a drone and flew it near office blocks. According to their paper: We managed to tie a fully autonomous attack kit ...
53
votes
8answers
2k views

Securing small home automation setup

I have a small home automation lab (that I keep saying I'll expand, but haven't). In this setup, I have a control system to control lights (utilizing the x10 protocol), blinds, a Nest thermostat and ...
9
votes
5answers
396 views

Are there any ready cloud services or frameworks for firmware update over the air?

I have prototype of the resource constrained-device (8-bit MCU with no-OS firmware), interacting with a web server. I wonder are there any solutions, frameworks or cloud services for updating my ...