Questions tagged [security]

For questions relating to the security of IoT devices (especially those connected directly to the internet) and how to mitigate these issues or avoid them altogether. Do not confuse this with device safety (If it gets hacked it's a security question, if it explodes it's a safety question).

Filter by
Sorted by
Tagged with
26
votes
7answers
4k views

Could a blockchain really prevent malware in the Internet of Things?

This article claims that using a blockchain-based security system for an IoT network would prevent some types of attacks: Blockchain technology may help offer an answer. Gada observes that blockchain ...
126
votes
4answers
14k views

How can I stop Alexa from ordering things if it hears a voice on TV?

According to The Register, lots of Amazon Echo devices were accidentally triggered by a presenter saying 'Alexa ordered me a dollhouse'. Telly station CW-6 said the blunder happened during a Thursday ...
7
votes
1answer
135 views

Which D-Link IP cameras are affected by the FTC complaint, and what can I do about them?

The FTC have filed a legal complaint against D-Link alleging that their routers and IP cameras have critical security vulnerabilities and are misleading consumers into believing they are safe. ...
12
votes
4answers
446 views

Would using a Tor wifi router make IoT more secure?

Would using a Tor wifi router make IoT more secure from attacks etcetera? These routers provide a Tor client, and also tunnel all internet traffic through a VPN. This anonymises your internet access ...
7
votes
3answers
1k views

How does the Norton Core increase the security of a "smart home"?

Symantec is releasing a new router, the Norton Core, which they describe as "The secure router for your connected home." I found out about this while reading an article on Engadget, but their ...
9
votes
1answer
1k views

Harmony Hub Security

Today I—likely—stumbled upon a major security leak in my home automation setup. Scenario I installed the ha bridge github project on my Raspberry Pi, mainly to see what it can do. I literally just ...
21
votes
5answers
1k views

Is there any advantage in encrypting sensor data that is not private?

Some sites, such as this article on end-to-end encryption for IoT, suggest that all traffic sent across the IoT network should be encrypted, saying: Enterprises, government agencies and other ...
13
votes
1answer
211 views

Cryptographic algorithms for PIC16 microcontrollers

I'm planning to implement my own home automation system. In will contain the central Raspberry PI server and a number of sensors and switches based on 8-bit PIC16 microcontrollers which are ...
13
votes
4answers
392 views

How can I use 2FA in an MQTT network?

How can I use 2FA (two factor authentication) when I connect a new device to the broker, if it is even possible? Because it seems easier, the second factor can be a software solution first but I ...
10
votes
2answers
265 views

Will multiple simultaneous biometric sensors create unbreakable security for devices?

This article quotes the CEO of Image Ware, [The solution] according to Miller, is multi-modal biometrics which he claims makes it virtually impossible for the wrong person to access computer ...
15
votes
2answers
1k views

What simple security tests can I perform on my MQTT network?

I am about to set up an MQTT network at home. I want to build up some knowledge by practical exercises. It would be a small network with the broker hosted on my laptop (Windows 7) and some Raspberry ...
8
votes
1answer
2k views

Disadvantages of decentralized peer-to-peer networks in IoT

I have recently read an article about why IoT should switch from the now dominant centralized (server - client) model to a decentralized peer-to-peer solution. Reasons against centralization: ...
10
votes
1answer
450 views

How do I generate a Time-based One-time Password with IFTTT?

I recently registered with IFTTT, which seems like a fantastic service to chain events together in order to create a smart home or automate various services. I've just found the Maker channel which ...
17
votes
1answer
621 views

How to implement Wi-Fi for a headless IoT device?

Recently I purchased a TP-Link HS100 smart plug which I configured using an app and all is working well. Now I am trying to understand the underlying software and hardware architecture for such an ...
15
votes
1answer
289 views

How to stop these toys from sending what my kids say to the cloud?

As reported by several news outlets like the Verge or ConsumerAffairs, the connected toys My Friend Cayla and the i-Que record what the kids say and send it back to a server to help answer kids' ...
12
votes
2answers
195 views

Is there a certificate to indicate the security level of IoT devices?

Is there any reliable certificate for IoT devices, which can be used to compare the provided security of these devices?1 Currently, the IoT landscape is completely scattered with different protocols, ...
13
votes
1answer
1k views

What, exactly, makes SPECK and SIMON particularly suitable for IoT devices?

For some IoT devices, the data that needs to be sent is confidential, and hence sending it in plain text is not acceptable. Therefore, I've been considering how to encrypt data sent between IoT ...
28
votes
4answers
4k views

How can I check if my IoT devices are infected with the Mirai worm?

I've recently heard about the Mirai worm, which infects vulnerable routers, IoT devices and other internet-connected appliances with insecure passwords. Mirai is suspected of being the cause of some ...
17
votes
3answers
173 views

Is the Subscriber-Publisher pattern applicable also to actuators?

There are tons of tutorials on the web, especially with RabbitMQ, on how to publish sensor data; for example, temperature, humidity, etc. Just publish the value to a message queue and anybody can ...
38
votes
5answers
3k views

Can I monitor my network for rogue IoT device activity?

In order to mitigate or manage the risk from having some of the devices on my home network compromised, is it feasible to monitor network traffic so as to detect a compromise? I'm specifically ...
9
votes
1answer
595 views

Best practices for secure Over The Air updates [closed]

What are the best security practices to follow when issuing an OTA update to a fleet of IoT devices? What are the significant causes for concern? For example, preventing an update from being ...
11
votes
1answer
575 views

Should I build isolated networks for IoT devices vs. regular computers? [duplicate]

In a home environment that will have both traditional computing activities (desktop and laptop computers, NAT storage devices, printers, etc.) and IoT devices (internet connected thermometers, ...
17
votes
1answer
965 views

Secure Home Network Partition for IoT Devices

What is the best approach to partitioning IoT devices from non-IoT devices at home? I have heard that setting up separate networks, one for IoT devices and one for everything else, is a good ...
13
votes
4answers
2k views

Securing 433 MHz wall light switch

I'm planning to use a simple light switch, that is placed on the wall. The switch gets power from the battery or piezo and sends unique sequences of data (on on- and on off-events) over 433 MHz to the ...
19
votes
2answers
2k views

How do I secure communication between app and IoT device?

I am currently working on a project that includes Bluetooth communication between a mobile application (currently using the Ionic platform) and an embedded device. For comparison, our product is ...
30
votes
3answers
1k views

Intercepting web traffic going over cellular network

If you can plug a device into the wall, or use it in Wi-Fi, it's easy to see the traffic with software like WireShark. But it seems more tricky to do it with a device that uses LTE/3G or other ...
29
votes
3answers
675 views

What are the best security practices to secure a remote IoT camera?

I have done a bit of home automation such as building a remote camera that can be turned on via SSH locally and publishes images on a Raspberry Pi run Linux server. I'm curious, though, as to what ...
54
votes
8answers
2k views

Securing small home automation setup

I have a small home automation lab (that I keep saying I'll expand, but haven't). In this setup, I have a control system to control lights (utilizing the x10 protocol), blinds, a Nest thermostat and ...

1 2
3