Questions tagged [security]

For questions relating to the security of IoT devices (especially those connected directly to the internet) and how to mitigate these issues or avoid them altogether. Do not confuse this with device safety (If it gets hacked it's a security question, if it explodes it's a safety question).

Filter by
Sorted by
Tagged with
9
votes
1answer
419 views

How do I generate a Time-based One-time Password with IFTTT?

I recently registered with IFTTT, which seems like a fantastic service to chain events together in order to create a smart home or automate various services. I've just found the Maker channel which ...
16
votes
1answer
568 views

How to implement Wi-Fi for a headless IoT device?

Recently I purchased a TP-Link HS100 smart plug which I configured using an app and all is working well. Now I am trying to understand the underlying software and hardware architecture for such an ...
14
votes
1answer
285 views

How to stop these toys from sending what my kids say to the cloud?

As reported by several news outlets like the Verge or ConsumerAffairs, the connected toys My Friend Cayla and the i-Que record what the kids say and send it back to a server to help answer kids' ...
11
votes
2answers
192 views

Is there a certificate to indicate the security level of IoT devices?

Is there any reliable certificate for IoT devices, which can be used to compare the provided security of these devices?1 Currently, the IoT landscape is completely scattered with different protocols, ...
12
votes
1answer
973 views

What, exactly, makes SPECK and SIMON particularly suitable for IoT devices?

For some IoT devices, the data that needs to be sent is confidential, and hence sending it in plain text is not acceptable. Therefore, I've been considering how to encrypt data sent between IoT ...
27
votes
4answers
4k views

How can I check if my IoT devices are infected with the Mirai worm?

I've recently heard about the Mirai worm, which infects vulnerable routers, IoT devices and other internet-connected appliances with insecure passwords. Mirai is suspected of being the cause of some ...
16
votes
3answers
165 views

Is the Subscriber-Publisher pattern applicable also to actuators?

There are tons of tutorials on the web, especially with RabbitMQ, on how to publish sensor data; for example, temperature, humidity, etc. Just publish the value to a message queue and anybody can ...
36
votes
5answers
2k views

Can I monitor my network for rogue IoT device activity?

In order to mitigate or manage the risk from having some of the devices on my home network compromised, is it feasible to monitor network traffic so as to detect a compromise? I'm specifically ...
8
votes
1answer
539 views

Best practices for secure Over The Air updates [closed]

What are the best security practices to follow when issuing an OTA update to a fleet of IoT devices? What are the significant causes for concern? For example, preventing an update from being ...
10
votes
1answer
534 views

Should I build isolated networks for IoT devices vs. regular computers? [duplicate]

In a home environment that will have both traditional computing activities (desktop and laptop computers, NAT storage devices, printers, etc.) and IoT devices (internet connected thermometers, ...
16
votes
1answer
766 views

Secure Home Network Partition for IoT Devices

What is the best approach to partitioning IoT devices from non-IoT devices at home? I have heard that setting up separate networks, one for IoT devices and one for everything else, is a good ...
12
votes
4answers
2k views

Securing 433 MHz wall light switch

I'm planning to use a simple light switch, that is placed on the wall. The switch gets power from the battery or piezo and sends unique sequences of data (on on- and on off-events) over 433 MHz to the ...
18
votes
2answers
2k views

How do I secure communication between app and IoT device?

I am currently working on a project that includes Bluetooth communication between a mobile application (currently using the Ionic platform) and an embedded device. For comparison, our product is ...
28
votes
2answers
1k views

Intercepting web traffic going over cellular network

If you can plug a device into the wall, or use it in Wi-Fi, it's easy to see the traffic with software like WireShark. But it seems more tricky to do it with a device that uses LTE/3G or other ...
27
votes
3answers
633 views

What are the best security practices to secure a remote IoT camera?

I have done a bit of home automation such as building a remote camera that can be turned on via SSH locally and publishes images on a Raspberry Pi run Linux server. I'm curious, though, as to what ...
53
votes
8answers
2k views

Securing small home automation setup

I have a small home automation lab (that I keep saying I'll expand, but haven't). In this setup, I have a control system to control lights (utilizing the x10 protocol), blinds, a Nest thermostat and ...

1 2
3