Context: Hole Punching is one of NAT traversal techniques. It was first designed for P2P applications where the two peers are both behind the NAT. In the context of IoT, this technique is implemented by some connected IP cameras to allow users to control their devices remotely through an intermediary cloud server (figure).

enter image description here

Source of the figure.

Question: What are flaws or vulnerabilities in this technique that a hacker may exploit to remotely attack an IoT deployment (e.g., Smart Home)

  • is there an authentication between the IoT device and the server when sending 'keep alive' messages ? – Houcine Amraoui Jan 13 '18 at 15:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.