Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [iot]

The tag has no usage guidance.

1
vote
0answers
240 views

Malware Analysis for Internet of Things Malware

How do we do malware analysis for Non-Windows based datasets? In the Internet of Things, a good percentage of devices are neither windows based, nor Linux nor Mac nor Android. They are sensor and ...
27
votes
8answers
6k views

Should firmware images for IoT be encrypted for security reasons?

When working with Internet of Things devices, is it recommend to obfuscate or encrypt firmware images pushed to clients? This to make reverse engineering harder. (They should be signed of course)
3
votes
1answer
1k views

How to brute force a login page of an IP camera created in .asp?

I am new to stackexchange. I desperately need some help. I am doing my thesis on 'IoT Threats', one of my objectives is to try to brute force into an IP camera. I am using Kali Linux Hydra to do the ...
2
votes
1answer
105 views

Why do cellphones not use software to simulate a NAT router between the phone and the internet?

Connecting through wifi adds the benefit of being behind NAT. Why do cellphones not simulate being behind a nat network when connecting directly to the internet to limit the attack surface? Or, is ...
1
vote
0answers
277 views

Using TLS Certificates in IoT Devices

I am not sure whether this is the exact forum to ask this question. If not please transfer it to another. Domain As we know the IoT is growing rapidly and millions of devices are invading our ...
-3
votes
1answer
91 views

Could someone execute an assassination by exploiting a connected thermostat? [closed]

With connected thermostats such as the Nest gaining popularity due to their convenience, I've been wondering for a while about the potential for exploiting its intended function rather than just using ...
4
votes
2answers
510 views

Does still make sense to use SHA1?

I'm working with Arduino and hash-based signatures which are signature schemes that use only hash functions. Due to the constraints of an Arduino I was thinking about using SHA1 as the underlying ...
0
votes
1answer
370 views

How to detect, if ESP32 or ESP2866 IoT devices hide malicious in their firmware?

ESP32 and ESP2866 devices are very famous as cheap IoT controller and connect via wireless LAN. Unfortunately the firmware of these devices is still closed source and quite large. It is there any ...
1
vote
0answers
89 views

Anomaly detection system for resource constraint nodes in IoT [closed]

I am looking for any open source implementation of anomaly based IDS for resource constrained nodes. As in Internet of things, we have heterogeneous endpoints with limited processing and storage. With ...
3
votes
1answer
169 views

How would an external attacker utilise universal plug and play to bypass a firewall?

I'm wondering what strategies and techniques are used to bypass firewalls which have universal plug and play. I'm aware of security issues regarding UPNP in the past but I've also heard that there ...
0
votes
0answers
45 views

encrypting traffic from legacy devices

I have a deployment of a few hundred meters that I'm walking into and all traffic is required to be encrypted with TLS. The manufacture of the meter will not update these meters to include an ...
1
vote
1answer
149 views

How to secure JavaScript-enabled login page without TLS

I am involved in an IoT project with single pager web UI. Unfortunately, as it was discovered in a hard way, TLS stack is not viable on the selected platform. The alternatives I've found for securing ...
2
votes
1answer
66 views

What strategy would one utilise in order to breach an entire network, after gaining access to an embedded device on said network?

I am currently researching IoT security and am trying to find out about how a single device with poor password security on a network could be utilised to gain access to the other components of said ...
1
vote
2answers
423 views

Updating the SSL fingerprint on an IoT device

I'm currently in the process of designing the security model for an IoT product my company is developing. The device will be connected to the internet via WiFi and shall communicate with our company'...
0
votes
1answer
95 views

How do I decide my specialization in cyber security? [closed]

I have done web security and interested in learning mobile security, IOT security, malware analysis etc. Will doing all of this make me "Jack of all but master of none". I have a limited time to ...
1
vote
1answer
102 views

What should be in top-down IoT Security Policy for companies engineering products to market? [closed]

You are a company creating consumer-facing IoT Devices, What things should go in a IoT product/data security policy? Initial thoughts: Privacy, Control Gates, cryptography, vulnerability/decision ...
2
votes
2answers
126 views

How to ensure a new key has propagated

I have a hub that communicates with an IoT device and needs to change the encryption key on that device at frequent intervals. Messages are AES-256-CBC encrypted using the old key, and the new key is ...
5
votes
0answers
209 views

What is the meaning if all IoT hacked by Mirai all over the world identify themselves on my server since 15 days in the rhythm of 180 unique IoT/h?

In the past 15 days 57,000 unique Mirai IoT devices have attempted to connect and it’s constantly growing (180 new IPs/h). 88.9% come one time and never come back. We have checked. It’s Mirai botnet, ...
1
vote
2answers
351 views

Secure Radio Frequency TX, RX module from replay attacks

Background I am building a Home Automation system using RF 315/433 MHz Transmitter-receiver module, an Ethernet shield and AT Mega AVR Micro controller(ATMega328 PPU) that works as follows. A set of ...
0
votes
1answer
56 views

Iot devices and wan security [duplicate]

How does my router know what requests to accept and which to ignore, when treating connection requests to the smart devices that originate from outside my network? I have no port forwarding ...
7
votes
1answer
565 views

How can IoT and other network devices access the internet if my router works as a firewall?

My understanding is that routers act as natural firewalls. In that context, how can an IoT device receive commands from the WAN if they are not initiated from within the LAN? In a specific example, ...
5
votes
1answer
1k views

How does Mirai infect IoT?

Since every IoT device uses different operating system, and has different hardware architecture, with so many possible platforms, how does Mirai infect them?
5
votes
2answers
708 views

IoT devices with public IP?

My understanding of worms like Mirai is the following: Try to telnet/ssh into random IPs using default user/pass credentials from various router/IoT manufacturers If you get in, do Bad Things™. It ...
3
votes
1answer
170 views

Are there any IoT Systematic Creation Security Checklists?

Are you aware of any publicly available documents that would help IoT/Connected product creators develop a systematic/programmatic approach and/or process to securing such new age devices?
12
votes
4answers
609 views

Is there a common standard for evaluating the Security of an IoT device?

When you write a paper about an implementing a classifying computer-vision/machine-learning algorithm, you can simply count the number of positive (correct) negatives/positives, and the number of ...
2
votes
0answers
65 views

One set of security standards for IoT devices?

In a recent hearing in the House of Representatives the question was asked whether it is feasible to create one set of security standards for all IoT devices. One of the panellists said yes and the ...
6
votes
1answer
133 views

secure IoT device/brand publication [closed]

I came across this article: 75 Percent of Bluetooth Smart Locks Can Be Hacked when I was looking for IoT stuff for my home. tl;dr is they tested 16 bluetooth smart locks and eventually only two were ...
2
votes
2answers
1k views

Detecting IOT Devices on Corporate Network? [closed]

I'm looking at trying to identify IOT devices which is sitting on my network. Any suggestions on what I can look for? Common ports being open? User agents?
3
votes
5answers
2k views

Could IOT Botnets be Stopped by Static IP addressing the Devices?

I followed the recent IOT DDOS against Dyn and noticed that the attack seemed have three rounds of attack and mitigation. Since I'm not well versed in infosec I did some reasearch around DDOS ...
3
votes
5answers
537 views

How can I secure my security cameras?

I have dozens of cheap security cameras in my offices. I was under the assumption that, once I changed the admin password, disabled the insecure "P2P Mode", disabled UPNP, disabled guest access and ...
56
votes
10answers
11k views

Does the local network need to be hacked first for IoT devices to be accessible?

I completely understand how IoT devices were used in the massive DDoS attacks because they are easily manipulated due to lack of firewalls, default passwords, etc. What I don't understand is although ...
0
votes
1answer
2k views

How to prevent my MI AIR purifier from listening on my wifi traffic?

So I recently bought MI Air purifier. It uses my wifi to get connected to internet. It needs to connect to internet so that I can monitor/control it from anywhere. Now, what kind of precautions do I ...
3
votes
2answers
178 views

Are there established and/or curated security benchmarks/best practices for home appliances and networks?

I have seen several security standards and best practices for organizations (CIS, HIPPAA, PCI DSS) but are there any for homes? If yes, where can I find them? It would be nice for homeowners to have ...