Questions tagged [iot]

The tag has no usage guidance.

4
votes
2answers
94 views

How to do TLS on embedded devices in a home network?

If you have a router or webcam with a web interface on a home network, can the connection between the browser and the device be secured against a man in the middle attacker? What should device ...
1
vote
2answers
474 views

Is using both client side certificate and JWT for IoT device redundant?

Is there a case to be made for authorizing with both a client side certificate and JWT for an IoT device? Are JWTs good enough (assuming following of the specs)? And if client side certs are truly ...
3
votes
1answer
214 views

What are security problems with hole punching technique in the context of IoT?

Context: Hole Punching is one of NAT traversal techniques. It was first designed for P2P applications where the two peers are both behind the NAT. In the context of IoT, this technique is implemented ...
5
votes
0answers
209 views

What is the meaning if all IoT hacked by Mirai all over the world identify themselves on my server since 15 days in the rhythm of 180 unique IoT/h?

In the past 15 days 57,000 unique Mirai IoT devices have attempted to connect and it’s constantly growing (180 new IPs/h). 88.9% come one time and never come back. We have checked. It’s Mirai botnet, ...
4
votes
0answers
107 views

How can I properly secure the WiFi setup process of an IoT device?

My company develops a WiFi-connected IoT product. I want to make sure that the process of getting the user's WiFi credentials into the device is as safe as possible. At the moment, the product is in a ...
2
votes
0answers
65 views

One set of security standards for IoT devices?

In a recent hearing in the House of Representatives the question was asked whether it is feasible to create one set of security standards for all IoT devices. One of the panellists said yes and the ...
1
vote
0answers
97 views

Raspberry Pi with LAN, no WAN - Encryption Key Security - Zymbit/Zymkey

I am setting a up a Raspberry Pi that will be portable and often set up in areas without electricity or internet access and with poor cell service. I'd like to encrypt and decrypt data without ...
1
vote
0answers
25 views

Secure pairing support in various RF standards

I would like to understand if secure pairing can be implemented in all (or none)? IoT RF standards. For example: BLE provides Out-of-band possibility, which seems like only really secure option to me....
1
vote
0answers
449 views

How to steal a HTTP packet, change and re-send

I'm doing a project to my college and I have this scenario: Arduino (192.168.0.113): Receiving packets and send response My router (192.168.0.2): WPS from my gateway My gateway (192.168.0.1): Receive ...
1
vote
0answers
240 views

Malware Analysis for Internet of Things Malware

How do we do malware analysis for Non-Windows based datasets? In the Internet of Things, a good percentage of devices are neither windows based, nor Linux nor Mac nor Android. They are sensor and ...
1
vote
0answers
277 views

Using TLS Certificates in IoT Devices

I am not sure whether this is the exact forum to ask this question. If not please transfer it to another. Domain As we know the IoT is growing rapidly and millions of devices are invading our ...
0
votes
0answers
76 views

Google Home Hub Network Traffic on Port 8009

I noticed my desktop, that has never been used for anything related to google home or signed into the google account used to manage the Home Hub, that is on the same subnet was sending traffic to the ...
0
votes
0answers
24 views

Communicating with things on AWS IoT without certificates problem

Is "IAM" access the only method to gain access AWS? I'm asking because I'm using AWS IoT. With AWS IoT we create things such as devices on AWS IoT Core. However, with IAM access, after creating a "...
0
votes
0answers
70 views

IoT Device user needs to perform task requiring Windows admin privilege

Our IoT device runs only our application and the device users can not launch additional apps. The IoT device users and IoT device admins both run under normal (non-admin) accounts with identical ...
0
votes
0answers
46 views

encrypting traffic from legacy devices

I have a deployment of a few hundred meters that I'm walking into and all traffic is required to be encrypted with TLS. The manufacture of the meter will not update these meters to include an ...