Questions tagged [iot]

The tag has no usage guidance.

15 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
5
votes
0answers
211 views

What is the meaning if all IoT hacked by Mirai all over the world identify themselves on my server since 15 days in the rhythm of 180 unique IoT/h?

In the past 15 days 57,000 unique Mirai IoT devices have attempted to connect and it’s constantly growing (180 new IPs/h). 88.9% come one time and never come back. We have checked. It’s Mirai botnet, ...
4
votes
0answers
115 views

How can I properly secure the WiFi setup process of an IoT device?

My company develops a WiFi-connected IoT product. I want to make sure that the process of getting the user's WiFi credentials into the device is as safe as possible. At the moment, the product is in a ...
3
votes
1answer
239 views

What are security problems with hole punching technique in the context of IoT?

Context: Hole Punching is one of NAT traversal techniques. It was first designed for P2P applications where the two peers are both behind the NAT. In the context of IoT, this technique is implemented ...
2
votes
0answers
66 views

One set of security standards for IoT devices?

In a recent hearing in the House of Representatives the question was asked whether it is feasible to create one set of security standards for all IoT devices. One of the panellists said yes and the ...
1
vote
0answers
134 views

Raspberry Pi with LAN, no WAN - Encryption Key Security - Zymbit/Zymkey

I am setting a up a Raspberry Pi that will be portable and often set up in areas without electricity or internet access and with poor cell service. I'd like to encrypt and decrypt data without ...
1
vote
0answers
27 views

Secure pairing support in various RF standards

I would like to understand if secure pairing can be implemented in all (or none)? IoT RF standards. For example: BLE provides Out-of-band possibility, which seems like only really secure option to me....
1
vote
2answers
501 views

Is using both client side certificate and JWT for IoT device redundant?

Is there a case to be made for authorizing with both a client side certificate and JWT for an IoT device? Are JWTs good enough (assuming following of the specs)? And if client side certs are truly ...
1
vote
0answers
459 views

How to steal a HTTP packet, change and re-send

I'm doing a project to my college and I have this scenario: Arduino (192.168.0.113): Receiving packets and send response My router (192.168.0.2): WPS from my gateway My gateway (192.168.0.1): Receive ...
1
vote
0answers
245 views

Malware Analysis for Internet of Things Malware

How do we do malware analysis for Non-Windows based datasets? In the Internet of Things, a good percentage of devices are neither windows based, nor Linux nor Mac nor Android. They are sensor and ...
1
vote
0answers
282 views

Using TLS Certificates in IoT Devices

I am not sure whether this is the exact forum to ask this question. If not please transfer it to another. Domain As we know the IoT is growing rapidly and millions of devices are invading our ...
0
votes
0answers
47 views

Side channel resistant of Intel TinyCrypt library

Is the TinyCrypt library side channel resistant. I found a mentioned in the "Genral Remarks" on github. But it is mentioned that it is not fully side channel resistant. Does anyone know the extend ...
0
votes
0answers
101 views

Google Home Hub Network Traffic on Port 8009

I noticed my desktop, that has never been used for anything related to google home or signed into the google account used to manage the Home Hub, that is on the same subnet was sending traffic to the ...
0
votes
0answers
27 views

Communicating with things on AWS IoT without certificates problem

Is "IAM" access the only method to gain access AWS? I'm asking because I'm using AWS IoT. With AWS IoT we create things such as devices on AWS IoT Core. However, with IAM access, after creating a "...
0
votes
0answers
70 views

IoT Device user needs to perform task requiring Windows admin privilege

Our IoT device runs only our application and the device users can not launch additional apps. The IoT device users and IoT device admins both run under normal (non-admin) accounts with identical ...
0
votes
0answers
46 views

encrypting traffic from legacy devices

I have a deployment of a few hundred meters that I'm walking into and all traffic is required to be encrypted with TLS. The manufacture of the meter will not update these meters to include an ...