Related Experiment Video
Updated: Jul 11, 2025

06:43
Effective Analysis of Human Exposure Conditions with Body-worn Dosimeters in the 2.4 GHz Band
Published on: May 2, 2018
7.1K
A Comprehensive Analysis: Evaluating Security Characteristics of Xbee Devices against Zigbee Protocol
Vlad Gavra1, Ovidiu A Pop1, Ionut Dobra2
1Faculty of Electronics, Telecommunications and Information Technology, Technical University of Cluj-Napoca, 400114 Cluj-Napoca, Romania.
Sensors (Basel, Switzerland)
|November 14, 2023
Summary
This study analyzes Xbee 3 device security, finding preconfigured link keys create vulnerabilities for man-in-the-middle attacks. Recommendations are provided for enhancing Zigbee network security in IoT applications.
Area of Science:
- Cybersecurity
- Wireless Sensor Networks
- Internet of Things (IoT)
Background:
- Sensor network security is critical, particularly for IoT applications.
- Zigbee protocol is widely used in wireless sensor networks.
- Xbee devices by Digi International are popular Zigbee implementations.
Purpose of the Study:
- To analyze the security features of Xbee 3 devices concerning the Zigbee protocol.
- To identify vulnerabilities and strengths in Xbee 3 security configurations.
- To propose enhanced security measures for Zigbee networks.
Main Methods:
- Real-time packet interception and analysis using Wireshark.
- Investigation of network formation, packet transmission, and security key usage.
- Evaluation of security in scenarios without security, distributed, and centralized modes.
Main Results:
- Xbee 3 devices exhibit security differences compared to the standard Zigbee protocol.
- Preconfigured global link keys in Xbee 3 devices present a significant vulnerability.
- Devices are susceptible to man-in-the-middle and replay attacks due to identified weaknesses.
Conclusions:
- Xbee 3 security features require careful consideration due to inherent vulnerabilities.
- Current security key establishment methods need validation and potential revision.
- Future research should explore asymmetric encryption for robust authentication.

