A Comprehensive Analysis of Security Challenges in ZigBee 3.0 Networks

Area of Science:

• Computer Science
• Cybersecurity
• Wireless Networking

Background:

• ZigBee (IEEE 802.15.4) is a key IoT wireless standard facing persistent security challenges despite using AES encryption.
• Design constraints for low cost and low power in ZigBee devices often compromise security implementations.
• ZigBee 3.0 introduced enhanced security features, but empirical validation of their real-world effectiveness is lacking.

Purpose of the Study:

• To conduct a hardware-based security analysis of ZigBee 3.0 networks.
• To investigate vulnerabilities related to symmetric key security, network confidentiality, and Denial-of-Service (DoS) attacks.
• To evaluate the resilience of ZigBee 3.0 under different security models and propose mitigation strategies.

Main Methods:

• Hardware-based analysis using XBee 3 radio modules and ZigBee-compatible devices.
• Simulation of realistic attack scenarios under Centralised and Distributed Security Models.
• Investigation of symmetric key acquisition vulnerabilities and their impact on network confidentiality.

Main Results:

• ZigBee 3.0 demonstrates improvements over previous versions but retains exploitable vulnerabilities.
• Symmetric key security remains a concern, potentially impacting network confidentiality.
• The protocol shows susceptibility to Denial-of-Service (DoS) attacks.

Conclusions:

• Despite enhancements, ZigBee 3.0 networks are not fully secure against certain attacks.
• Practical security controls and best practices are necessary to mitigate identified vulnerabilities.
• This research provides valuable insights for securing constrained IoT environments and advancing protocol-level defenses.