Learning Internet of Things Security "Hands-on"

Area of Science:

• Computer Science
• Cybersecurity
• Electrical Engineering

Background:

• The Internet of Things (IoT) integrates sensing, computation, communication, and data processing.
• Commercial IoT components are widely available at low cost but often lack documented pedigrees.
• Existing research highlights significant security concerns within many IoT systems.

Purpose of the Study:

• To assess the interoperability and security of systems built with inexpensive, commercially available IoT components.
• To identify and analyze exploitable vulnerabilities in off-the-shelf IoT hardware and software.
• To understand the security implications of using low-cost components in practical IoT applications.

Main Methods:

• Procurement of various commercially available, low-cost IoT components.
• Development of small-scale, practical use cases to test component integration and functionality.
• Systematic analysis of security vulnerabilities through hands-on testing and exploitation attempts.

Main Results:

• Identified significant security flaws and interoperability challenges in common IoT components.
• Demonstrated the ease with which vulnerabilities in off-the-shelf parts can be exploited.
• Quantified the security risks associated with using low-cost, unvetted IoT devices.

Conclusions:

• Building functional IoT systems from cheap, readily available parts reveals substantial security risks.
• The lack of component pedigree and security features in low-cost IoT devices creates significant vulnerabilities.
• Urgent attention is needed to address the security challenges posed by the widespread adoption of inexpensive IoT technology.