IoT Goes Nuclear: Creating a Zigbee Chain Reaction

Ronen, Eyal; O’Flynn, Colin; Shamir, Adi; Weingarten, A.

doi:10.1109/msp.2018.1331033

Cited by 173 publications

(228 citation statements)

References 4 publications

Supporting

Mentioning

224

Contrasting

Order By: Relevance

“…Some of these bulbs, such as the popular Philips Hues, have been compromised and researchers showed how easy is to set up a car, or even a drone, that drives in a residential area aiming to infect as much bulbs as possible with a crippling malware. This malware is able to shut them down or even force them to flicker on and off at desired speed [12].…”

Section: A Security and Privacy Disastermentioning

confidence: 99%

The Internet of Hackable Things

Dragoni

Giaretta

Mazzara

2018

Advances in Intelligent Systems and Computing

View full text Add to dashboard Cite

show abstract

Section: A Security and Privacy Disastermentioning

confidence: 99%

The Internet of Hackable Things

Dragoni

Giaretta

Mazzara

2018

Advances in Intelligent Systems and Computing

View full text Add to dashboard Cite

show abstract

“…The example of the smart lamps in [14] is interesting because the global attack involved a first hardware attack (here, a Correlation Power Analysis, or CPA, attack) in order to extract the master secret key for each type of lamp; then the key was used to propagate a worm through Zigbee connections, the modified firmware being authenticated with the extracted key. With this combination of hardware and software attack, the researchers demonstrated their capability to take control of a very large number of lamps in a whole city area, making for example feasible a massive DDoS (Distributed Deny of Service) attack even making use of a drone to extend the attack area.…”

Section: Concrete Motivation Examples and The Need For Hardware Protementioning

confidence: 99%

Hardware Support for Security in the Internet of Things: From Lightweight Countermeasures to Accelerated Homomorphic Encryption

2018

View full text Add to dashboard Cite

Abstract:In the Internet of Things (IoT), many strong constraints have to be considered when designing the connected objects, including low cost and low power, thus limited resources. The confidentiality and integrity of sensitive data must however be ensured even when they have to be processed in the cloud. Security is therefore one of the design constraints but must be achieved without the usual level of resources. In this paper, we address two very different examples showing how embedded hardware/software co-design can help in improving security in the IoT context. The first example targets so-called "hardware attacks" and we show how some simple attacks can be made much more difficult at very low cost. This is demonstrated on a crypto-processor designed for Elliptic Curve Cryptography (ECC). A very lightweight countermeasure is implemented against Simple Power Analysis (SPA), taking advantage of the general processor usually available in the system. The second example shows how confidentiality in the cloud can be guaranteed by homomorphic encryption at a lower computational cost by taking advantage of a hardware accelerator. The proposed accelerator is very easy to implement and can easily be tuned to several encryption schemes and several trade-offs between hardware costs and computation speed.

show abstract

“…Indeed, Gent found that the adopted ZigBee network key can be retrieved if an attacker can sniff the reinitialization process accomplished by the bulbs after a reset and if he knows the ZigBee Light Link master key [36]. Another attack on ZigBee Light Link is proposed by Ronen et al, creating a worm that automatically infects adjacent bulbs, building a custom infected firmware, and being deployed as a fake OTA update [37].…”

Section: Related Workmentioning

confidence: 99%

Remotely Exploiting AT Command Attacks on ZigBee Networks

Vaccari

Cambiaso

Aiello

2017

Security and Communication Networks

View full text Add to dashboard Cite

Internet of Things networks represent an emerging phenomenon bringing connectivity to common sensors. Due to the limited capabilities and to the sensitive nature of the devices, security assumes a crucial and primary role. In this paper, we report an innovative and extremely dangerous threat targeting IoT networks. The attack is based on Remote AT Commands exploitation, providing a malicious user with the possibility of reconfiguring or disconnecting IoT sensors from the network. We present the proposed attack and evaluate its efficiency by executing tests on a real IoT network. Results demonstrate how the threat can be successfully executed and how it is able to focus on the targeted nodes, without affecting other nodes of the network.

show abstract

IoT Goes Nuclear: Creating a Zigbee Chain Reaction

Cited by 173 publications

References 4 publications

The Internet of Hackable Things

The Internet of Hackable Things

Hardware Support for Security in the Internet of Things: From Lightweight Countermeasures to Accelerated Homomorphic Encryption

Remotely Exploiting AT Command Attacks on ZigBee Networks

Contact Info

Product

Resources

About