Security Testbed for Internet-of-Things Devices

Abstract

The Internet of Things (IoT) is a global ecosystem of information and communication technologies aimed at connecting any type of object (thing), at any time and in any place, to each other and to the Internet. One of the major problems associated with the IoT is maintaining security; the heterogeneous nature of such deployments poses a challenge to many aspects of security, including security testing and analysis. In addition, there is no existing mechanism that performs security testing for IoT devices in different contexts. In this paper, we propose an innovative security testbed framework targeted at IoT devices. The security testbed supports both standard and context-based security testing, with a set of security tests conducted under the different environmental conditions in which IoT devices operate. The requirements and architectural design of the proposed testbed are discussed, and the testbed operation is demonstrated in several testing scenarios. CCS Concepts• Security and privacy➝Systems Security➝Vulnerability management • Computing methodologies➝Machine learning.

Open challenges in vetting the internet‐of‐things

“…Out of the multiple references that we reviewed, the works of Palavicini Jr. et al and Siboni et al nicely overlap with our objectives. On the one hand, Palavicini Jr. et al apply symbolic analysis to vet, in a semiautomated way, Industrial IoT (IIoT) firmware using angr , a UC Santa Barbara binary analysis framework, and Mecanical Phish , a component from the same university's cyber reasoning system, to perform semiautomated analysis of IIoT.…”

“…On the other hand, Siboni et al discuss a security testbed for IoT devices that iTrust Lab has developed. 9 First they report on the experience of using an IoT search engine, SHODAN (www.shodan.io), to discover several vulnerabilities of IoT devices. It is worth noting that this experience targeted devices that were already in operation while we insist that vetting aims at detecting vulnerabilities prior to putting devices into operation (prevention is always better than correction).…”

“…On the other hand, Siboni et al discuss a security testbed for IoT devices that iTrust Lab has developed . First they report on the experience of using an IoT search engine, SHODAN (http://www.shodan.io), to discover several vulnerabilities of IoT devices.…”

A Reference Architecture for IIoT and Industrial Control Systems Testbeds

“…The testbeds are used for security analysis for water treatment and distribution networks, to assess detection mechanisms for cyber and physical attacks, as well as to understand cascading effects to other connected systems. The iTrust Internet of Things Automatic Security Testbed is a small-scale laboratory composed of GPS simulator, Wi-Fi localisation simulator, time simulator, and movement sensor, to simulate the different environmental conditions in which IoT devices operate [19]. The testbed supports standard and…”

A Modular IoT Hardware Platform for Distributed and Secured Extreme Edge Computing

“…The security issue in IoT is certainly gaining more attention presently, and new approaches are being proposed to improve this aspect. For instance, some authors present testbeds to approach the difficult task of assessing security in IoT deployments [7].…”