A Testbed for Security and Privacy Analysis of IoT Devices
Ali Tekeoglu, Ali Şaman Tosun · 2016
With the rapid growth of Internet-of-Things (IoT) devices, security and privacy issues emerged as a potential roadblock for widespread adoption. Preliminary research indicates that many types of IoT devices have serious vulnerabilities. It is not easy to investigate security and privacy issues since each type of device is different and manual experiments need to be conducted on the device. In this paper, we propose a testbed for investigation of security and privacy issues of IoT devices. Fundamental approach used in the testbed is to capture layer 2 and layer 3 packets and to analyze the packets for various features. Proposed testbed is low cost and is based on off-the-shelf hardware and open source software. Using the testbed, we can investigate security and privacy issues of many IoT devices including HDMI sticks, IP cameras, activity trackers, smart watches and drones. A large set of experiments can be conducted on IoT devices using the testbed including vulnerability scans, identifying insecure protocol versions, investigation of firmware updates, authentication issues and privacy violations. Sample experimental results show the promise of the proposed testbed. We believe this testbed will serve as the foundation for a general framework to investigate securityand privacy issues of most IoT devices.