IOT SECURITY, ASSOCIATED MALWARE TRENDS AND VULNERABILITIES
Stefan Sabin NICULA, Răzvan Daniel Zota · International Conference on Informatics in Economy · 2020
The research analysis conducted on various IoT devices revealed security issues with patterns that are strongly related to the limitations in terms of implementation.This includes the technology-stack used, hardware capabilities and missing security best practices and standards.This paper tackles multiple vectors of attack that are threatening the privacy and security integrity level of IoT devices.Moreover, the research perspective covers the malware incident aspect, vulnerabilities that are affecting different components and the overall security level provided by the products.Given the relative early stages of IoT product development, comparison between the early and the current stage of web and mobile development phases with the IoT area displays certain similarities.Malware outbreaks are studied along with the impact of publicly known vulnerabilities, the attack surface of an IoT device and the mitigations enforced by some vendors.The security evaluation methodology was based on Penetration Testing practices, targeting all the components exposed by the IoT devices that were studied.This included the network capabilities, web and mobile applications and targeted the physical attack vectors as well.