Penetration testing analysis on IP cameras in IoT ecosystems
Qiuyu Jin, Azana Hafizah Mohd Aman, Zainab Senan Mahmod Attar Bashi, Yahya Tuhami, Zulhilmi Che Azizan · The International Islamic University Malaysia Repository (The International Islamic University Malaysia) · 2026
As Internet of Things (IoT) devices become more common in homes and businesses, it is important to make sure they are safe from hackers and other security threats. This study uses Internet Protocol (IP) cameras as an example to analyze the security of Internet of Things (IoT) devices. Employing the PTES (Penetration Testing Execution Standard) methodology for penetration testing, the aim was to assess the security performance of the devices without knowledge of the device passwords. The test results revealed that only Denial of Service (DoS) attacks were successful, indicating that IP cameras are relatively secure in other respects. Based on these findings, the paper concluded that while IP cameras can resist unauthorized access to some extent, there is a need to enhance the security of credentials, especially in terms of rapid response and repair work following credential breaches. The study highlights the importance of credential security in IoT devices and suggests directions for future work to improve overall IoT security protection.