Abstract
The Internet of Things (IoT) has become an integral part of our lives, but it also poses a major security threat. As the number of IoT devices grows and more data is collected about us, malicious actors are taking advantage and launching attacks on vulnerable systems. Offensive security testing is a proactive approach of securing computing infrastructure through adversary simulation. This involves, understanding different attack tools that are available and how they can be used to attack devices. This paper studies the state of open-source tools which are available to test IoT networks that use the Zigbee and MQTT protocols. Usage of these tools are explained with attack examples, challenges are listed and enhanced tooling capabilities are proposed.
Original language | English |
---|---|
Title of host publication | 2023 Advances in Science and Engineering Technology International Conferences |
Publisher | IEEE |
ISBN (Electronic) | 9781665454742 |
DOIs | |
Publication status | Published - 20 Jul 2023 |
Event | 2023 Advances in Science and Engineering Technology International Conferences - Dubai, United Arab Emirates Duration: 20 Feb 2023 → 23 Feb 2023 |
Conference
Conference | 2023 Advances in Science and Engineering Technology International Conferences |
---|---|
Abbreviated title | ASET 2023 |
Country/Territory | United Arab Emirates |
City | Dubai |
Period | 20/02/23 → 23/02/23 |
Keywords
- internet of things
- mqtt
- open-source
- penetration-testing
- red-teaming
- vulnerability-assessment
- zigbee
ASJC Scopus subject areas
- Renewable Energy, Sustainability and the Environment
- Biomedical Engineering
- Control and Optimization
- Artificial Intelligence
- Computer Science Applications
- Decision Sciences (miscellaneous)
- Fuel Technology