V magistrski nalogi je narejena prestavitev IoT-sistemov, njihove arhitekture, topologija, komponent in tehnologije v uporabi. Zajeti so standardi, ki se uporabljajo v pametnih sistemih, ter protokoli teh standardov. Opisane so različne domene interneta stvari ter pozitivni in negativni učinki, ki jih prinašajo. En del je posvečen varnosti in zasebnosti interneta stvari s poudarkom na morebitnih nevarnostih in grožnjah. Narejena je tudi klasifikacija IoT-napadov. En del je posvečen tudi zaščiti IoT-naprav. Na koncu so prikazane prednosti in izzivi pri zaščiti IoT z varno strojno opremo. Našteti so tudi proizvajalci čipov in ponudniki IoT-rešitev ter na kratko opisan del njihovih izdelkov oziroma rešitev.
V praktičnem delu je prikazan del ranljivosti naprav, ki so že na trgu, ter opisano delovanje pametnih žarnic znamke Philips Hue. Opisana je tudi izvedba vdora v sistemu Philips Hue Starter Kit: zajem prometa, izedba DoS-napada in analiza ZigBee-prometa ter odkrivanje ranljivosti ZLL-profila.
| Language: | English |
|---|
| Title: | Security of Internet of Things |
|---|
| Abstract: |
|---|
In my master thesis I have presented the concept, developement and the usages of the Internet-of-things (IoT). I explain the architecture, topology and all the components of a simple IoT system and also the standards and the protocols that have to be considered. Highlighted are the different domains of IoT and the positive and negative effects they bring along. One part will be devoted to security and privacy with focus on the potential risks and threats. A classification of the possible IoT attacks will be made. One part will be devoted to counterattacks and protection of IoT devices and possible measures to enchance security and privacy. At the end I present the benefits and the challenges while using hardwarebased security solutions for IoT. Chip manufacturers and IoT solution providers are listed too.
Furthermore I present the security and safety concerns about the vulnerabilities of some of the smart devices that are already on the market. In the practical part of the work I tested the smart light bulb brand Philips Hue. I also present the intrusion that I performed on the system Philips Hue Starter Kit: WiFi and ZigBee traffic capture and then performance of DoS attack through WiFi network and detection of vulnerability on ZigBee LightLink.
|
| Keywords: | IoT, Internet-of-things, smart homes, smart lighting systems, security, vulnerabilities, WeMo Belkin Sensor Motion, Nest, Withings Smart Baby Monitor, Philips Hue White Starter Kit, ZigBee LightLink, DoS attack, Amazon, Microchip, AWSECC508. |
|---|
