Testbed for LoRaWAN Security: Design and Validation through Man-in-the-Middle Attacks Study

Result code in IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216305%3A26220%2F21%3APU141457" target="_blank" >RIV/00216305:26220/21:PU141457 - isvavai.cz</a>

Result on the web

<a href="https://www.mdpi.com/2076-3417/11/16/7642/htm" target="_blank" >https://www.mdpi.com/2076-3417/11/16/7642/htm</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.3390/app11167642" target="_blank" >10.3390/app11167642</a>

Result language

angličtina

Original language name

Testbed for LoRaWAN Security: Design and Validation through Man-in-the-Middle Attacks Study

Original language description

The low-power wide-area (LPWA) technologies, which enable cost and energy-efficient wireless connectivity for massive deployments of autonomous machines, have enabled and boosted the development of many new Internet of things (IoT) applications; however, the security of LPWA technologies in general, and specifically those operating in the license-free frequency bands, have received somewhat limited attention so far. This paper focuses specifically on the security and privacy aspects of one of the most popular license-free-band LPWA technologies, which is named LoRaWAN. The paper's key contributions are the details of the design and experimental validation of a security-focused testbed, based on the combination of software-defined radio (SDR) and GNU Radio software with a standalone LoRaWAN transceiver. By implementing the two practical man-in-the-middle attacks (i.e., the replay and bit-flipping attacks through intercepting the over-the-air activation procedure by an external to the network attacker device), we demonstrate that the developed testbed enables practical experiments for on-air security in real-life conditions. This makes the designed testbed perspective for validating the novel security solutions and approaches and draws attention to some of the relevant security challenges extant in LoRaWAN.

Czech name

—

Czech description

—

Type

J_imp - Article in a specialist periodical, which is included in the Web of Science database

CEP classification

—

OECD FORD branch

20203 - Telecommunications

Project

<a href="/en/project/TK02030013" target="_blank" >TK02030013: Cyber-physical twin of tomorrow's municipal infrastructure</a><br>

Continuities

P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year

2021

Confidentiality

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Name of the periodical

Applied Sciences - Basel

ISSN

2076-3417

e-ISSN

—

Volume of the periodical

11

Issue of the periodical within the volume

16

Country of publishing house

CH - SWITZERLAND

Number of pages

17

Pages from-to

1-17

UT code for WoS article

000688730000001

EID of the result in the Scopus database

2-s2.0-85113447584