Publication detail

Testbed for LoRaWAN Security: Design and Validation through Man-in-the-Middle Attacks Study

POSPÍŠIL, O. FUJDIAK, R. MIKHAYLOV, K. RUOTSALAINEN, H. MIŠUREC, J.

Original Title

Testbed for LoRaWAN Security: Design and Validation through Man-in-the-Middle Attacks Study

Type

journal article in Web of Science

Language

English

Original Abstract

The low-power wide-area (LPWA) technologies, which enable cost and energy-efficient wireless connectivity for massive deployments of autonomous machines, have enabled and boosted the development of many new Internet of things (IoT) applications; however, the security of LPWA technologies in general, and specifically those operating in the license-free frequency bands, have received somewhat limited attention so far. This paper focuses specifically on the security and privacy aspects of one of the most popular license-free-band LPWA technologies, which is named LoRaWAN. The paper's key contributions are the details of the design and experimental validation of a security-focused testbed, based on the combination of software-defined radio (SDR) and GNU Radio software with a standalone LoRaWAN transceiver. By implementing the two practical man-in-the-middle attacks (i.e., the replay and bit-flipping attacks through intercepting the over-the-air activation procedure by an external to the network attacker device), we demonstrate that the developed testbed enables practical experiments for on-air security in real-life conditions. This makes the designed testbed perspective for validating the novel security solutions and approaches and draws attention to some of the relevant security challenges extant in LoRaWAN.

Keywords

LoRa; LoRaWAN; security; encryption; testbed; SDR; IoT; LPWAN

Authors

POSPÍŠIL, O.; FUJDIAK, R.; MIKHAYLOV, K.; RUOTSALAINEN, H.; MIŠUREC, J.

Released

20. 8. 2021

Publisher

MDPI

Location

BASEL

ISBN

2076-3417

Periodical

Applied Sciences - Basel

Year of study

11

Number

16

State

Swiss Confederation

Pages from

1

Pages to

17

Pages count

17

URL

https://www.mdpi.com/2076-3417/11/16/7642/htm

Full text in the Digital Library

http://hdl.handle.net/11012/201486

BibTex

@article{BUT172314,
  author="Ondřej {Pospíšil} and Radek {Fujdiak} and Konstantin {Mikhaylov} and Henri {Ruotsalainen} and Jiří {Mišurec}",
  title="Testbed for LoRaWAN Security: Design and Validation through Man-in-the-Middle Attacks Study",
  journal="Applied Sciences - Basel",
  year="2021",
  volume="11",
  number="16",
  pages="1--17",
  doi="10.3390/app11167642",
  issn="2076-3417",
  url="https://www.mdpi.com/2076-3417/11/16/7642/htm"
}