Security threats in ZigBee-enabled systems: Vulnerability evaluation, practical experiments, countermeasures, and lessons learned

Proceedings of the Annual Hawaii International Conference on System Sciences

Volumn , Issue , 2013, Pages 5132-5138

  Vidgren, Niko ^a   Haataja, Keijo ^a   Patiño Andres, José Luis ^b   Ramírez Sanchis, Juan José ^b   Toivanen, Pekka ^a  

^a UNIVERSITY OF EASTERN FINLAND   (Finland)

^b UNIVERSITY OF VALENCIA   (Spain)

Author keywords

[No Author keywords available]

Indexed keywords

ATTACK SCENARIOS; LABORATORY ENVIRONMENT; LESSONS LEARNED; SECURITY COMPONENTS; SECURITY THREATS; VULNERABILITY EVALUATIONS; ZIGBEE SPECIFICATIONS; ZIGBEE TECHNOLOGY;

SYSTEMS SCIENCE;

ZIGBEE;

EID: 84875537166     PISSN: 15301605     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HICSS.2013.475     Document Type: Conference Paper

References (24)

1. ZigBee Alliance, ZigBee Specifications: ZigBee and ZigBee Pro. [Online]. Available: http://www.zigbee.org. [Accessed Sep. 6, 2012].
2. IEEE, IEEE 802.15.4-2003 Specification. [Online]. Available http://standards.ieee.org/getieee802/download/802.15.4-2003.pdf. [Accessed Sep. 6, 2012].
3. IEEE, IEEE 802.15.4-2006 Specification. [Online]. Available http://standards.ieee.org/getieee802/download/802.15.4-2006.pdf. [Accessed Sep. 6, 2012].
4. I. Pérez-González, My Bandwidth Is Wider Than Yours: Ultra-Wideband, Wireless USB and WiNET in Linux. [Online]. Available: http://ols.fedoraproject.org/OLS/Reprints-2007/perez-gonzalez-Reprint.pdf. [Accessed Sep. 6, 2012].
5. S. Farahani, ZigBee Wireless Networks and Transceivers, Newnes, Elsevier, Burlington, USA, 2008.
6. C. Alcaraz and J. Lopez, "A Security Analysis for Wireless Sensor Mesh Networks in Highly Critical Systems," IEEE Transactions on Systems, Man, and Cybernetics, Part C - Applications and Reviews, Vol. 40, No. 4, July 2010.
7. C. Karlof and D. Wagner, "Secure Routing in Wireless Sensor Networks: Attacks and Countermeasures," Elsevier Ad Hoc Networks, Vol. 1, pp. 293-315, 2003.
8. J. Wright, KillerBee: Practical ZigBee Exploitation Framework or "Wireless Hacking and the Kinetic World". [Online]. Available: http://www.willhackforsushi.com/presentations/toorcon11-wright.pdf. [Accessed Sep. 6, 2012].
9. R. Rodrigues da Silva Severino, On the Use of IEEE 802.15.4/Zig-Bee for Time-Sensitive Wireless Sensor Network Applications. [Online]. Available: http://www.cooperating-objects.eu/fileadmin/dissemination/2009-thesis-award/ severino.pdf. [Accessed Sep. 6, 2012].
10. I. Ramachandran, A. Das, and S. Roy, Analysis of the Contention Access Period of IEEE 802.15.4 MAC. [Online]. Available: http://www.ee.washington.edu/ research/funlab/Publications/2006/CAP-802-15-4-Analysis.pdf. [Accessed Sep. 6, 2012].
11. N. Sastry and D. Wagner, "Security Considerations for IEEE 802.15.4 Networks," in Proceedings of the 3rd ACM Workshop on Wireless Security, Philadelphia, USA, 2004, pp. 32-42.
12. R. Housley, RFC 5084 - Using AES-CCM and AES-GCM Authenticated Encryption in the Cryptographic Message Syntax (CMS). [Online]. Available: http://www.rfc-archive.org/getrfc.php?rfc=5084. [Accessed Sep. 6, 2012].
13. T. Goodspeed, "Extracting Keys from Second Generation Zigbee Chips," Black Hat USA 2009, Las Vegas, USA, 2009. [Online]. Available http://www.blackhat.com/presentations/bh-usa-09/GOODSPEED/BHUSA09-Goodspeed- ZigbeeChips-PAPER.pdf. [Accessed Sep. 6, 2012].
14. GoodFET Project. [Online]. Available: http://goodfet.sourceforge. net. [Accessed Sep. 6, 2012].
15. C. Misal, Analysis of Power Consuption of an End Device in a Zigbee Mesh Network, Master Thesis, University of North Carolina, Charlotte, North Carolina, USA, 2007.
16. Texas Instruments, CC2531 USB Hardware - User's Guide. [Online]. Available: http://www.ti.com/lit/ug/swru221a/swru221a.pdf. [Accessed Sep. 6, 2012].
17. Texas Instruments, SmartRF Protocol Packet Sniffer. [Online]. Available: http://www.ti.com/tool/packet-sniffer. [Accessed Sep. 6, 2012].
18. T. Buley, My Man, ZigBee. [Online]. Available: http://www.forbes.com/ 2009/01/11/zigbee-mirage-ces-tech-personal-cz-tb0112zigbee.html. [Accessed Sep. 6, 2012].
19. Telegesis Ltd., ZigBee Case Study, Hotech Edge Ltd Safely Networks Safes with ZigBee!. [Online]. Available: http://www.telegesis.com/downloads/general/ Hotech%20Edge%20success%20story.pdf. [Accessed Sep. 6, 2012].
20. Ember Corporation, ZigBee Slashes Hotel Energy Costs by up to 40 Percent. [Online]. Available: http://www.thefreelibrary.com/ ZigBee+slashes+hotel+energy+costs+by+up+to+40+percent.-a0154056797. [Accessed Sep. 6, 2012].
21. S. Pasanen, K. Haataja, N. Päivinen, and P. Toivanen, "New Efficient RF Fingerprint-Based Security Solution for Bluetooth Secure Simple Pairing," in Proceedings of the IEEE 43rd Hawaii International Conference on System Sciences (HICSS), Koloa, Kauai, Hawaii, Jan. 5-8, 2010.
22. K. Haataja, Security Threats and Countermeasures in Bluetooth-Enabled Systems, Ph.D. Diss., University of Kuopio, Department of Computer Science, Feb. 6, 2009.
23. M. Barbeau, J. Hall, and E. Kranakis, "Detecting Impersonation Attacks in Future Wireless and Mobile Networks," Lecture Notes in Computer Science, vol. 4074, pp. 80-95, Springer-Verlag, 2006.
24. O. Ureten and N. Serinken, "Wireless Security Through RF Fingerprinting," Canadian Journal of Electrical and Computer Engineering, vol. 32, no. 1, pp. 27-33, 2007.