Ethical Hacking in IoT Enabled Protocols

This document discusses the legal, ethical, social, and professional challenges in ethical hacking of IoT protocols. It covers topics such as the necessity to impart security to constrained devices, authorization and authentication of devices, management of device updates, securing communication, ensuring data privacy, securing mobile, web, and cloud-based applications, and ensuring high availability.

Running head: ETHICAL HACKING IN IOT ENABLED PROTOCOLS
ETHICAL HACKING IN IOT ENABLED PROTOCOLS
Name of the student:
Name of the university:
Author Note:

1ETHICAL HACKING IN IOT ENABLED PROTOCOLS
Table of Contents
Legal, Ethical, Social, Professional Challenges in Ethical hacking of IOT protocols...............2
Necessity to impart security to constrained devices (50).......................................................2
Authorization and authentication of devices (50)..................................................................2
Management of updates of the devices (50)..........................................................................2
Securing communication (50)................................................................................................3
Ensuring the privacy of the data (50).....................................................................................3
Securing mobile, web and cloud based applications (50)......................................................3
Ensuring high availability (50)...............................................................................................3
References..................................................................................................................................5

2ETHICAL HACKING IN IOT ENABLED PROTOCOLS
Legal, Ethical, Social, Professional Challenges in Ethical hacking of IOT
protocols
Necessity to impart security to constrained devices (50)
The encryption based security protocols are not suitable for the constrained IOT
enabled devices and applications (IBM Developer 2019). This owes to the incompetency of
these IOT enabled applications to successfully implement and execute complex encryption
and decryption (Christensen and Dannberg 2019). The vulnerabilities embedded within these
applications have exposed them to side channel attacks. The effectiveness of the
implementation of the IOT would successfully mitigate these vulnerabilities through the
incorporation of the multi-layer defense. This can be implemented through the segregation of
the devices into separate discrete networks.
Authorization and authentication of devices (50)
The authentication of the devices with a sole purpose of revealing their identity prior
to gaining access over the gateways is a prerequisite for the IOT enabled devices and
applications (IBM Developer 2019). The adoption of the IOT enabled platform renders
security to the applications and devices by facilitating the two-factor authentication (Ding, De
Jesus and Janssen 2019). IOT recommends the usage of robust certificates and potentially
strong passwords.
Management of updates of the devices (50)
The application of the updates essentially incorporates the security patches and
updating the software embedded on the IOT enabled devices, is accompanied by a number of

3ETHICAL HACKING IN IOT ENABLED PROTOCOLS
challenges (IBM Developer 2019). All the device specifications are not explicitly accustomed
to the coherent version of the available updates (Li et al 2018). The device management
critically monitors these updates and allocate the same for the applications and the devices.
Securing communication (50)
After securing the devices, the IoT secures the communication over the network
among the cloud service, application and devices (IBM Developer 2019). The IoT devices
never encrypt the messages of the sender before sending the messages over the network.. By
using the different networks in the isolated devices helps in establishing the privacy and
security of the communication in order to transmit the data confidentially.
Ensuring the privacy of the data (50)
Implementing the privacy of the data consists of the anonymizing or redacting the
confidential data before storing the data using decouple or data separation from the IoT data
payloads (IBM Developer 2019). If the information or the data is maintained, stored and
compliance with the legal frameworks, the confidential data should not be disposed, which is
the key challenge of ensuring the privacy of sensitive data.
Securing mobile, web and cloud based applications (50)
Cloud, mobile and web applications and the services are used for managing, process
and access the IoT data ad devices (IBM Developer 2019). They need to be secure as the part
of the multi-layered approach of the IoT security. While developing the IoT applications, it
needs to ensure te application of the secure practice for avoiding the risks. The application
should support the secure authentication by providing secure password and recovery options.

4ETHICAL HACKING IN IOT ENABLED PROTOCOLS
Ensuring high availability (50)
The developers of IoT should consider the availability of the IoT data and mobile and
web applications, which relies on the IoT data (IBM Developer 2019). The potential for the
disruption result the device failure and the outages connectivity. It arises as the attacks such
as denial of the service attack, which is more inconvenience. That is why ensuring the high
availability of the IoT data is very essential.

5ETHICAL HACKING IN IOT ENABLED PROTOCOLS
References
Christensen, L. and Dannberg, D., 2019. Ethical hacking of IoT devices: OBD-II dongles.
Ding, A.Y., De Jesus, G.L. and Janssen, M., 2019. Ethical Hacking for IoT Security: A First
Look into Bug Bounty Programs and Responsible Disclosure. arXiv preprint
arXiv:1909.11166.
Li, L., Li, Z., Shahriar, H., Rutherfoord, R., Peltsverger, S. and Tatum, D., 2018. Ethical
Hacking: Network Security and Penetration Testing.
Top 10 IoT security challenges. IBM Developer. (2019). IoT Security Issues: Top 10
Challenges. [online] Available at: https://developer.ibm.com/articles/iot-top-10-iot-security-
challenges/ [Accessed 1 Oct. 2019].