Loading...
Sustainable IoT Security:
Bajunaid, Leen
Bajunaid, Leen
Citations
Altmetric:
Type
Supervisor
Subject
Date
Collections
Research Projects
Organizational Units
Journal Issue
Abstract
As the Internet of Things (IoT) continues to grow, ensuring the security of interconnected
devices becomes increasingly vital. Hythrmia is an advanced IoT security scanning tool
developed to identify vulnerabilities in smart devices across multiple communication protocols, including WiFi, Bluetooth, Z-Wave, and Zigbee. The tool scans local networks to
detect potential security risks, such as open ports, weak passwords, outdated firmware,
and known vulnerabilities (CVEs). Currently, Hythrmia focuses on WiFi and Bluetooth
devices, o↵ering real-time discovery and analysis of connected devices. The tool employs
Nmap for port scanning and Hydra for brute-force testing to identify vulnerabilities like
weak or default passwords. Additionally, it integrates the Vulners API to cross-reference
detected devices with a database of known vulnerabilities, enabling users to quickly assess
and mitigate security risks. Initial tests demonstrated show that Hythrmia’s WiFi and
Bluetooth scanning capabilities e↵ectively detected devices with weak or default passwords. The tool successfully identified several common vulnerabilities, across a range of
smart devices. For example, during a test involving several Dahua cameras, the tool was
able to exploit weak passwords and gain unauthorized access to camera streams, highlighting significant security gaps in default configurations. These findings underscore the
importance of securing IoT devices within local networks. Although the tool’s full potential includes support for Z-Wave and Zigbee, the current focus on WiFi and Bluetooth has already demonstrated Hythrmia’s significant contribution to enhancing network security.
This project highlights the increasing demand for IoT security tools and demonstrates
how Hythrmia serves as an accessible solution for users to proactively manage and secure
their smart environments. Future work will aim to expand support for additional protocols, introduce automation features for continuous scanning, and enhance the overall
e↵ectiveness of the tool as a comprehensive IoT security solution