An Overview of UPnP-based IoT Security: Threats, Vulnerabilities, and Prospective Solutions

Golam Kayas, Mahmud Hossain, Jamie Payton, S. M.Riazul Islam

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

9 Citations (Scopus)

Abstract

Advances in the development and increased availability of smart devices ranging from small sensors to complex cloud infrastructures as well as various networking technologies and communication protocols have supported the rapid expansion of Internet of Things deployments. The Universal Plug and Play (UPnP) protocol has been widely accepted and used in the IoT domain to support interactions among heterogeneous IoT devices, in part due to zero configuration implementation which makes it feasible for use in large-scale networks. The popularity and ubiquity of UPnP to support IoT systems necessitate an exploration of security risks associated with the use of the protocol for IoT deployments. In this work, we analyze security vulnerabilities of UPnP-based IoT systems and identify attack opportunities by the adversaries leveraging the vulnerabilities. Finally, we propose prospective solutions to secure UPnP-based IoT systems from adversarial operations.

Original languageEnglish
Title of host publication11th Annual IEEE Information Technology, Electronics and Mobile Communication Conference, IEMCON 2020
EditorsRajashree Paul
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages452-460
Number of pages9
ISBN (Electronic)9781728184166
ISBN (Print)9781728184173
DOIs
Publication statusPublished - 22 Dec 2020
Externally publishedYes
Event11th Annual IEEE Information Technology, Electronics and Mobile Communication Conference - Virtual, Vancouver, Canada
Duration: 4 Nov 20207 Nov 2020
Conference number: 11

Publication series

NameIEEE Information Technology, Electronics and Mobile Communication Conference, IEMCON 2020
PublisherIEEE
ISSN (Print)2644-3155
ISSN (Electronic)2644-3163

Conference

Conference11th Annual IEEE Information Technology, Electronics and Mobile Communication Conference
Abbreviated titleIEMCON 2020
Country/TerritoryCanada
CityVirtual, Vancouver
Period4/11/207/11/20

Fingerprint

Dive into the research topics of 'An Overview of UPnP-based IoT Security: Threats, Vulnerabilities, and Prospective Solutions'. Together they form a unique fingerprint.

Cite this