Publicação
A comprehensive examination of cybersecurity in communication protocols utilized by home automation technologies : an in-depth exploration of potential vulnerabilities and mitigative strategies
| Resumo: | The rapid expansion of smart-home ecosystems has widened the attack surface of domestic networks, making the security of Internet of Things (IoT) communication protocols increasingly critical. This thesis evaluates how the main wireless technologies used in home automation Zigbee, Z-Wave, Bluetooth Low Energy (BLE), and Wi-Fi comply with the security requirements of European Telecommunications Standards Institute (ETSI) EN 303 645.The research analyses protocol-level and device-level vulnerabilities using an experimental approach that includes packet capture, adversarial testing, cloud-domain inspection, and an ETSI aligned scoring method. Tests were performed on two representative devices per protocol in a controlled laboratory environment. Results show significant security discrepancies across protocols and products, with weaknesses in pairing, key management, replay protection, and Denial-of-service (DoS) resilience. Several devices failed essential ETSI requirements related to secure communication and update integrity. The thesis delivers a reproducible evaluation methodology, a quantitative ETSI based scoring model, and practical recommendations to strengthen IoT security from device to cloud. |
|---|---|
| Autores principais: | Alves, Joel Dinis Pereira |
| Assunto: | IoT Smart home Cybersecurity Zigbee Z-Wave BLE Wi-Fi ETSI EN 303 645 Vulnerability analysis Casa inteligente Cibersegurança Análise de vulnerabilidades |
| Ano: | 2026 |
| País: | Portugal |
| Tipo de documento: | dissertação de mestrado |
| Tipo de acesso: | acesso aberto |
| Instituição associada: | Instituto Politécnico de Viana do Castelo |
| Idioma: | inglês |
| Origem: | Repositório Científico IPVC |
| Resumo: | The rapid expansion of smart-home ecosystems has widened the attack surface of domestic networks, making the security of Internet of Things (IoT) communication protocols increasingly critical. This thesis evaluates how the main wireless technologies used in home automation Zigbee, Z-Wave, Bluetooth Low Energy (BLE), and Wi-Fi comply with the security requirements of European Telecommunications Standards Institute (ETSI) EN 303 645.The research analyses protocol-level and device-level vulnerabilities using an experimental approach that includes packet capture, adversarial testing, cloud-domain inspection, and an ETSI aligned scoring method. Tests were performed on two representative devices per protocol in a controlled laboratory environment. Results show significant security discrepancies across protocols and products, with weaknesses in pairing, key management, replay protection, and Denial-of-service (DoS) resilience. Several devices failed essential ETSI requirements related to secure communication and update integrity. The thesis delivers a reproducible evaluation methodology, a quantitative ETSI based scoring model, and practical recommendations to strengthen IoT security from device to cloud. |
|---|
Atividades financiadas
Não foram encontrados projetos financiados.