Dissecting IoT Device Provisioning Process

• DOI: 10.48550/arxiv.2310.14125
• Publication Date: 2023-01-01
• Authors: Rostand A. K. Fezeu; Timothy J. Salo; Amy Zhang; Zhili Zhang
• Keywords: Provisioning; Gateway (web page)

We examine in detail the provisioning process used by many common, consumer-grade Internet of Things (IoT) devices. find that this involves IoT device, vendor's cloud-based server, and a vendor-provided mobile app. In order to better understand process, we develop two toolkits. IoT-Dissect I enables us decrypt messages exchanged between device server II permits reverse engineer app observe its operation detail. several potential security issues with recommend ways mitigate these problems. Further, based on observations, conclude it is likely feasible construct vendor-agnostic home gateway will automate largely manual isolate devices their own network, perhaps open tight association an server.