Privacy and safety of narrowband internet of things devices

Abstract

Technology’s increasing role in everyday life has pushed the evolution of the internet of things (IoT), which now permeates industries like information technology, agribusiness, and transportation. Critical concerns in IoT security include platform diversity and issues with authentication and authorization. Critical vulnerabilities identified by researchers contain unencrypted communications, compromised interfaces, and compromised access control processes. A new solution, narrowband IoT (NB-IoT), has responded. Based on the cellular network, this technology is designed for improved security and efficiency, operating within the fourth-generation mobile networks and leveraging essential network components. The current study focuses on NB-IoT vulnerabilities, particularly in the radio segment, which is notably vulnerable. The research utilized the open-source tool OpenLTE and hardware like software-defined radio (SDR) in a setting with active NB-IoT sensors on an LTE network. This included deploying a test listening tool and a laboratory-based IMSI catcher to intercept active device communications in a testbed. The results highlight significant vulnerabilities: sensors were deactivated following simulated network attacks with rogue eNodeB and traffic area update (TAU) messages, revealing the technology’s susceptibility to connection failure.