Teaching and Learning IoT Cybersecurity and Vulnerability Assessment with Shodan through Practical Use Cases
![Thumbnail](/dspace/bitstream/handle/2183/25707/T.M.Fern%c3%a1ndez-Carames-2020-Teaching-and-learning-iot-cybersecu.pdf.jpg?sequence=5&isAllowed=y)
Use este enlace para citar
http://hdl.handle.net/2183/25707
A non ser que se indique outra cousa, a licenza do ítem descríbese como Atribución 4.0 Internacional
Coleccións
- GI-GTEC - Artigos [190]
Metadatos
Mostrar o rexistro completo do ítemTítulo
Teaching and Learning IoT Cybersecurity and Vulnerability Assessment with Shodan through Practical Use CasesData
2020-05-27Cita bibliográfica
Fernández-Caramés, T.M.; Fraga-Lamas, P. Teaching and Learning IoT Cybersecurity and Vulnerability Assessment with Shodan through Practical Use Cases. Sensors 2020, 20, 3048. https://doi.org/10.3390/s20113048
Resumo
[Abstract] Shodan is a search engine for exploring the Internet and thus finding connected devices. Its main use is to provide a tool for cybersecurity researchers and developers to detect vulnerable Internet-connected devices without scanning them directly. Due to its features, Shodan can be used for performing cybersecurity audits on Internet of Things (IoT) systems and devices used in applications that require to be connected to the Internet. The tool allows for detecting IoT device vulnerabilities that are related to two common cybersecurity problems in IoT: the implementation of weak security mechanisms and the lack of a proper security configuration. To tackle these issues, this article describes how Shodan can be used to perform audits and thus detect potential IoT-device vulnerabilities. For such a purpose, a use case-based methodology is proposed to teach students and users to carry out such audits and then make more secure the detected exploitable IoT devices. Moreover, this work details how to automate IoT-device vulnerability assessments through Shodan scripts. Thus, this article provides an introductory practical guide to IoT cybersecurity assessment and exploitation with Shodan.
Palabras chave
IoT
Cybersecurity
Shodan
Teaching methodology
Use case based learning
Security audit
Vulnerabilities
Cyber-attacks
Vulnerability assessment
Cybersecurity
Shodan
Teaching methodology
Use case based learning
Security audit
Vulnerabilities
Cyber-attacks
Vulnerability assessment
Versión do editor
Dereitos
Atribución 4.0 Internacional
ISSN
1424-8220