Preserving Privacy in secured ZigBee Wireless Sensor Networks

Jessye dos Santos (1) , Christine Hennebert (1) , Cédric Lauradoux (2)

1 CEA-LETI - Commissariat à l'énergie atomique et aux énergies alternatives - Laboratoire d'Electronique et de Technologie de l'Information
2 PRIVATICS - Privacy Models, Architectures and Tools for the Information Society

We expose concretely the information leakage occurring in an IEEE 802.15.4-based ZigBee meshed network. We deploy an IoT platform and used a killerbee sniffer to eavesdrop the communication between the motes. Metadata and control traffic are exploited in depth to recover protocol instances, routes, identity, capability and activity of the devices. We experiment different levels of security for the communications from none to the best available. Even when security is enforced, information leakages are not avoided. We propose simple countermeasures to prevent an outsider from monitoring a ZigBee network.

Mots clés: ZigBee WSN; security; privacy; attacks; eavesdropping; IDS

Domaines: Informatique [cs]

Jessye dos Santos, Christine Hennebert, Cédric Lauradoux. Preserving Privacy in secured ZigBee Wireless Sensor Networks. WF-IoT, Dec 2015, Milan, Italy. ⟨10.1109/WF-IoT.2015.7389142⟩. ⟨hal-03021182⟩