An IoT Adversary Emulation prototype tool

Abstract

Today, with the omnipresence of the Internet of Things (IoT) devices around the world, Cybersecurity threats have become a major concern. Security professionals who act as adversaries, or Red teams, play an important role in testing the security of those IoT devices. Adversary Emulation systems are one means towards identifying Cybersecurity vulnerabilities. In this paper, we review IoT malware in the literature and we propose an IoT Adversary Emulation prototype tool that covers different IoT malware techniques such as exploitation, evasion, data exfiltration and persistence. The prototype tool proposed has been tested using an IoT system composed of a router with IP cameras.