Investigating Security Vulnerability Related to Exposure and TLS Ecosystem in IoT Devices

Abstract

The Internet of Things (IoT) is popular for its ability to perform various smart and dedicated tasks, but its popularity has also made it a prime target for cyberattacks. Unfortunately, IoT security has been given less priority compared to functionality and performance during the design and implementation stages. Two major reasons behind the weak security of IoT devices are their exposure to potential attacks and the low adoption of secure Secure Sockets Layer(SSL)/Transport Layer Security(TLS) protocols. To address these issues, this paper examines the exposure of different categories of IoT devices and services using tools like Shodan and criminal infrastructure analysis. It also investigates the state of SSL/TLS implementation in IoT infrastructure. The research provides a list of exposed services and ports that can be exploited by attackers, highlighting the significant risks. Additionally, the study reveals that the implementation of SSL/TLS in the IoT ecosystem is concerning, although there has been a slight improvement compared to the previous year.