EC-Council Certified Ethical Hacker (CEH) v12Mobile Platform, IoT, and OT HackingMedium
A smart city project is deploying numerous IoT sensors across public infrastructure to monitor traffic flow and air quality. These sensors transmit data wirelessly to a central cloud platform. A critical security requirement is to ensure the confidentiality and integrity of the data during transmission, especially given the public nature of the network. Which IoT attack countermeasure is most effective for addressing this specific requirement?
- AStrong encryption and authentication protocols.
- BNetwork segmentation of the sensor network.
- CPhysical access controls for sensors.
- DRegular firmware updates for sensors.
Show answer & explanationAnswer & explanation
Correct answer: A. Strong encryption and authentication protocols.
To ensure confidentiality (prevent eavesdropping) and integrity (prevent tampering) of data transmitted wirelessly over a public network, strong encryption protocols (like TLS/SSL) and authentication mechanisms are essential. This protects the data itself during its journey.
Why the other options are wrong
- B. Network segmentation helps isolate devices but doesn't inherently protect data confidentiality/integrity when it leaves the segment over a public wireless link.
- C. Physical access controls prevent tampering with the device itself, but not data in transit.
- D. Regular firmware updates address vulnerabilities in the sensor's software, but not necessarily the real-time protection of data in transit.
IoT Data-in-Transit Protection
Measures implemented to secure data as it travels across networks, particularly for IoT devices transmitting sensitive information wirelessly.
- Primarily uses encryption protocols (e.g., TLS, DTLS).
- Authentication ensures only authorized devices send/receive data.
- Protects against eavesdropping, tampering, and man-in-the-middle attacks.
Memory trick: Encrypt and authenticate to shield IoT data on its journey.