IoT Security Assessment via Adaptive Protocol Scanning

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

IoT devices, particularly in Industrial Control Systems and SCADA systems, are increasingly vulnerable to cyber-attacks due to connectivity through public networks, with legacy systems not designed to resist such threats and often unable to be upgraded or patched, posing significant risks to mission-critical systems.

Innovation Solution

A method and system for assessing vulnerability and penetration potential of IoT devices that use a single tool capable of adapting to various communication protocols and environments, performing vulnerability scans without installing software or hardware on the devices, and integrating penetration testing to identify cybersecurity risks before they materialize, utilizing wireless and wired communication mediums and software-defined radio technology.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If IoT devices are connected through public networks to enable data transfer and remote management, then connectivity and operational flexibility are improved, but vulnerability to cyber-attacks and security risks increase

Engineering Contradiction:
ImproveconnectivityVSAvoidcyber-attack vulnerability
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary vulnerability assessment and penetration testing before actual cyber-attacks can occur. By proactively identifying security weaknesses in IoT devices through automated scanning and testing mechanisms, the system enables preventive security measures to be implemented before vulnerabilities are exploited by malicious actors.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system establishes continuous feedback loops through repeated vulnerability assessments and security monitoring. The automated system continuously scans IoT devices, evaluates security posture, and provides feedback that enables ongoing security improvements and rapid response to newly discovered vulnerabilities in connected devices.

Inventive Principle:
Principle #23Feedback

2Object-affected harmful factors

If legacy ICS/SCADA systems are upgraded or patched to address security vulnerabilities, then security resistance is improved, but system compatibility and operational continuity may deteriorate

Engineering Contradiction:
Improvesecurity resistanceVSAvoidsystem compatibility
Core Design Contradiction:
Object-affected harmful factorsVSReliability

Solution Approach 1:

The vulnerability assessment system acts as an intermediary that evaluates security needs without requiring direct modification of legacy systems. By providing detailed security assessments and recommendations, the system enables security improvements to be implemented through controlled, targeted interventions rather than forced upgrades that could disrupt legacy ICS/SCADA operations.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system enables selective parameter changes by identifying specific vulnerabilities and recommending targeted security configurations or parameter adjustments rather than comprehensive system upgrades. This allows security improvements to be implemented by modifying only necessary parameters while preserving the overall stability and compatibility of legacy systems.

Inventive Principle:
Principle #35Parameter changes

3Adaptability or versatility

If multiple specialized tools are used to assess different types of IoT devices and communication protocols, then assessment comprehensiveness is improved, but system complexity and operational difficulty increase

Engineering Contradiction:
Improveassessment comprehensivenessVSAvoidtool complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system implements a universal vulnerability assessment platform that can evaluate multiple types of IoT devices across different communication protocols through a single integrated tool. The system automatically detects device types, selects appropriate assessment methodologies, and adapts testing parameters based on the target device, eliminating the need for operators to manually select and configure multiple specialized tools.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system performs self-service by automatically identifying IoT devices, determining their communication protocols, and selecting appropriate vulnerability assessment methods without requiring external configuration or multiple specialized tools. The automated system adapts its assessment approach based on detected device characteristics, reducing operational complexity while maintaining comprehensive coverage.

Inventive Principle:
Principle #25Self-service

4Measurement precision

If vulnerability assessment tools install software or hardware on IoT devices for testing, then assessment accuracy is improved, but device integrity and operational risk increase

Engineering Contradiction:
Improvevulnerability detection accuracyVSAvoiddevice integrity
Core Design Contradiction:
Measurement precisionVSReliability

Solution Approach 1:

The system introduces an intermediary assessment approach that evaluates vulnerabilities through external observation and analysis rather than direct installation on target devices. By using non-intrusive scanning and testing methods that monitor device responses without modifying device software or hardware, the system maintains device integrity while still achieving comprehensive vulnerability detection.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP3896591B1Method and system for security assessment of IoT devices
Publication Date: 2024.07.31 DEEPINSPECT SRL
  • EP3896591B1 patent drawingFigure 1

AI summary

A system (100) for security assessment of a plurality of IoT devices (210, 220, 230, 240) comprises a programmed processing unit (110) adapted to carry out a vulnerability and/or "penetration test" method; according to this method, at least wireless communication medium and at least one communication protocol are determined to be used for the assessment, then at least one scan tool is selected based on the communication medium and communication protocol, then the scan tool is executed on the IoT devices (210, 220, 230, 240), and then data from the scan tool are collected, the data being obtained from reaction of the IoT devices to the scan tool; the computerized system performs a scan of a predetermined frequency bandwidth in order to identify the IoT devices to be assessed and the communication protocol to be used for the assessment.