INVESTIGATION OF VULNERABILITIES IN INTERNET OF THINGS PLATFORMS AND PROTOCOLS USING PENETRATION TESTING METHODS

Abstract

The paper presents research findings related to the security of widespread Internet of Things (IoT) platforms and protocols, based on the analysis of existing vulnerability databases and practical penetration testing of IoT device networks using modern methods. An algorithm for collecting and extracting relevant data from the Common Vulnerabilities and Exposures (CVE) database has been developed. Additionally, a web interface for an interactive CVE table was created, facilitating the processing and visualization of large volumes of data in a convenient and clear format. The conducted analysis aimed to identify the most critical vulnerabilities that should be minimized through the introduction of a new authentication protocol for IoT devices and to define specific requirements for the protocol targeting identified vulnerabilities. During penetration testing of wireless networks, significant vulnerabilities were discovered in the examined IoT devices and the LoRaWAN wireless network. As a result, a dataset containing a list of IoT system vulnerabilities extracted from the CVE glossary, including descriptions of attack vectors and severity based on the Common Vulnerability Scoring System (CVSS), was compiled, along with practical recommendations for mitigating the vulnerabilities.

More by Tolegen Aidynov

• VOTINGONTOSEC: A SECURITY ONTOLOGY FOR RISK MODELING IN ELECTRONIC VOTING SYSTEMSScientific Journal of Astana IT University · 2026
• A BLOCKCHAIN-ORIENTED MODEL FOR ELECTRONIC VOTING WITH BIOMETRIC VOTER IDENTIFICATION AND DEEPFAKE-RESISTANT AUTHENTICATIONHerald of Kazakh-British technical university · 2026
• Reproducibility Package: Mask-Guided Copy-Paste Augmentation for Data-Efficient Railway Defect Detection on a Small Imbalanced DatasetZenodo · 2026
• A Parameterizable Research Framework for Electronic Voting Based on Cryptographic Protocols and Blockchain AuditCryptography · 2026