This 16 byte key value is defined by the ZigBee Alliance. In ZigBee Home Automation, all devices are required to support the basic pairing mode known as EZ-mode commissioning, where various information is exchanged between the joining device and the network’s coordinator.įrom a security standpoint, two attributes are of particular interest: Learn more on how to set up a smart home network on Zigbee2MQTT’s project page.Ĭommissioning is the process of joining a new device into the ZigBee Home Automation network. Other (relatively inexpensive) tools needed are a Raspberry Pi, CC2531 USB stick and a few Zigbee-enabled smart devices, such as a smart bulb and temperature sensor. Setting up the environment for a simulated attackįirst, to set up a Home Automation network for a Proof-of-Concept (POC) exercise to demonstrate a possible attack, we used Zigbee2MQTT, an open-source solution that allows the use of Zigbee-enabled smart devices without the vendors’ bridges or gateways. The most common profile found in smart devices used in homes/offices is the ZigBee Home Automation Public Application Profile. With a formalised certification and compliance programme, certified devices will be able to operate with each other regardless of their brands or manufacturers. A profile defines the set of standard interfaces for inter-device communication.

To achieve interoperability, ZigBee uses “profiles” to permit different device types created by different manufacturers to exchange control messages. It consumes minimal power, has a low data rate, and works well in close proximity to other devices. ZigBee is an IEEE 802.15.4-based specification for a suite of high-level communication protocols that are used to create personal area networks (PANs) for IoT devices.

In our post, we show how attackers can eavesdrop on the IoT network, and what users can do to protect themselves.

ZigBee is a specification that is widely used for Internet of Things (IoT) infrastructure. A quick look into ZigBee security - is anyone in bee-tween?

Zigbee packet sniffer software