CoChat
Sign Up
Cited by 142IoT Networks and ProtocolsCryptographic Implementations and SecuritySecurity in Wireless Sensor Networks

The DOI matches its Crossref record.

Security Vulnerabilities in LoRaWAN

Open access
Yang, Xueying, Karampatzakis, Evgenios, Doerr, Christian, Kuipers, Fernando·2018·2018 IEEE/ACM Third International Conference on Internet-of-Things Design and Implementation (IoTDI)
DOI 10.1109/iotdi.2018.00022
Open this paper in CoChat — free account

Abstract

LoRaWAN is a MAC-layer protocol for long-range low-power communication. Since its release in 2015, it has experienced a rapid adoption in the field of Internet-of-Things (IoT). However, given that LoRaWAN is fairly novel, its level of security has not been thoroughly analyzed, which is the main objective of this paper. We highlight the security features present in LoRaWAN, namely activation methods, key management, cryptography, counter management, and message acknowledgement. Subsequently, we discover and analyze several vulnerabilities of LoRaWAN. In particular, we design and describe 5 attacks: (1) a replay attack that leads to a selective denial-of-service on individual IoT devices, (2) plaintext recovery, (3) malicious message modification, (4) falsification of delivery reports, and (5) a battery exhaustion attack. As a proof-of-concept, the attacks are implemented and executed in a controlled LoRaWAN environment. Finally, we discuss how these attacks can be mitigated or protected against.

Overview

Integrity signals

Registry

Crossref · 10.1109/iotdi.2018.00022

Cites

Statistics

Recomputing p-values needs the paper’s full text.

Verification

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Citations

Cites

No references could be resolved yet.

Research works printed but not linked: 15

  1. michorius, 2016, Whats mine is not yours: LoRa network and privacy of data on publishing devices, Twente Student Conference on IT
  2. 10.1109/PEMWN.2016.7842904 · DOI
  3. aras, 2017, Selective jamming of LoRaWAN using commodity hardware
  4. lee, 2017, Risk analysis and countermeasure for bit-flipping attack in LoRaWAN, Information Networking (ICOIN) 2017 International Conference on, 549
  5. dazell, 2012, Many time pad attack-crib drag
  6. 0, LoRa Alliance
  7. singh, 2016, Comparative study of internet of things infrastructures & security, Global Wireless Submit
  8. 10.1109/WF-IoT.2015.7389049 · DOI
  9. miller, 2016, LoRa security Building a Secure LoRa Solution
  10. blenn, 2017, LoRaWAN in the wild Measurements from the things network
  11. tomasin, 2017, Security analysis of Lo-RaWAN join procedure for internet of things networks, Wireless Communications and Networking Conference Workshops (WCNCW), 1
  12. zulian, 2016, Security threat analysis and countermeasures for LoRaWAN join procedure
  13. 10.13052/jcsm2245-1439.414 · DOI
  14. 2015, Gartner
  15. na, 2017, Scenario and countermeasure for replay attack using join request messages in LoRaWAN, Information Networking (ICOIN) 2017 International Conference on, 718

Cited by

Sorted by citations

Metadata

Authors
Yang, X., Karampatzakis, E., Doerr, C., & Kuipers, F.
Affiliations
Delft University of Technology (NL)
ORCID
Venue
2018 IEEE/ACM Third International Conference on Internet-of-Things Design and Implementation (IoTDI)
Publisher
IEEE
Published
2018-04
Pages
129-140
DOI
10.1109/iotdi.2018.00022
OpenAlex
W2807066473
Cited by
142
References
0
Citations by year
2026: 10 · 2025: 14 · 2024: 13 · 2023: 23 · 2022: 25 · 2021: 21 · 2020: 21 · 2019: 12 · 2018: 3
FWCI
22.73
Type
conference paper
Language
en
Open access
Licence
other-oa
Locations
  • IEEE/ACM International Conference on Internet-of-Things Design and Implementation (IoTDI) (publishedVersion)
  • Research Repository (Delft University of Technology) (submittedVersion)
  • Data Archiving and Networked Services (DANS) (submittedVersion, other-oa)
Topics
  • Physical Sciences › Engineering › Electrical and Electronic Engineering › IoT Networks and Protocols
  • Physical Sciences › Computer Science › Artificial Intelligence › Cryptographic Implementations and Security
  • Physical Sciences › Computer Science › Computer Networks and Communications › Security in Wireless Sensor Networks
Keywords
LoRaWAN, security vulnerabilities, Internet of Things, MAC layer protocol, replay attacks, denial-of-service attacks, plaintext recovery, message modification, key management, cryptography, activation method

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review