Johan Stokking, Tech Lead of The Things Network and CTO of The Things Industries talks about LoRaWAN Security.
Do you encounter any of the below points? Hoist the red flag and double check the credibility of the partner or service you are working with.
LoRaWAN Security Red Flags
- Use of ABP. Not secure, keys cannot be changed, must be shared with network operator
- Keys printed on paper or sent by email. Keys should not be visible (use Hareware Secure Modules/HSM), paper trail is impossible to clear
- Unable to choose a Join Server or operate your own. Platform lock-in, potentially unsafe storage of end device root keys
- Unable to choose an Application Server or operate your own. Application data may get compromised
- Same keys for multiple end devices. End devices need unique keys
- Hardcoded keys in end device. End devices should use a HSM
Learn more by viewing the full webinar, Johan will share some tips to discover security flaws and to boost the secure your deployment.
Links:
Webinar
LoRa Alliance Security White Paper
