IoT System Design and Implementation Based on OWASP IoT Security Verification Standard

Information and Communication Technology (ICT) plays an important role in implementing Internet of Things (IoT) technology, which increases operational efficiency but also presents challenges related to security gaps. To overcome these challenges, it is necessary to design a secure system using reliable communication protocols such as Message Queuing Telemetry Transport (MQTT). Although designed for high-efficiency Machine-to-Machine (M2M) communication on low-bandwidth networks, the MQTT protocol is still vulnerable to attacks such as Man-in-the-Middle, Denial of Service, and Identity Spoofing. This study focuses on designing a secure IoT system by implementing the OWASP IoT Security Verification Standard (ISVS) by building a water monitoring system as a research test system. This system was developed using the System Development Life Cycle (SDLC) model with a waterfall approach. The results of the study show that the water monitoring system designed by the OW ASP ISVS requirements can meet the security standards needed to protect the system from various types of attacks. In addition, the implementation of OW ASP ISVS ensures that system communications are encrypted using the SSL protocol, thereby effectively addressing security threats such as Sniffing, Man-in-the-Middle, Denial of Service, and Identity Spoofing.