Vulnerability Analysis of IoT Platforms: A Case Study on Thinger.io

The rapid growth of the Internet of Things (IoT) has introduced significant security challenges due to the variety of communication protocols and the often-limited security measures in many devices.This paper presents a comprehensive set of techniques for evaluating the security of IoT protocols, including guided testing, fuzzing, symbolic execution, formal verification, and penetration testing.As a practical demonstration, guided testing and fuzzing are applied to the open-source Thinger.ioplatform to assess its communication protocols, uncovering critical vulnerabilities in WebSockets, MQTT, and proprietary protocols.The results illustrate the effectiveness of these methods in identifying security flaws and offer recommendations to improve the resilience of IoT systems.This work contributes to ongoing efforts to secure IoT ecosystems and cyber-physical systems by providing actionable insights and a methodology that can be applied across different platforms.