Analys av säkerhetshot i Narrowband IoT-system: En systematisklitteraturöversikt

To support the growing needs of Internet of Things (IoT), Low Power Wide AreaNetwork (LPWAN) technologies have been introduced to offer energy efficient andscalable solutions for connecting IoT devices across wide areas with minimal energyconsumption. Narrowband Internet of Things (NB-IoT) is an LPWAN technologydesigned to enable large number of machine-type communications and supportapplications that require low data rates, long battery life, and wide coverage. However,the increased adoption of NB-IoT technology has raised concerns about the security ofthe systems that rely on it.The objective of this thesis is to help Tietoevery grow its knowledge in NB-IoTsecurity. This thesis investigates the security threats associated with NB-IoT systemsby conducting a systematic literature review to analyze these threats in existingresearch. The thesis covers four main areas: (1) Categorization of security threats inNB-IoT systems and explanation of how the threats occur; (2) Identification of thesecurity properties impacted by these threats (confidentiality, integrity, availability,and authentication); (3) Exploration and evaluation of existing security solutionsproposed by research to address the threats; (4) Examination of how these solutionsalign with security requirements from the Cyber Resilience Act, NIS2 Directive, andGDPR.The results indicate that NB-IoT systems are vulnerable to various types of threats thattarget specific or multiple layers of the system architecture. NB-IoT devices suffer fromweak credentials, vulnerable authentication mechanisms, lack of encryption in lowerprotocol layers, and exposure to attacks such as eavesdropping, targeted interference,device localization, packet delivery loops, connection resets, denial of service, andmore. Despite these findings, researchers have demonstrated awareness by proposingvarious methods and solutions to address these threats. Even though, there is no singlesolution that can fully eliminate all security risks, combining multiple approaches cansignificantly improve the security of NB-IoT systems. This thesis highlights the needfor ongoing research to fully understand and address the security challenges facing NB-IoT systems.