LoRaWAN security issues and mitigation options by the example of agricultural IoT scenarios

Abstract

The Internet of Things (IoT) is a major trend that is seen as a great opportunity to improve efficiency in many domains, including agriculture. This technology could transform the sector, improving the management and quality of agricultural operations, for example, crop farming. The most promising data transmission standard for this domain seems to be Long Range Wide Area Network (LoRaWAN), a popular representative of low power wide area network technologies today. LoRaWAN, like any wireless protocol, has properties that can be exploited by attackers, which has been a topic of multiple research papers in recent years. By conducting a systematic literature review, we build a recent list of attacks, as well as collect mitigation options. Taking a look at a concrete use case (IoT in agriculture) allows us to evaluate the practicality of both exploiting the vulnerabilities and implementing the countermeasures. We detected 16 attacks that we grouped into six attack types. Along with the attacks, we collect countermeasures for attack mitigation. Developers can use our findings to minimize the risks when developing applications based on LoRaWAN. These mostly theoretical security recommendations should encourage future works to evaluate the mitigations in practice.

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

“…When it comes to the context of the Internet of Things, this layer is the most crucial, since it unifies the numerous forms of communication technology that make it possible for IoT devices to communicate with one another. Among the most popular of these communication methods are ZigBee [7], BLE (i.e., piconet) [8,9], 6LoWPAB [10][11][12], LoRaWAN [13][14][15], and readable tags.…”

Resilience in Agriculture: Communication and Energy Infrastructure Dependencies of German Farmers

“…Purely logical disruptions, like prefix hijacking, can also lead to major constraints with regard to the accessibility of a web service (Ballani et al 2007 ). Even on the level of farms, network technology like wireless sensor networks could be attacked (Kuntke et al 2022 ).…”

Internet of Things and Wireless Sensor Networks for Smart Agriculture Applications: A Survey

“…The architectural design of LoRaWAN nodes is structured into three distinct classes: A, B, and C [130]. Class A nodes exhibit minimal power consumption, efficiently transmitting a limited number of data packets to the gateway and spending most of their time idle [131]. In contrast, Class B nodes, in addition to the reception windows resembling Class A, open specific reception windows during scheduled time slots [130].…”