Security for oneM2M-Based Smart City Network: An OM2M Implementation

Integrating scalability, interoperability, and security has become crucial with the widespread adoption of Internet of Things (IoT)-enabled smart city solutions. In this context, the oneM2M provides promising technical specifications for an interoperable and secure IoT/M2M system. This paper focuses on the potential threats and their impact on oneM2M standard-based smart city deployments. Further, configurations for base-line security of the oneM2M open-source implementation, called eclipse OM2M, are presented. Recommendations are proposed based on actual on-ground tests conducted on OM2M-based smart city deployment of IIIT Hyderabad (IIIT -H) in India. The tests cover passive eavesdropping, performing replay attacks, brute force on credentials, denial of service, and analysis of access control policies.