A RFID-based IoT Cybersecurity Lab in Telecommunications Engineering

The Internet of Things (IoT) is a distributed system of physical objects that requires the integration of hardware (e.g., sensors, actuators) and network communications in order to collect and exchange data. IoT smart objects need to be identified in some way to determine the origin of the data. One of the best-positioned technologies to perform identification is RFID (Radio Frequency Identification), which has gained a lot of popularity in applications like access control, payment cards or logistics. This paper presents a RFID-based IoT Cybersecurity laboratory: it provides a guideline for understanding and analyzing in depth the RFID technology from the cybersecurity point of view. The application is based on Proxmark3, which is a suite of HW/SW tools that facilitates message eavesdropping and emulation of both tags and readers. All the software, firmware and hardware that is described here is open source and open design.