Securing IoT Surveillance Airport Infrastructure

Over the last three decades, airports have adopted the Internet of Things (loT) technology in their core services. Luggage scanning, ticketing, and security checkpoints are be-coming increasingly automated, providing a more efficient and reliable process. However, loT merchants disregard the impor-tance of securing their devices, focusing only on the improvements following automation. This oversight has opened the door to numerous opportunities for attackers to exploit vulnerabilities in their system, resulting in damage to the company's reputation. Probable attacks are identified and ranked according to their respective damage to the system through threat modeling. After system implementation, cybersecurity professionals require peri-odic vulnerability assessments that outline potential shortcomings of the system's security to propose solutions to palliate the risks further. This project presents a test implementation of an loT-based camera system using open-source technologies and protocols commonly implemented in commercial solutions. The prototype monitors a given area in a remote location using servo motors that are connected to Raspberry Pis to support pan and tilt (PT) functionality for the cameras. This project aims to apply forensics methodologies typically used in information technology (IT) enterprise networks in the context of loT systems. OWASP's Risk Rating Methodology is used to identify and rate the likelihood and technical impacts of potential risks on the loT surveillance testbed network. Well-known and trusted tools were used to assess vulnerabilities in the system's implementation. Based on the results of the vulnerability assessment, a series of attacks were performed on the system to compromise the confidentiality, integrity, and availability of the system and data. The findings from these attacks were used to propose recommendations to secure loT systems in surveillance applications.