2

Iota is intended to be deployed on IoT devices.

A problem with IoT devices is that they are placed in insecure locations, allowing attackers to gain physical access and perform advance/prolonged attacks without detection.

Under these condition, an attacker can obtain the seed and hence masquerade as the device.

I can't see anything in Iota that prevents this. Are there any mechanisms in place?

5
  • 1
    At least related: iota.stackexchange.com/questions/697/…
    – Helmar
    Jul 15, 2018 at 19:42
  • 1
    IMO, this out of scope (Iota is just the protocol). Better ask this kind of question on iot.stackexchange.com or security.stackexchange.com
    – ben75
    Jul 16, 2018 at 19:54
  • I can't see anywhere that says that Iota is just a protocol - it's an ecosystem according to the foundation, no? Device capture is a big issue in IoT and distributed systems. Does Iota do anything to solve this? Jul 16, 2018 at 20:56
  • "IOTA is a protocol that achieves consensus on the state of matters in a network." from iota.org. Iota, as a protocol, don't use the concept of seed. Similarly, the Bitcoin protocol don't say anything about the way to keep your keys secure. I just say that you shouldn't expect anything at protocol level regarding this issue. Security in IOT devices isn't specifically related to Iota, it's a more general problem.
    – ben75
    Jul 16, 2018 at 21:40
  • Yet here: blog.iota.org/iota-first-chapter-synopsis-506fdf874437 "this ‘second stage’ is all about taking advantage of IOTA’s modular lightweight nature by extending usability through modules/platforms built on top of the underlying IOTA fundament." Jul 18, 2018 at 9:54

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.