Explore chapters and articles related to this topic
Web Services for Embedded Devices
Published in Richard Zurawski, Industrial Communication Technology Handbook, 2017
Vlado Altmann, Hendrik Bohn, Frank Golatowski
Universal Plug-and-Play (UPnP) is a simple, easy-to-use SOA for small networks [5]. It supports ad hoc networking of devices and interaction of services by defining their announcement, discovery, and usage. Programming languages and transmission media are not assumed. Only protocols and interfaces are specified instead. The UPnP specification divides the device life cycle into six phases: Addressing, Discovery, Description (specifying automatic integration of devices and services), Control (operating a remote service/device), Eventing (subscribing to state changes of a remote service/device), and Presentation (URL representation of a service/device specifying its usage). UPnP also specifies a usage profile for distributed audio/video application—the UPnP AV architecture [6]. UPnP supports smaller networks only. With an increasing amount of services/devices, the amount of broadcast messages grows exponentially in a UPnP network. Furthermore, UPnP supports IPv4 only.
Loopholes in IoT Security Services
Published in Syed Rameem Zahra, Mohammad Ahsan Chishti, Security and Privacy in the Internet of Things, 2020
Shafalika Vijayal, Salim Qureshi
UPnP is a helpful method for permitting devices to discover different gadgets on your system and if necessary adjust your switch to take into consideration gadget access from outside of your system. Through the Internet Gateway Device Protocol, a UPnP customer can get the outside IP address for your system and include new port sending mappings as a major aspect of its arrangement procedure. This is incredibly advantageous from a buyer point of view as it enormously diminishes the multifaceted nature of setting up new gadgets. Lamentably, with this comfort comes numerous vulnerabilities and a history of large-scale assaults which have misused UPnP.
Ad Hoc Pervasive Environments
Published in Syed Ijlal Ali Shah, Mohammad Ilyas, Hussein T. Mouftah, Pervasive Communications Handbook, 2017
UPnP technology defines an architecture for pervasive peer-to-peer network connectivity. UPnP is a set of network protocols designed to make it easier to attach devices to computers and networks. UPnP standard specifications have been developed by the UPnP Forum, which currently consists of over 900 companies that work with and comply with the standard. The goal of UPnP is to allow devices to connect seamlessly and to simplify network implementation in the home and corporate environments. Toward this end, UPnP Forum defines and publishes UPnP device control protocols (DCPs) built upon open, Internet-based communication standards.
Countermeasures against large-scale reflection DDoS attacks using exploit IoT devices
Published in Automatika, 2021
Yong-joon Lee, Hwa-sung Chae, Keun-wang Lee
Under normal circumstances, the SSDP protocol is used to allow UPnP devices to broadcast their existence to other devices on the network. For example, when a UPnP printer is connected to a typical network, after it receives an IP address, the printer is able to advertise its services to computers on the network by sending a message to a special IP address called a multicast address. The multicast address then tells all the computers on the network about the new printer. Once a computer hears the discovery message about the printer, it makes a request to the printer for a complete description of its services. The printer then responds directly to that computer with a complete list of everything it has to offer. An SSDP attack exploits that final request for services by asking the device to respond to the targeted victim.