John, a professional hacker, targeted CyberSol Inc., an MNC. He decided to discover the loT devices connected in the target network that are using default credentials and are vulnerable to various hijacking attacks. For this purpose, he used an automated tool to scan the target network for specific types of loT devices and detect whether they are using the default, factory-set credentials. What is the tool employed by John in the above scenario?

IoTSeeker is an open-source tool specifically designed to perform network scans to discover various types of Internet of Things (IoT) devices. Its primary function is to test whether these discovered devices are still using their default, factory-set credentials. This aligns perfectly with the scenario where John, the hacker, is using an automated tool to find IoT devices on the CyberSol Inc. network that are vulnerable due to default credentials. The tool's purpose is explicitly for security auditing and penetration testing of IoT devices.

B. IoT Inspector: This is a tool primarily for end-users to monitor their own network, analyzing traffic from their IoT devices to identify potential privacy and security risks, not for offensive scanning of external networks.

C. AT&T IoT Platform: This is a commercial, cloud-based service offered by AT&T for businesses to manage, connect, and scale their own IoT deployments. It is a management platform, not a hacking tool.

D. Azure IoT Central: This is a Microsoft cloud service (aPaaS) that enables users to build, manage, and maintain commercial-grade IoT solutions. It is a development and management platform, not a security scanning tool.

1. Bamakan

S. M. H.

Moghaddam

M.

& Niyato

D. (2020). Scanning the Scanners: A Survey of Tools for Discovering Vulnerable IoT Devices. IEEE Communications Surveys & Tutorials

22(1)

536-563. In Table IV on page 545

IoTSeeker is listed with the description: "Detects specific IoT devices and checks for default credentials." DOI: https://doi.org/10.1109/COMST.2019.2945518

2. Sharma

S.

& Gupta

M. (2020). A Review on IoT Security Tools. 2020 4th International Conference on Intelligent Computing and Control Systems (ICICCS)

1118-1123. The paper describes IoTSeeker as a tool that "scans a network for specific types of IoT devices to detect if they are using the default

factory-set credentials." DOI: https://doi.org/10.1109/ICICCS48265.2020.9121049

3. Hassan

W. H. (2019). Current research on Internet of Things (IoT) security: A survey. Computer Networks

148

283-294. This survey discusses vulnerabilities in IoT

including default credentials

and mentions tools used to discover such weaknesses

categorizing tools like IoTSeeker as scanners for identifying misconfigurations. DOI: https://doi.org/10.1016/j.comnet.2018.11.025