Security Vulnerability Analysis for IoT Devices Raspberry Pi using PENTEST

IoT device security is vital due to their involvement in collecting sensitive information from our environment. This study proves that IoT devices lack a defense mechanism to identify malicious or virus-infected files, making them vulnerable to various attacks. To test this, three different attacks (Man In The Middle, Backdoor, and Denial of Service (DoS)) were performed on a Raspberry Pi device using virtual machines. A comparison was made of the time taken to execute the attacks on the Raspberry Pi device versus the same attacks on a virtual machine with the Windows 10 operating system. The study shows that the Raspberry Pi with the Raspbian operating system is breached quicker than the Windows 10 operating system since it lacks a built-in software system to detect viruses or intrusions. The attacker takes 1 second to execute the Man In The Middle and backdoor attacks, whereas it takes 60 seconds for the Denial of Service (DoS) attack. (c) 2023 The Authors. Published by Elsevier B.V.