Citation

Attaullah, Hafiz Muhammad and Pathan, Al-Sakib Khan (2026) Penetration Testing and Risk Taxonomy Framework for NB-IoT Security. In: Ethical Hacking and Penetration Testing in Cybersecurity. IGI Global Scientific Publishing, pp. 213-258. ISBN 979-833733538-4, 979-833733536-0, 979-833733537-7

Text Penetration Testing and Risk Taxonomy Framework for NB-IoT Security _ IGI Global Scientific Publishing.pdf - Published Version Restricted to Repository staff only Download (1MB)

Abstract

As the deployment of Narrowband Internet of Things (NB-IoT) networks accelerates globally, their inherently constrained architecture and large-scale connectivity introduce critical security challenges. Hence, there is a need to present a penetration testing and risk assessment framework taxonomy specifically designed for NB-IoT ecosystems that would leverage ethical hacking methodologies. In this chapter, we conduct targeted vulnerability analysis using virtualized testbeds and industry-standard toolkits, simulating various attacks. We introduce a comprehensive risk taxonomy that categorizes threats across various NB-IoT network layers, including edge, core, device, and operational components. By mapping penetration testing results to this structured taxonomy, our study provides an effective means to evaluate risk severity, uncover security gaps, and recommend mitigation strategies. This work also addresses the ethical, and compliance aspects of penetration testing within IoT environments, ensuring responsible disclosure and alignment with recognized standards such as NIST and ETSI.

Item Type:	Book Section
Uncontrolled Keywords:	NB-IoT Security
Subjects:	Q Science > QA Mathematics > QA71-90 Instruments and machines > QA75.5-76.95 Electronic computers. Computer science
Divisions:	Faculty of Computing and Informatics (FCI)
Depositing User:	Ms Rosnani Abd Wahab
Date Deposited:	05 Oct 2026 03:23
Last Modified:	05 Oct 2026 03:23
URII:	http://shdl.mmu.edu.my/id/eprint/16867

Downloads

Edit (login required)