IoT Security Test Suite

Security Test Suites for IoT networks

4G-LTE

Security Test Suites for IoT networks

Overview

The Valid8 Security Test Suites are suitable for auditing security of IoT network nodes including Client and Server, according to standards including 3GPP.

What we Can Do For You

The solution is capable of simulating network elements either running standard or invalid / unexpected call-flows in order to wrap-around a device under test (DUT). It can simulate & test the following:

Client
Server

‍

By testing each node you can be confident your DUT can perform well under unusual or adverse conditions.

Why we’re Different

Scalable software-based architecture can run on a range of hardware from COTS and high-end customer provided hardware to Virtual Machines and the Cloud (e.g. Amazon AWS) for maximum versatility and performance
Web-based UI is easy to learn
HTTP API enable integration with automation test systems and other equipment
Stateful modeling provides accurate emulation of network elements

Features

Pre-made test scenarios and procedures
PASS / FAIL analysis, including plain English diagnostic reason
Valid / Invalid testing
Customizable source-code
User-configurable proprietary messages, IEs, headers
Animated test results action-replay
Easy to configure
Automatic execution of test batches
UDP, TCP, SCTP transport layer IPv4/IPv6 support
Suitable for Development and QA test lab environments, verifying protocol compliance, negative and robustness testing, Regression testing and Reproducing customer issues in the field

Additional Videos

Subsystems

Valid8 Security Test Suites are comprised of multiple subsystems that can be activated as needed to test the DUT. Traffic can be captured through the use of a remote capture tool such as Wireshark.

KPIs

Test Verdict - Pass, Fail or Inconclusive
Detailed message field validation

Configurable Parameters

IP address and port
Network layer- IPv4 / IPv6
Transport layer- UDP / TCP / SCTP / TLS
Phone numbers
Authentication - username and password
Unexpected message handling - Stop / Continue

Automation API

User commands can be fully automated using an HTTP API. This includes all control functions as well as collection of results and metrics. It can be integrated into any CI system including Jenkins, CircleCI, Gitlab and others. Our Autom8 Python framework is included to ease integration.

Scripting

The application can be edited directly in the browser using VTDL using Composer, a powerful development environment that includes error checking and a graphical view easing the creation and modification of scenarios. Codec Studio can be used to quickly build message templates from raw PDUs, as captured by tcpdump for example, to use in the scenarios.

PRODUCT OPTIONS

M5 Mobile UE Tester

Base Station Emulator for 4G eNodeB, 5G gNodeB RAN and mobile core to test UE devices including CPE router, phone, modem & IoT devices

Use Cases

No items found.

Summary of Specifications

Specifications

ETSI EN 303 645

OASIS MQTT 5.0

COAP IETF RFC 7252

CTIA Cybersecurity Certification Test Plan for IoT Devices Version 1.2.2

Product Details

Operating System

‍Protocol Engine (Linux-based)

User Interface

‍Browser-based, touch-optimized graphical user interface

Automation

‍HTTP API

Note:

Actual throughput levels over radio may vary based on the 3rd party device manufacturer and software versions. Valid8 product specifications are subject to change at any time without notice.