## 4 Proposed Work
These include creating an end-to-end application key, leaving a secured network, joining a secured network, distributing network-wide keys, updatingnetwork keys, managing network access and authenticating routers and end Zigbee devices, keeping frames safe, storing key credentials, and restoring important security and network configuration data. It also has security mechanisms for the Network APS Security sublayer. Figure 3 shows the proposed Zigbee IP protocol stack security with an attack landscape. Physical Layer Security (PHY) confronts several obstacles, and typical wireless physical layer security solutions are difficult to implement in Zigbee contexts [22]. Most Zigbee devices have modest data rate needs, periodic data traffic arrivals, minimal hardware, signal processing capabilities, and sensor levels. Various aspects must be considered, in  
Figure 2: ZigBee IP protocol stack architecture. cluding multi-path effects, fading, unpredictability, the sensors' geographically scattered nature, and heterogeneity. Furthermore, basic PHY assumptions include the adversarial model, the heart of the wireless channel, and practical considerations during implementation. As the IEEE 802.15.4 standard implies, PHY offers no security services. Additionally, communication devices must often share a standard secret key to use upper-level security services. A pre-shared private key is already pre-installed on each device on the network. PHY should work with upper layers to provide various security levels if security services are requested. Secure communication between Zigbee devices is made possible by the security of the IEEE 802.15.4 MAC layer protocols. The medium access control: These MAC layer protocols use AES-CCM encryption to maintain data integrity and guarantee data secrecy. The most commonly used technique for encrypting data on the MAC layer is AES. MAC layer protocols offer decent security services. However, certain important issues remain unaddressed. People typically view MAC layer security as more secure than the upper layers because it may safeguard MAC layer data and higher layer headers. Enabling MAC layer security eliminates the need for deposits at higher levels. Adaptation Layer Security: The adaptation layer facilitates communication between the network and internet layers by consolidating data from endpoint devices. Figure 2 shows that IPv6 needs a transmission unit of at least 1280 octets, but IEEE 802.15.4 limits the largest Zigbee MAC frame size to 127 bytes, which includes 25 bytes of frame overhead and only 102 bytes of content. Presume the link layer incorporates a security header into the MAC frame for security purposes. In the most unfavorable circumstance, the supplementary header size permits just 81 bytes for the IPv6 packet. A Zigbee frame is incapable of containing an IPv6 packet. Moreover, the top layers measure just 41 bytes, as the IPv6 header of an IPv6 packet is 40 bytes in length. Application data are sent using either the 8-byte User Datagram Protocol (UDP) header or the 20-byte Transmission Control Protocol (TCP) header, which are both part of the IPv6 header. The adaptation layer utilizes the \"IPv6 over Low- Power Wireless Personal Area Networks\" (6 LoWPAN) protocol, enabling communication across all Zigbee-enabled sensor nodes over IP. The 6 LoWPAN protocol facilitates direct communication between Zigbee IoT devices and Internet hosts [23; 24]. Upon receiving a request from the internet host or end user, the 6 LoWPAN protocol executes three fundamental services: The 6 LoWPAN protocol uses fragmentation and reassembly to meet the minimum MTU requirements of IPv6. Header compression removes potentially inferred information from link-level data or establishes common contextual assumptions. Link-layer forwarding enables the transfer of IPv6 datagrams over several hops.