## 4 Security Challenges and Solutions in 5G Network and LPWAN-IoT
### Security Challenges and Solutions in LPWAN-IoT and 5G
#### 4.2.1 Security Challenges and Solutions in LPWAN-IoT
For instance, in a particular security breach in LoRa, the Signal moustrap was used as a target device. The hardware unit was altered to expose the UART serial lines between the MCU and the LoRa radio module. A regular FTDI chip was connected to the serial line to interrupt and capture all the transactions between them. Whenever the moustrap was reset, the host MCU issued commands to configure the network keys of the radio module. Using these keys and a custom LoRa device, a LoRa mouse trap can be impersonated to send data as if it were coming from the mouse trap [5]. The following security mechanisms or countermeasures can be implemented in LPWAN-IoT to mitigate the security challenges and vulnerabilities risks. Detailed illustrations are provided in [13; 67; 68; 69; 70; 71; 72]:  
* Secured credential provisioning
* Authentication (device, network, message, and subscriber). * Data confidentiality
* Virtual Private Network (VPN) security
* E2M (end to the middle) security and E2E (end-to-end) security
* Replay protection. * Reliable delivery
* Prioritization. * Updatability. * Network monitoring and filtering
* Algorithm negotiation
* Class break resistance. * Certified equipment
* Secured IP network  
Table 5 shows various security threats and their applicable countermeasures in LPWAN-IoT. The concerned security requirements are the security standards that can be breached by an attacker to launch an attack. Therefore, hardening the security standards or require  
ments will eliminate security breaches and vulnerabilities, thereby making it difficult for an attacker. The descriptions of the common security threats are provided below:  
* Replay attack: A replay attack is a playback attack in a network in which valid data transmission is maliciously or fraudulently repeated or delayed. It is carried out either by the originator or by an attacker who intercepts the data. The countermeasure to avoid this attack is replay protection such as random session key establishment used, which will be valid for single interaction between sender and receiver. Also, timestamps that come with a time limit can be used, attacker won't be able to send a message with expired timestamps. In addition, a one-time password (OTP) can be used every time a session is established, or data is sent across;
* Spoofing attack: A spoofing attack is when an attacker masquerades or impersonates another device or user on a network to launch attacks against network hosts, steal data, spread malware, or bypass access controls. Strong authentication can be used to avoid or mitigate spoofing attacks;
* DoS attack: Denial of service attack (DoS) is a threat in which an attacker floods a network with malicious data traffic to exhaust network resources, thereby, making the network services unavailable to the legitimate user. DoS can be avoided using firewalls, network monitoring, and filtering;
* Wormhole: An attacker forms a tunnel between two or more compromised nodes so that all the traffic is transmitted through it. The cybercriminal aims to modify the logical topology of the network location to impede network traffic. End-to-end (E2E) security and encryption can be used to avoid this attack;
* Signal jamming: An attacker deliberately jams or blocks the signal of legitimate wireless communications. This can be avoided by secured credential provisioning;
* Eavesdropping: It is the act of secretly or sneakily listening to the private communications of others without their consent to gather information. This can be mitigated by strong data confidentiality;
* Man in the middle attack: An attacker secretly relays or alters the communications between two entities that are directly communicating with each other, thereby, intercepting the message with possible modification. This can be avoided using a reliable delivery mechanism;
* Floods attack: This is like a denial-of-service attack (DoS) and can be mitigated using firewalls, network monitoring, and filtering.