On 3 December 2024, the University of Twente officially opened its new IoT Cyberlab in the Zilverling building. The lab was officially opened by Prof.dr.ir. Boudewijn Haverkort, Dean of the Faculty of Electrical Engineering, Mathematics and Computer Science (EEMCS). In his opening speech, Haverkort described the lab as "a fantastic place where creativity can flourish" and emphasised its importance for research and education in the fields of cybersecurity and IoT.
This lab has been established to enhance research, education and collaboration in the field of cybersecurity within the Internet of Things (IoT) domain. It provides an innovative infrastructure for both researchers and students, with applications ranging from data collection to security analyses and testing.
Research, education, and practice
The IoT Cyberlab was founded with three primary objectives: to support research, strengthen education, and create a training environment. Research conducted in the lab focuses on the security and privacy of IoT systems, intrusion detection and response, firmware analysis, and large-scale vulnerability detection. By collecting data in a realistic setting, such as a simulated studio apartment, researchers can gain practical insights into the functionality and vulnerabilities of IoT devices.
For students, the lab offers a hands-on learning environment. It is integrated into various master’s programmes and serves as a location for thesis research and other assignments. In addition, the Twente Hacking Squad (THS) uses the lab as a training area to develop and test their skills in a controlled setting. For instance, during the opening, they demonstrated how a smart plug connected via Wi-Fi could be hacked to control devices without permission. They highlighted the critical nature of such vulnerabilities, particularly when smart devices are deployed within critical infrastructures.
Smart infrastructure in action
The IoT Cyberlab collaborates with national and international partners. These partnerships make the lab not only a research centre but also a venue for sharing knowledge with industrial stakeholders. For businesses, the lab serves as a source of data collection and a testing ground for developing security strategies.
The lab's technical infrastructure comprises over forty IoT devices, including Wi-Fi, BLE, and Zigbee devices, as detailed by researchers Andrea Continella and Roland van Rijswijk-Deij, along with Lab Manager Max Pijnappel. The lab collects approximately 10 GB of network traffic daily, which is used for research into threats and security solutions.
Uncovering vulnerabilities
During the opening, students from the Twente Hacking Squad (THS) demonstrated various vulnerabilities in IoT devices. In one striking demonstration, they hacked a smart plug connected to a Christmas tree. By only connecting to the Wi-Fi network, without device credentials, they were able to switch the lights on and off, showcasing how easily such devices can be manipulated. They also warned that such vulnerabilities could have far more serious consequences, such as compromising safety-critical devices (e.g., cameras, locks, medical devices). Additionally, they demonstrated how a home alarm system could be disabled with a single device by exploiting a simple 24-bit key, which could be cracked in just a few milliseconds. These demonstrations provided a clear insight into the real-world risks posed by such vulnerabilities.
The lab’s technical setup was also showcased, including a smart foosball table integrating IoT technology. PhD candidates presented posters on their research, and the event concluded with a networking opportunity where guests exchanged ideas about the lab’s future applications.
Towards a safer future together
The opening of the IoT Cyberlab reinforces the University of Twente's position as a frontrunner in cybersecurity and IoT research and education. In addition to serving as a research and training facility, the lab also invites industrial partners to "play" in its simulated environment, fostering collaboration and innovation in the development of solutions. This unique environment is ready to address the security challenges of tomorrow, ensuring safer and more resilient IoT systems.
