43. IoT and OT Security – Cameras, Smart Devices, Plant Networks
Chala mitrano, Chapter 42 madhe IDS, firewall ani honeypot baghitla – aata IoT (Internet of Things – smart cameras, sensors, meters) ani OT (Operational Technology – plant / warehouse control, PLC, SCADA). CEH exam modules madhe IoT topic yeto, pan aapan he shikto defence-first: default password, open MQTT, IT–OT mix-up – kasa Blue harden karto. Ghabru naka – OWN host-only lab (Kali 192.168.56.10, Metasploitable 192.168.56.20, optional IoT target 192.168.56.50). Production plant / neighbour chi camera never. Lakshat theva: IT tools (aggressive scan, random reboot) OT madhe safety (सुरक्षा) todu shaktat – pehle isolation, mag test.
What you will learn in this chapter
- IoT vs OT / ICS / SCADA – CIA plus safety; why casual IT tools can hurt plants
- Attack surface: default creds, Telnet/HTTP, UPnP, exposed dashboards – Blue hardening
- Protocol awareness: MQTT, CoAP, Modbus/DNP3 concepts (no weaponized OT recipes)
- Mirai-class botnets – weak IoT, outbound C2, ISP/SME lessons
- Network segregation – IT/OT zones, jump hosts, firewalld allow-lists
- Internet-exposure awareness (search YOUR OWN lab IPs only; never scan strangers)
- Firmware / update / supply-chain hygiene for cameras and PLCs (concepts)
- Detection: odd outbound from IoT VLAN, failed logins, protocol anomalies
- Lab: Mosquitto MQTT or simple "camera" web UI on OWN Amazon Linux / Ubuntu VM
- Project Build-Hack-Fix for Sahyadri Traders + ethics / IT Act + purple interview lines
Lab scope
Practice only against systems you own in host-only / isolated lab (Kali 192.168.56.10, Metasploitable 192.168.56.20, optional IoT / MQTT / fake-camera VM e.g. 192.168.56.50). Never scan a neighbour's camera, shop DVR, factory PLC, or random public IP "to see if Mirai hits". Never publish Modbus write-attack runbooks, never flash unknown firmware on a live packing line, never use internet-search engines to mass-map strangers' devices. IT Act sections such as 43 and 66 apply if you access others' systems without authority (verify current text). Lab = learn hardening. Production OT = change control + safety review first.
Concepts in this chapter
- 43.1IoT vs OT / ICS / SCADA – CIA Plus Safety
- 43.2Attack Surface – Defaults, Telnet, HTTP, UPnP, Dashboards
- 43.3Protocol Awareness – MQTT, CoAP, Modbus, DNP3
- 43.4Mirai-Class Botnets – Weak IoT, Outbound C2
- 43.5Network Segregation – IT / OT Zones, Jump Hosts, firewalld
- 43.6Internet Exposure Awareness – Your Lab Only
- 43.7Firmware, Updates and Supply-Chain Hygiene
- 43.8Detection – Outbound IoT, Failed Logins, Protocol Oddities
- 43.9Lab – Mosquitto MQTT or Fake Camera UI on OWN VM
- 43.10Project, Ethics, IT Act and Purple Interview Lines
The chapter recap is at the end of the last concept page.