Back to Neural Archive

Independent project · current

IoT Security Monitor

Python- and cloud-oriented concept for real-time monitoring and anomaly detection across IoT devices, combining ESP32 embedded-security work with a simple analytics pipeline.

Repository

Fleet

4

Open alerts

2

Transport

MQTT + cloud analytics

Greenhouse node

esp-c3-01 · ESP32-C3 / MQTT

Firmware signed-1.4.2

Beacon 21/min · baseline 21/min

Lab door contact

esp-door-02 · ESP32 / BLE+WiFi

Firmware signed-1.3.0

Beacon 8/min · baseline 8/min

Yard camera

cam-03 · RTSP / ONVIF

Firmware vendor-2024.11

Beacon 64/min · baseline 64/min

MQTT broker

broker-04 · Mosquitto / TLS

Firmware 2.0.20

Beacon 12/min · baseline 12/min

Anomaly and hardening findings

IOT-12highcam-03

Unsigned firmware and default ONVIF credentials still enabled on the yard camera.

IOT-13mediumbroker-04

Anonymous MQTT listener detected on 1883. Lab policy requires TLS 8883 only.

Concept

Python collector on the LAN (see labs/iot-security-monitor) tails MQTT topics, scores beacon rate with a simple z-score, and flags unsigned firmware or open brokers. The greenhouse ESP32-C3 is the noisy node in this demo so the detector has something to catch. This is a lab — traffic is simulated in the browser.