IEEE Consumer Electronics Magazine - May/June 2023 - 82

Analysis of Vulnerabilities
However, even if Arduino Yun seems to be a
great board to use in any environment, independent
boot of their two modules makes development
more complex. This complexity comes
from the need of handling possible reset of one
of the modules while the other keeps working.
Applications must be developed to take care of
the correctness of the sent and received data as
any unexpected data can make the system to
stop working.
Good practices are required in the development
and deployment of the systems. However,
the Arduino Company knows that no board or
software is vulnerability-free so a vulnerability
disclosure policy was created to ease vulnerabilities
reporting. This guideline is present on
its web as Coordinated Vulnerability Disclosure
Policy.49
ACKNOWLEDGMENTS
This work was supported in part by the
Higher Technical School of Industrial Engineering,
Universidad Nacional de Educacion a Distancia
(UNED) under Grant 2022-ETSII-UNED-11.
&REFERENCES
1. X. Jiang, M. Lora, and S. Chattopadhyay, " An
experimental analysis of security vulnerabilities in
industrial IoT devices, " ACMTrans. Internet Technol.,
vol. 20, no. 2, May 2020, Art. no. 16.
2. R. Kamal, EmbeddedSystems: Architecture,
Programming andDesign. New York, NY, USA:
McGraw-Hill, 2007.
3. What is Arduino?, Accessed: Jan. 15, 2022. [Online].
Available: https://www.arduino.cc/en/Guide/
Introduction
CONCLUSION
The present article has analyzed the security
vulnerabilities and weaknesses of five different
and representative Arduino boards, including
those with and without OS. The study looks for
vulnerabilities in hardware, software, and communications
components.
The results show different kinds of dangerous
vulnerabilities, from lack of protection
against malicious hardware access or against
buffer overflow to default configurations or easy
exposure to denial of service attacks. Even a better
platform, as Arduino Yun, exhibits nonencrypted
board communications.
All these weaknesses show that a careful
analysis and security management policy
must be taken into account when using Arduino
in production or critical environments.
Even when used for prototyping or learning
purposes, this lack of security design must
be balanced with the well-known and useful
low-cost features.
The main limitation shown by this study is
that, notwithstanding the good representation of
the different Arduino boards chosen, others
could have been studied to check if the results
would be different. This, however, will be the
object of a future work.
4. H. K. Kondaveeti et al., " A systematic literature review
on prototyping with arduino: Applications, challenges,
advantages, and limitations, " Comput. Sci. Rev.,
vol. 40, 2021, Art. no. 100364.
5. A. Raza, A. A. Ikram, A. Amin, and A. J. Ikram, " A
review of low cost and power efficient development
boards for IoT applications, " in Proc. Future Technol.
Conf., 2016, pp. 786-790.
6. P. N. Chou, " Skill development and knowledge
acquisition cultivated by maker education: Evidence
from Arduino-based educational robotics, " Eurasia J.
Math., Sci. Technol. Educ., vol. 14, no. 10, 2018,
Art. no. em1600.
7. E. Lee, " A meta-analysis of the effects of arduinobased
education in korean primary and secondary
schools in engineering education, " Eur. J. Educ. Res.,
vol. 9, no. 4, pp. 1503-1512, 2020.
8. M. Long, " Best arduino board for beginners, IoT
projects, and more, " Electro Maker, Accessed:
May 11, 2022. [Online]. Available: https://www.
electromaker.io/blog/article/best-arduino-board-2019for-beginners-iot-projects-and-more
9.
R. Mitchell, " Use this comparison of the UNO, nano,
mega, and due arduino boards to help you choose the
best board for your project, " MakerPro, Accessed: May
11, 2022. [Online]. Available: https://maker.pro/arduino/
tutorial/a-comparison-of-popular-arduino-boards
10. RoboticX, WEMOS D1 ESP8266 DEVELOPMENT
BOARD, Accessed: May 11, 2022. [Online]. Available:
https://roboticx.ps/product/wemos-d1-esp8266development-board/
82
IEEE
Consumer Electronics Magazine

https://www.arduino.cc/en/Guide/Introduction https://www.arduino.cc/en/Guide/Introduction https://www.electromaker.io/blog/article/best-arduino-board-2019-for-beginners-iot-projects-and-more https://www.electromaker.io/blog/article/best-arduino-board-2019-for-beginners-iot-projects-and-more https://www.electromaker.io/blog/article/best-arduino-board-2019-for-beginners-iot-projects-and-more https://maker.pro/arduino/tutorial/a-comparison-of-popular-arduino-boards https://maker.pro/arduino/tutorial/a-comparison-of-popular-arduino-boards https://roboticx.ps/product/wemos-d1-esp8266-development-board/ https://roboticx.ps/product/wemos-d1-esp8266-development-board/

IEEE Consumer Electronics Magazine - May/June 2023

Table of Contents for the Digital Edition of IEEE Consumer Electronics Magazine - May/June 2023