Zigbee as a candidate standard for use in anomaly detection in IoT LANs

Zigbee is a popular specification for Internet of Things (IoT) mesh networking that provides a suite of protocols built on the IEEE 802.15.4 standard for radio communication. The Zigbee protocol stack is designed as series of layers each with a specific set of functions for communicating data throughout the network. These protocols provide a comprehensive functionality for performing various network tasks, including commissioning new networks and devices, performing broadcasting, unicasting, groupcasting with end-to-end acknowledgement, securing network traffic through AES-128 encryption, and full-packet message authentication. Security features of the Zigbee protocol alone may not be a complete solution for deploying secure IoT networks. It has some vulnerabilities and real-world attacks as discussed in this paper. Zigbee may be improved upon or added to for the purpose of securing it using real-time anomaly detection in IoT Local Area Networks (LANs).