Every year, students grow, learn, and contribute to new findings through their master thesis projects at QRTECH. This year, QRTECH invites a pair (two) of students to embark on an exciting journey of innovation and research by exploring the development of a secure IoT module platform. This is a unique opportunity to dive into cutting-edge IoT and cybersecurity challenges, contributing to the next generation of connected devices.

Background

As the IoT ecosystem expands, the need for efficient, modular, and secure platforms has become paramount. IoT devices must balance performance, connectivity, and power efficiency while addressing increasingly sophisticated cybersecurity threats. This thesis will explore the development of an IoT module prototype, leveraging Nordic Semiconductor's nRF9160 (LTE-M) and nRF52840 (Bluetooth) microcontrollers alongside Zephyr RTOS, a lightweight and highly adaptable open-source operating system.

At the same time, we are curious about using the RUST programming language in IoT systems. Either in combination with Zephyr RTOS or with a RUST-based RTOS. 

The system will incorporate QRTECH's SDK, a development kit that accelerates implementation by providing pre-built tools and features. Beyond functionality and performance, this thesis will include a comprehensive cybersecurity risk analysis, identifying key attack vectors and proposing mitigation strategies to enhance the system's resilience.

Thesis proposal

It will be up to the students in cooperation with their supervisors and examiner to define the exact scope of work, but here is a brief:

• State-of-the-Art Analysis
  • Research current IoT platforms' capabilities, limitations, and security vulnerabilities, particularly those based on Nordic Semiconductor technologies and Zephyr RTOS.
  • Review existing cybersecurity measures for IoT systems and assess their applicability to this platform.
• RUST feasibility in IoT
  • Research the maturity of using RUST in IoT systems; what are the capabilities and limitations in hardware and common IoT protocols. 
  • Research maturity of RUST-based RTOS for Nordic Semiconductor microcontrollers. 
  • Research RUST in combination with C usage in Zephyr RTOS. What are the upsides and limitations of this approach. 
• System Design and Development
  • Design a modular IoT prototype with integrated LTE-M and BLE capabilities, prioritizing power efficiency and robust communication.
  • Incorporate cybersecurity measures from the design phase, ensuring the system is secure by default.
• Cybersecurity Risk Analysis
  • Conduct a risk analysis to identify potential attack vectors (e.g., communication channels, cloud integration, firmware updates).
  • Evaluate threats like unauthorized access, data interception, and firmware tampering.
  • Propose mitigation strategies, such as encryption, secure boot, and over-the-air (OTA) firmware update integrity verification.
• Prototype Implementation and Testing
  • Assemble a functional prototype using off-the-shelf components and the QRTECH SDK.
  • Implement and demonstrate core functionalities: message exchanges via LTE-M and BLE, CAN communication, cloud integration, and secure OTA firmware updates.
  • Test the system's resilience against identified attack scenarios.
• Performance Evaluation and Documentation
  • Measure system performance, including communication latency, power efficiency, and robustness under simulated attack conditions.
  • Document the design process, cybersecurity analysis, and proposed mitigation strategies.
• Future Work and Recommendations
  • Propose enhancements for industrial deployment, including environmental certifications and design refinements.
  • Suggest advanced cybersecurity measures for future IoT systems, such as AI-driven intrusion detection.

Deliverables

• IoT Prototype: A functional hardware and software system showcasing LTE-M, BLE, and cybersecurity features.

• Firmware: Zephyr RTOS or RUST-based RTOS application with integrated QRTECH SDK, enabling secure and efficient operation. 

• Cybersecurity Report: A detailed risk analysis with attack vector identification, mitigation strategies, and system resilience evaluation.

• Documentation: Comprehensive system design, implementation, and performance evaluation.

Why join QRTECH?

At QRTECH, we are passionate about innovation and sustainability. With state-of-the-art facilities and a collaborative environment, we provide the tools and guidance for students to excel. Our commitment to research and quality makes QRTECH the ideal partner for your academic and professional growth. Be a part of our mission to shape the future of IoT and secure connected devices!

References

• Zephyr Project, "About the Zephyr Project": https://www.zephyrproject.org/learn-about/
• Nordic Semiconductor, "nRF Connect SDK": https://www.nordicsemi.com/
• RUST-based RTOS, https://arewertosyet.com/