{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,11]],"date-time":"2026-05-11T10:19:37Z","timestamp":1778494777704,"version":"3.51.4"},"reference-count":49,"publisher":"MDPI AG","issue":"12","license":[{"start":{"date-parts":[[2018,12,16]],"date-time":"2018-12-16T00:00:00Z","timestamp":1544918400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["1642124"],"award-info":[{"award-number":["1642124"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>The emerging connected, low-cost, and easy-to-use air quality monitoring systems have enabled a paradigm shift in the field of air pollution monitoring. These systems are increasingly being used by local government and non-profit organizations to inform the public, and to support decision making related to air quality. However, data integrity and system security are rarely considered during the design and deployment of such monitoring systems, and such ignorance leaves tremendous room for undesired and damaging cyber intrusions. The collected measurement data, if polluted, could misinform the public and mislead policy makers. In this paper, we demonstrate such issues by using a.com, a popular low-cost air quality monitoring system that provides an affordable and continuous air quality monitoring capability to broad communities. To protect the air quality monitoring network under this investigation, we denote the company of interest as a.com. Through a series of probing, we are able to identify multiple security vulnerabilities in the system, including unencrypted message communication, incompetent authentication mechanisms, and lack of data integrity verification. By exploiting these vulnerabilities, we have the ability of \u201cimpersonating\u201d any victim sensor in the a.com system and polluting its data using fabricated data. To the best of our knowledge, this is the first security analysis of low-cost and connected air quality monitoring systems. Our results highlight the urgent need in improving the security and data integrity design in these systems.<\/jats:p>","DOI":"10.3390\/s18124451","type":"journal-article","created":{"date-parts":[[2018,12,18]],"date-time":"2018-12-18T02:15:59Z","timestamp":1545099359000},"page":"4451","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":28,"title":["On the Security and Data Integrity of Low-Cost Sensor Networks for Air Quality Monitoring"],"prefix":"10.3390","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5627-3521","authenticated-orcid":false,"given":"Lan","family":"Luo","sequence":"first","affiliation":[{"name":"Department of Computer Science, University of Central Florida, Orlando, FL 32816, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yue","family":"Zhang","sequence":"additional","affiliation":[{"name":"College of Information Science and Technology, Jinan University, Guangzhou 510632, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bryan","family":"Pearson","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Central Florida, Orlando, FL 32816, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9691-8702","authenticated-orcid":false,"given":"Zhen","family":"Ling","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Southeast University, Nanjing 211189, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Haofei","family":"Yu","sequence":"additional","affiliation":[{"name":"Department of Civil, Environmental and Construction Engineering, University of Central Florida, Orlando, FL 32816, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xinwen","family":"Fu","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Central Florida, Orlando, FL 32816, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2018,12,16]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"9592","DOI":"10.1073\/pnas.1803222115","article-title":"Global estimates of mortality associated with long-term exposure to outdoor fine particulate matter","volume":"115","author":"Burnett","year":"2018","journal-title":"Proc. Natl. Acad. Sci. USA"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"2224","DOI":"10.1016\/S0140-6736(12)61766-8","article-title":"A comparative risk assessment of burden of disease and injury attributable to 67 risk factors and risk factor clusters in 21 regions, 1990\u20132010: A systematic analysis for the Global Burden of Disease Study 2010","volume":"380","author":"Lim","year":"2012","journal-title":"Lancet"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"10","DOI":"10.1016\/j.buildenv.2015.03.035","article-title":"Indoor air quality requirements in green building certifications","volume":"92","author":"Wei","year":"2015","journal-title":"Build. Environ."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"8217","DOI":"10.5194\/acp-15-8217-2015","article-title":"Particulate matter, air quality and climate: Lessons learned and future needs","volume":"15","author":"Fuzzi","year":"2015","journal-title":"Atmos. Chem. Phys."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"4535","DOI":"10.1016\/S1352-2310(99)00272-1","article-title":"Indoor air quality and health","volume":"33","author":"Jones","year":"1999","journal-title":"Atmos. Environ."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"1178","DOI":"10.1016\/S0140-6736(18)32391-2","article-title":"Reduce air pollution to beat NCDs: From recognition to action","volume":"392","author":"Neira","year":"2018","journal-title":"Lancet"},{"key":"ref_7","first-page":"147","article-title":"Integrating sensor monitoring technology into the current air pollution regulatory support paradigm: Practical considerations","volume":"4","author":"Hall","year":"2014","journal-title":"Am. J. Environ. Eng."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"6999","DOI":"10.1021\/acs.est.7b00891","article-title":"High-resolution air pollution mapping with Google street view cars: Exploiting big data","volume":"51","author":"Apte","year":"2017","journal-title":"Environ. Sci. Technol."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"5334","DOI":"10.1021\/es100008x","article-title":"Near-roadway air quality: Synthesizing the findings from real-world data","volume":"44","author":"Karner","year":"2010","journal-title":"Environ. Sci. Technol."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"5281","DOI":"10.5194\/amt-9-5281-2016","article-title":"Community Air Sensor Network (CAIRSENSE) project: Evaluation of low-cost sensor performance in a suburban environment in the southeastern United States","volume":"9","author":"Jiao","year":"2016","journal-title":"Atmos. Meas. Tech."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"11369","DOI":"10.1021\/es4022602","article-title":"The Changing Paradigm of Air Pollution Monitoring","volume":"47","author":"Snyder","year":"2013","journal-title":"Environ. Sci. Technol."},{"key":"ref_12","unstructured":"Michel, G., Laurent, S., and Annette, B. (2017). Measuring Air Pollution with Low-Cost Sensors, European Commission\u2019s Joint Research Centre. Technical Report."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"249","DOI":"10.1016\/j.snb.2015.03.031","article-title":"Field calibration of a cluster of low-cost available sensors for air quality monitoring. Part A: Ozone and nitrogen dioxide","volume":"215","author":"Spinelle","year":"2015","journal-title":"Sens. Actuators B Chem."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"706","DOI":"10.1016\/j.snb.2016.07.036","article-title":"Field calibration of a cluster of low-cost commercially available sensors for air quality monitoring. Part B: NO, CO and CO2","volume":"238","author":"Spinelle","year":"2017","journal-title":"Sens. Actuators B Chem."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Spinelle, L., Gerboles, M., Kok, G., Persijn, S., and Sauerwald, T. (2017). Review of portable and low-cost sensors for the ambient air monitoring of benzene and other volatile organic compounds. Sensors, 17.","DOI":"10.3390\/s17071520"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Cavaliere, A., Carotenuto, F., Di Gennaro, F., Gioli, B., Gualtieri, G., Martelli, F., Matese, A., Toscano, P., Vagnoli, C., and Zaldei, A. (2018). Development of Low-Cost Air Quality Stations for Next Generation Monitoring Networks: Calibration and Validation of PM2.5 and PM10 Sensors. Sensors, 18.","DOI":"10.3390\/s18092843"},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"1645","DOI":"10.1016\/j.future.2013.01.010","article-title":"Internet of Things (IoT): A vision, architectural elements, and future directions","volume":"29","author":"Gubbi","year":"2013","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"2787","DOI":"10.1016\/j.comnet.2010.05.010","article-title":"The internet of things: A survey","volume":"54","author":"Atzori","year":"2010","journal-title":"Comput. Netw."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"31392","DOI":"10.3390\/s151229859","article-title":"A survey of wireless sensor network based air pollution monitoring systems","volume":"15","author":"Yi","year":"2015","journal-title":"Sensors"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"074501","DOI":"10.1289\/EHP1772","article-title":"The Imperial County Community Air Monitoring Network: A model for community-based environmental monitoring for public health action","volume":"125","author":"English","year":"2017","journal-title":"Environ. Health Perspect."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"1132","DOI":"10.1016\/j.envpol.2018.06.044","article-title":"Proliferation of low-cost sensors. What prospects for air pollution epidemiologic research in Sub-Saharan Africa?","volume":"241","author":"Amegah","year":"2018","journal-title":"Environ. Pollut."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Chahid, Y., Benabdellah, M., and Azizi, A. (2017, January 19\u201320). Internet of things security. Proceedings of the 2017 International Conference on Wireless Technologies, Embedded and Intelligent Systems (WITS), Fez, Morocco.","DOI":"10.1109\/WITS.2017.7934655"},{"key":"ref_23","first-page":"20","article-title":"A survey on internet of things: Security and privacy issues","volume":"90","author":"Kumar","year":"2014","journal-title":"Int. J. Comput. Appl."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Suo, H., Wan, J., Zou, C., and Liu, J. (2012, January 23\u201325). Security in the internet of things: A review. Proceedings of the 2012 International Conference on Computer Science and Electronics Engineering (ICCSEE), Hangzhou, China.","DOI":"10.1109\/ICCSEE.2012.373"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"146","DOI":"10.1016\/j.comnet.2014.11.008","article-title":"Security, privacy and trust in Internet of Things: The road ahead","volume":"76","author":"Sicari","year":"2015","journal-title":"Comput. Netw."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"1497","DOI":"10.1016\/j.adhoc.2012.02.016","article-title":"Internet of things: Vision, applications and research challenges","volume":"10","author":"Miorandi","year":"2012","journal-title":"Ad Hoc Netw."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Medaglia, C.M., and Serbanati, A. (2010). An overview of privacy and security issues in the internet of things. The Internet of Things, Springer.","DOI":"10.1007\/978-1-4419-1674-7_38"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"1899","DOI":"10.1109\/JIOT.2017.2707465","article-title":"Security Vulnerabilities of Internet of Things: A Case Study of the Smart Plug System","volume":"4","author":"Ling","year":"2017","journal-title":"IEEE Internet Things J. (Iot-J)"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Ling, Z., Liu, K., Xu, Y., Jin, Y., and Fu, X. (2017, January 4\u20138). An End-to-End View of IoT Security and Privacy. Proceedings of the 60th IEEE Global Communications Conference (Globecom), Singapore.","DOI":"10.1109\/GLOCOM.2017.8254011"},{"key":"ref_30","first-page":"218","article-title":"Indoor Air Quality: IoT Solution","volume":"4","author":"Srivatsa","year":"2016","journal-title":"Int. J. Res. Advent Technol."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Marques, G., and Pitarma, R. (2016). An indoor monitoring system for ambient assisted living based on internet of things architecture. Int. J. Environ. Res. Public Health, 13.","DOI":"10.3390\/ijerph13111152"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Salamone, F., Belussi, L., Danza, L., Galanos, T., Ghellere, M., and Meroni, I. (2017). Design and development of a nearable wireless system to control indoor air quality and indoor lighting quality. Sensors, 17.","DOI":"10.3390\/s17051021"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Bhattacharya, S., Sridevi, S., and Pitchiah, R. (2012, January 18\u201321). Indoor air quality monitoring using wireless sensor network. Proceedings of the 2012 Sixth International Conference on Sensing Technology (ICST), Kolkata, India.","DOI":"10.1109\/ICSensT.2012.6461713"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"709","DOI":"10.1080\/10473289.2006.10464485","article-title":"Health effects of fine particulate air pollution: Lines that connect","volume":"56","author":"Pope","year":"2006","journal-title":"J. Air Waste Manag. Assoc."},{"key":"ref_35","unstructured":"Cortesi, A., Hils, M., and Kriechbaumer, T. (2018, November 12). mitmproxy: A Free and Open Source Interactive HTTPS Proxy. Available online: https:\/\/mitmproxy.org\/."},{"key":"ref_36","unstructured":"Song, D. (2018, November 12). Dsniff. Available online: https:\/\/www.monkey.org\/~dugsong\/dsniff\/."},{"key":"ref_37","unstructured":"(2018, November 12). Wireshark. Available online: https:\/\/www.wireshark.org\/."},{"key":"ref_38","unstructured":"(2018, November 12). Air Quality Index\u2014Wikipedia. Available online: https:\/\/en.wikipedia.org\/wiki\/Air_quality_index."},{"key":"ref_39","unstructured":"(2018, November 12). Kismet: A Wireless Network Detector, Sniffer, and Intrusion Detection System. Available online: https:\/\/www.kismetwireless.net\/."},{"key":"ref_40","unstructured":"(2018, November 12). Wireshark OUI Lookup Tool. Available online: https:\/\/www.wireshark.org\/tools\/oui-lookup.html."},{"key":"ref_41","unstructured":"(2018, November 12). Amazon EC2. Available online: https:\/\/aws.amazon.com\/ec2\/."},{"key":"ref_42","unstructured":"(2018, November 12). Amazon EC2 Pricing. Available online: https:\/\/aws.amazon.com\/ec2\/pricing\/on-demand\/."},{"key":"ref_43","unstructured":"(2018, November 12). PlanetLab: An Open Platform for Developing, Deploying, and Accessing Planetary-Scale Services. Available online: https:\/\/www.planet-lab.org\/."},{"key":"ref_44","unstructured":"Brand Media, Inc. (2018, November 12). Where is Geolocation of an IP Address?. Available online: https:\/\/www.iplocation.net\/."},{"key":"ref_45","unstructured":"Center for Applied Internet Data Analysis (2018, November 12). Internet Protocol Address (IP) Geolocation Bibliography. Available online: http:\/\/www.caida.org\/projects\/cybersecurity\/geolocation\/bib\/."},{"key":"ref_46","unstructured":"(2018, November 12). The Two-Dollar Secure IoT Solution: Mongoose OS + ESP8266 + ATECC508 + AWS IoT. Available online: https:\/\/mongoose-os.com\/blog\/mongoose-esp8266-atecc508-aws\/."},{"key":"ref_47","unstructured":"Espressif Systems (Shanghai) PTE LTD (2018, November 12). ESP-IDF Programming Guide. Available online: https:\/\/docs.espressif.com\/projects\/esp-idf\/en\/latest\/."},{"key":"ref_48","unstructured":"Microchip Technology Inc. (2018, November 12). SAML11 Xplained Pro Evaluation Kit. Available online: http:\/\/www.microchip.com\/DevelopmentTools\/ProductDetails\/dm320205."},{"key":"ref_49","unstructured":"Texas Instruments Incorporated (2018, November 12). CC3220 SimpleLink Wi-Fi and IoT, Single-Chip Wireless MCU Solution. Available online: http:\/\/www.ti.com\/product\/CC3220?keyMatch=cc3220sf&tisearch=Search-EN-Everything."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/18\/12\/4451\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T15:34:19Z","timestamp":1760196859000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/18\/12\/4451"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,12,16]]},"references-count":49,"journal-issue":{"issue":"12","published-online":{"date-parts":[[2018,12]]}},"alternative-id":["s18124451"],"URL":"https:\/\/doi.org\/10.3390\/s18124451","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,12,16]]}}}