Abstract
Integrating scalability, interoperability, and security has become crucial with the widespread adoption of Internet of Things (IoT)-enabled smart city solutions. In this context, the oneM2M provides promising technical specifications for an interoperable and secure IoT/M2M system. This paper focuses on the potential threats and their impact on oneM2M standardbased smart city deployments. Further, configurations for baseline security of the oneM2M open-source implementation, called eclipse OM2M, are presented. Recommendations are proposed based on actual on-ground tests conducted on OM2M-based smart city deployment of IIIT Hyderabad (IIIT-H) in India. The tests cover passive eavesdropping, performing replay attacks, brute force on credentials, denial of service, and analysis of access control policies. Index Terms—Eclipse OM2M, Internet of Things (IoT) security, IoT security standardisation, oneM2M, smart city