Security Tool for UPnP protocol on Smart TV

Universal Plug and Play (UPnP) communication protocol has become in a standard for communication between devices in the Internet of Things (IoT). UPnP protocol has facilitated the increased use of IoT devices integrating in activities of people and also in different processes of organizations. A disadvantage of UPnP protocol is that it operates in conjunction with other standardized network communications protocols that make it vulnerable and target of threats that can cause a security incident.Files in XML format, which UPnP protocol uses for identification of devices in a local area network, have a standard structure and when transmitted in clear text represents a security risk that may compromise confidentiality, integrity and availability of devices across the network. This article presents the proposal of a security tool using a Raspberry Pi2 programmed in Python that modifies information of XML files when they are transmitted through UPnP protocol to provide confidentiality to identity of IoT devices and it was taken as a case of study to Smart TV for development of tests of this work. Results obtained when using security tool and Smart TVs showed that communication is functional in a private data network, when they use UPnP protocol with modified XML file.