Is Z-Wave Reliable for IoT Sensors?

Home security systems have become increasingly popular since they provide an additional layer of protection and peace of mind. These systems typically include battery-powered motion sensors, contact sensors, and smart locks.
${Z}$
-wave is a very popular wireless communication technology for these low-power systems. In this article, we demonstrate two new attacks targeting
${Z}$
-wave devices using the latest S2 security protocol. First, we show how an attacker can remotely attack
${Z}$
-wave security devices to increase their power consumption by three orders of magnitude, reducing their battery life from a few years to just a few hours. Second, we show multiple Denial of Service (DoS) attacks which enables an attacker to interrupt the operation of security systems in just a few seconds. Our experiments show that these attacks are effective even when the attacker device is in a car 100 m away from the target building.