Centralized web-based IOT security assessment and penetration testing dashboard

Tan, Hoi Jian (2026) Centralized web-based IOT security assessment and penetration testing dashboard. Final Year Project, UTAR.

PDF Download (4057Kb)

Abstract

This project developed a centralized web-based IoT Security Assessment and Penetration Testing Dashboard for small-scale and laboratory IoT environments. The project addressed the problem of fragmented IoT security assessment, where network scanning, web vulnerability testing, device monitoring, result interpretation, and reporting were commonly performed using separate tools and manual workflows. To overcome this limitation, the system was designed and implemented using Python Flask, MySQL, HTML, CSS, and JavaScript, with Flask-SocketIO for real-time communication, while integrating Nmap for network scanning, OWASP ZAP for web vulnerability assessment, MQTT and REST for telemetry ingestion, ping sweep host discovery, and SSL/TLS certificate analysis. The development process involved system design, backend and frontend implementation, third-party tool integration, and functional testing of the completed modules. The final system was able to perform Nmap and ZAP scans, monitor device telemetry in real time, detect reachable hosts, analyse SSL/TLS configurations, visualise findings through charts and tables, and generate structured reports in printable and spreadsheet formats. The results showed that the dashboard successfully consolidated multiple IoT security assessment functions into a single platform and improved usability, monitoring visibility, and workflow efficiency. The project contributed a practical and educational prototype for centralized IoT security assessment by combining scanning, telemetry, reporting, and visualisation features in one web-based system.

Actions (login required)