004.056.53

security, IoT system, firewall, VPN, network, traffic, access, integration, protocol.

The issue of increasing the security level of the IoT system is considered in this paper. To provide individual and secure access to the system remotely, firewall data packet filtering rules were integrated into the VPN connection using the WireGuard protocol. Such security mechanism was implemented and tested on the developed smart lighting system, which enables effective control of lighting brightness in real time. The IoT system is based on ESP32 microcontroller and is integrated with Home Assistant platform. Using web server and Docker technology, the system is efficient and flexible to manage various IoT devices in one centralized environment, and MikroTik Hap AC Lite router with RouterOS v7.7 operating system provides reliable network infrastructure.

1. Skarga-Bandurova I., Derkach M. (2019). Iot For Public Transport Information Service Delivering. Internet of Things for Industry and Human Applications. Volume 3. Assessment and Implementation. Intelligent Transportation Systems and IoT. Section 41. Ministry of Education and Science of Ukraine, National Aerospace University KhAI, pp. 373-401.
2. Skarga-Bandurova I., Derkach M., Kotsiuba I. The information service for delivering arrival public transport prediction. In 2018 IEEE 4th International Symposium on Wireless Systems within the International Conferences on Intelligent Data Acquisition and Advanced Computing Systems (IDAACS-SWS), 2018, pp. 191–195.
3. Palamar A., Karpinski M., Palamar M., Osukhivska H., Mytnyk M. Remote Air Pollution Monitoring System Based on Internet of Things. In 2nd International Workshop on Information Technologies: Theoretical and Applied Problems (ITTAP), 2022, pp. 194–204.
4. Lundin A. C., Özkil A. G., Schuldt-Jensen J. Smart cities: A case study in waste monitoring and management. In 50th Hawaii International Conference on System Sciences (HICSS), 2017, pp. 1392–1401.
5. Derkach M., Lysak V., Skarga-Bandurova I., Kotsiuba I. Parking Guide Service for Large Urban Areas. In 2019 10th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS), 2019, vol. 1, pp. 567–571.
6. Starchenko V. (2021) Traffic optimization in wifi networks for the internet of things. Scientific Journal of TNTU, vol. 104, no. 4, pp. 131–142.
7. Fox J., Donnellan A., Doumen L. The deployment of an IoT network infrastructure, as a localised regional service. IEEE 5th World Forum on Internet of Things (WF-IoT), 2019, рр. 319–324. 
8. Waters D., Donnellan A., Fox J. An adaptable internet of things network infrastructure implemented for a smart building system. In 2021 32nd Irish Signals and Systems Conference (ISSC), 2021, pp. 1–7.
9. Kolodiichuk L. (2023) Using the Home Assistant Digital Platform to Control the Electrical Installation. Energy & Automation, no. 1. 
10. Beshley M., Shkoropad Y., Beshley H. (2024) Development of a cyber-physical system for automation and control of the Internet of things using the Home Assistant platform. Information and communication technologies, electronic engineering, vol. 4, no. 1, pp. 20–30.
11. Xu Z., Ni J. Research on network security of VPN technology. In 2020 International Conference on Information Science and Education (ICISE-IE), 2020, pp. 539–542.
12. Farooq M., Khan R., Khan M. Н. (2023) Stout Implementation of Firewall and Network Segmentation for Securing IoT Devices. Indian Journal of Science and Technology, 16 (33), pp. 2609–2621.
13. Carcelén J. S. P., Parra M. G. O. (2024) Comparison of efficiency, security and stability between RouterOS from MikroTik and Cisco IOS, in network engineering environments. Revista Científica Interdisciplinaria Investigación y Saberes, 14 (2), рр. 42–62.
14. Vergütz A., Santos B. V. d., Kantarci B., Nogueira M. (2023) Data Instrumentation From IoT Network Traffic as Support for Security Management. In IEEE Transactions on Network and Service Management, vol. 20, no. 2, pp. 1392–1404.
15. Donenfeld J. A. WireGuard: Next Generation Kernel Network Tunnel. Network and Distributed System Security Symposium, 2017.

1. Skarga-Bandurova I., Derkach M. (2019). Iot For Public Transport Information Service Delivering. Internet of Things for Industry and Human Applications. Volume 3. Assessment and Implementation. Intelligent Transportation Systems and IoT. Section 41. Ministry of Education and Science of Ukraine, National Aerospace University KhAI, pp. 373-401.
2. Skarga-Bandurova I., Derkach M., Kotsiuba I. The information service for delivering arrival public transport prediction. In 2018 IEEE 4th International Symposium on Wireless Systems within the International Conferences on Intelligent Data Acquisition and Advanced Computing Systems (IDAACS-SWS), 2018, pp. 191–195.
3. Palamar A., Karpinski M., Palamar M., Osukhivska H., Mytnyk M. Remote Air Pollution Monitoring System Based on Internet of Things. In 2nd International Workshop on Information Technologies: Theoretical and Applied Problems (ITTAP), 2022, pp. 194–204.
4. Lundin A. C., Özkil A. G., Schuldt-Jensen J. Smart cities: A case study in waste monitoring and management. In 50th Hawaii International Conference on System Sciences (HICSS), 2017, pp. 1392–1401.
5. Derkach M., Lysak V., Skarga-Bandurova I., Kotsiuba I. Parking Guide Service for Large Urban Areas. In 2019 10th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS), 2019, vol. 1, pp. 567–571.
6. Starchenko V. (2021) Traffic optimization in wifi networks for the internet of things. Scientific Journal of TNTU, vol. 104, no. 4, pp. 131–142.
7. Fox J., Donnellan A., Doumen L. The deployment of an IoT network infrastructure, as a localised regional service. IEEE 5th World Forum on Internet of Things (WF-IoT), 2019, рр. 319–324. 
8. Waters D., Donnellan A., Fox J. An adaptable internet of things network infrastructure implemented for a smart building system. In 2021 32nd Irish Signals and Systems Conference (ISSC), 2021, pp. 1–7.
9. Kolodiichuk L. (2023) Using the Home Assistant Digital Platform to Control the Electrical Installation. Energy & Automation, no. 1. 
10. Beshley M., Shkoropad Y., Beshley H. (2024) Development of a cyber-physical system for automation and control of the Internet of things using the Home Assistant platform. Information and communication technologies, electronic engineering, vol. 4, no. 1, pp. 20–30.
11. Xu Z., Ni J. Research on network security of VPN technology. In 2020 International Conference on Information Science and Education (ICISE-IE), 2020, pp. 539–542.
12. Farooq M., Khan R., Khan M. Н. (2023) Stout Implementation of Firewall and Network Segmentation for Securing IoT Devices. Indian Journal of Science and Technology, 16 (33), pp. 2609–2621.
13. Carcelén J. S. P., Parra M. G. O. (2024) Comparison of efficiency, security and stability between RouterOS from MikroTik and Cisco IOS, in network engineering environments. Revista Científica Interdisciplinaria Investigación y Saberes, 14 (2), рр. 42–62.
14. Vergütz A., Santos B. V. d., Kantarci B., Nogueira M. (2023) Data Instrumentation From IoT Network Traffic as Support for Security Management. In IEEE Transactions on Network and Service Management, vol. 20, no. 2, pp. 1392–1404.
15. Donenfeld J. A. WireGuard: Next Generation Kernel Network Tunnel. Network and Distributed System Security Symposium, 2017.