Overview
What this challenge is about.
Read the LoRaWAN 1.0.x vs 1.1 spec (the network runs 1.0.3). Design the new key management: device-unique AppKey + NwkSKey, rotation every 90 days for the warehouse devices (the in-transit sensors stay on a longer cycle). Implement payload encryption above the LoRaWAN application-layer (AES-128 GCM with rotating session keys provisioned via Just-In-Time provisioning). Deploy a rogue-gateway detection script using the network server's gateway-fingerprint logs (Python). Document the new posture as an audit-response document. Deliver the architecture diagram, the deployed key-rotation + detection scripts (GitHub repo), a runbook for ops, and a 6-page audit response.
The Brief
What you'll do, and what you'll demonstrate.
Close 3 critical LoRaWAN security findings (default keys, no end-to-end encryption, no rogue-gateway detection) for a 4,800-sensor cold-chain network.
Earning criteria — what you'll demonstrate
- Apply LoRaWAN 1.0.x / 1.1 key management correctly across device, network, application
- Layer end-to-end encryption above the LoRaWAN application-layer when 1.1 isn't an option
- Detect rogue gateways using network-server fingerprint logs
- Communicate IoT security posture to a non-technical audit audience
Program Fit
Where this fits in your program.
Sharpens the same skills your degree expects you to demonstrate.
Skills
Skills you'll demonstrate.
Each one shows up on your verified credential.
Careers
Roles this prepares you for.
Real titles. Real skill bridges. Pick the one closest to your trajectory.
Career mappings coming soon.