Zigbee Security.

The set of cryptographic and network controls that protect Zigbee mesh networks of low-power IoT devices, based on IEEE 802.15.4 and AES-CCM* keys. It belongs to the OT / ICS / IoT category of cybersecurity.

The set of cryptographic and network controls that protect Zigbee mesh networks of low-power IoT devices, based on IEEE 802.15.4 and AES-CCM* keys.

Zigbee is a low-power, low-data-rate wireless protocol built on IEEE 802.15.4 and widely used in smart-home lighting, sensors, locks, and industrial monitoring. Zigbee security relies on AES-128 in CCM* mode and a hierarchy of keys: a Network Key shared by all nodes, optional Link Keys for pairwise communication, and a Trust Center (typically the coordinator) that authenticates and rekeys devices. Major weaknesses come from join procedures: pre-Zigbee-3.0 devices often used well-known default Trust Center Link Keys, making sniffed Network Key transports recoverable, and Touchlink commissioning has known protocol flaws. Hardening practices include Zigbee 3.0 with install codes, periodic Network Key rotation, physical proximity for commissioning, and segmentation of Zigbee gateways from sensitive networks.

Defences for Zigbee Security typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: Zigbee security, IEEE 802.15.4 security.