Overcoming invasion of privacy in smart home environment with synthetic packet injection

Proceedings of 2015 TRON Symposium, TRONSHOW 2015

Volumn , Issue , 2016, Pages

  Yoshigoe, Kenji ^a   Dai, Wei ^a   Abramson, Melissa ^b   Jacobs, Alexander ^c  

^a University of Arkansas   (United States)

^b STETSON UNIVERSITY   (United States)

^c FONTBONNE UNIVERSITY   (United States)

Author keywords

Internet of Things; IoT; packet injection; privacy; smart home; synthetic; traffic analysis

Indexed keywords

AUTOMATION; DATA PRIVACY; INTERNET OF THINGS;

COMMERCIAL OFF-THE SHELVES; INTEGRATED SOLUTIONS; PACKET INJECTION; PRIVACY AND SECURITY; REMOTE LOCATION; SMART HOMES; SYNTHETIC; TRAFFIC ANALYSIS;

INTELLIGENT BUILDINGS;

EID: 84964685739     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/TRONSHOW.2014.7396875     Document Type: Conference Paper

References (22)

1. K. Masica, "Recommended Practices Guide for Securing ZigBee Wireless Networks in Process Control System Environments, " Lawrence Livermore National Laboratory, 2007. [Online]. Available: http://energy. gov/oe/downloads/recommended-practices-guide-securing-zigbee-wireless-networks-process-control-system [Accessed: 15-Sep Nov-2015].
2. D. Evans, "The Internet of Things-How the Next Evolution of the Internet is Changing Everything, " Cisco Internet Business Solutions Group (IBSG), April, 2011.
3. Veracode. com, "The Internet of Things: Security Research Study, " 2015. [Online]. Available:https://www. veracode. com/sites/default/files/Resources/Whitepapers/internet-of-things-whitepaper. pdf. [Accessed: 14-Jul-2015].
4. M. Henze, L. Hermerschmidt, D. Kerpen, R. Haussling, B. Rumpe, and K. Wehrle. "User-driven Privacy Enforcement for Cloud-based Services in the Internet of Things, " 2014 International Conference on Future Internet of Things and Cloud (FiCloud), pp. 191-196. IEEE, 2014.
5. C. Perera, R. Ranjan, L. Wang, S. U. Khan, and A. Y. Zomaya. "Big Data Privacy in the Internet of Things Era, " IT Professional, 17, no. 3, pp. 32-39, 2015.
6. W. Ashford, "More than a quarter of London's Wi-Fi networks are poorly secured", 2012 Available: http://www. computerweekly. com/news/2240162747/More-than-a-quarter-of-Londons-Wi-Fi-networks-are-poorly-secured. [Accessed: 10-Sep-2015]
7. SmartThings, "Security Announcement from SmartThings, " 2015.
8. C. Young, "Smart Home Invasion, " DEF CON 23 IoT Village. [Online]. Available: https://www. iotvillage. org/slides-DC23/CRAIG-YOUNG-IoT-Village-Smart-Home-Invasion. pdf. [Accessed: 07-Aug-2015].
9. B. Belleville, P. Biernat, A. Cotenoff, K. Hock, T. Prynn, S. Sankaralingam, T. Sun, and D. Mayer, "Internet of Things Security, " NCC Group Intern Whitepaper, June 29, 2015. [Online]. Available: https://www. nccgroup. trust/us/our-research/internet-of-things-security/. [Accessed: 11-Sep-2015]
10. D. Bastone, "SmartThings SSL Certificate Validation Vulnerability, " Gotham Digital Science Blog, March 4, 2015. [Online]. Available: https://blog. gdssecurity. com/labs/2015/3/4/smartthings-ssl-certificate-validation-vulnerability. html. [Accessed: 19-Sep-2015].
11. M. Dennedy, J. Fox, and T. R. Finneran. "Technology Evolution, People, and Privacy, " The Privacy Engineer's Manifesto, pp. 3-24, Apress, 2014.
12. J. Raymond, "Traffic analysis: Protocols, Attacks, Design Issues, and Open Problems, " Designing Privacy Enhancing Technologies, pp. 10-29, Springer Berlin Heidelberg, 2001.
13. N. Vidgren, K. Haataja, J. Patino-Andres, J. Ram?rez-Sanchis and P. Toivanen, "Security Threats in ZigBee-Enabled Systems:Vulnerability Evaluation, Practical Experiments, Countermeasures, and Lessons Learned, " 46th IEEE Hawaii International Conference on System Sciences, pp. 5132-5138, 2013.
14. Zigbee. org, "Open Standards Development, " 2015. [Online]. Available: http://www. zigbee. org/zigbeealliance/developing-standards/. [Accessed: 20-Jun-2015].
15. Wireshark. org, "Wireshark, " 2015. [Online]. Available: https://www. wireshark. org/. [Accessed: 20-Jun-2015].
16. L. Andersson, and T. Madsen, "Provider Provisioned Virtual Private Network (VPN) Terminology, " RFC 4026. 2005.
17. M. Schurgot, D. Shinberg and L. Greenwald, "Experiments with Security and Privacy in IoT Networks, " IEEE WoWMoM, DOI: 10. 1109/WoWMoM. 2015. 7158207, 2015.
18. H. Hamed, E. Al-Shaer, and W. Marrero. "Modeling and Verification of IPSec and VPN Security Policies", 2005. 13th IEEE International Conference on Network Protocols (ICNP), DOI: 10. 1109/ICNP. 2005. 25, 2005.
19. Northsun. net, "VPN Configuration HOWTO, " 2015. [Online]. Available: http://www. northsun. net/vpn/. [Accessed: 26-Jul-2015].
20. Jnetpcap. com, "jNetPcap 1. 4 Overview | jNetPcap OpenSource, " 2015. [Online]. Available: http://jnetpcap. com/?q=jnetpcap-1. 4. [Accessed: 21-Sep-2015.
21. Online Trust Alliance, [Online]. Available: https://otalliance. org/initiatives/internet-things. [Accessed: 28-Oct-2015].
22. Online Trust Alliance IoT Trustworthy Working Group, "OTA IoT Trust Framework-Pre-Release Draft 11/11/2015", [Online]. Available: https://otalliance. org/system/files/files/initiative/documents/iot-trust-framework-11-11. pdf. [Accessed: 11-Nov-2015].