Smart locks: Lessons for securing commodity internet of things devices

ASIA CCS 2016 - Proceedings of the 11th ACM Asia Conference on Computer and Communications Security

Volumn , Issue , 2016, Pages 461-472

  Ho, Grant ^a   Leung, Derek ^a   Mishra, Pratyush ^a   Hosseini, Ashkan ^a   Song, Dawn ^a   Wagner, David ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNET; INTERNET OF THINGS; MOBILE DEVICES;

CYBER PHYSICALS; INTERACTION MODEL; PRIVATE INFORMATION; REMOTE SERVERS; SECURITY ANALYSIS; SECURITY CHALLENGES;

LOCKS (FASTENERS);

EID: 84979650451     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2897845.2897886     Document Type: Conference Paper

References (39)

1. IEEE Standard for Local and metropolitan area networks - Part 15.6: Wireless Body Area Networks, 2012. http://standards.ieee.org/findstds/standard/ 802.15.6-2012.html.
2. August. http://august.com/.
3. L. Banks. Best bone conduction headphones of 2015. http: //www.everydayhearing.com/hearing-technology/ articles/bone-conduction-headphones/, July 2015.
4. L. Bauer, L. F. Cranor, M. K. Reiter, and K. Vaniea. Lessons learned from the deployment of a smartphone-based access-control system. In Symposium on Usable Privacy and Security (SOUPS), 2007.
5. L. Bauer, S. Garriss, J. M. McCune, M. K. Reiter, J. Rouse, and P. Rutenbar. Device-enabled authorization in the grey system. In International Conference on Information Security, 2005.
6. L. Bauer, S. Garriss, and M. K. Reiter. Detecting and resolving policy misconfigurations in access-control systems. ACM Transactions on Information and System Security (TISSEC), 2011.
7. I. Boureanu and S. Vaudenay. Challenges in distance bounding. Security & Privacy, IEEE, 2015.
8. E. Brewer. CAP twelve years later: How the "rules" have changed. Computer, 2012.
9. M. Chen, S. Gonzalez, A. Vasilakos, H. Cao, and V. C. Leung. Body area networks: A survey. Mobile networks and applications, 2011.
10. Danalock. http://www.danalock.com/.
11. T. Denning and T. Kohno. Empowering consumer electronic security and privacy choices: Navigating the modern home. In Symposium on Usable Privacy and Security (SOUPS), 2013.
12. S. Drimer and S. J. Murdoch. Keep your enemies close: Distance bounding against smartcard relay attacks. In USENIX Security, 2007.
13. C. Ericsson. https://www.youtube.com/watch?v=pJ5fSWspBpo.
14. N. Forum. http: //nfc-forum.org/what-is-nfc/about-the-technology/.
15. B. Fouladi and S. Ghanoun. Security evaluation of the Z-Wave wireless protocol. Black Hat USA, 2013.
16. A. Francillon, B. Danev, S. Capkun, S. Capkun, and S. Capkun. Relay attacks on passive keyless entry and start systems in modern cars. In NDSS, 2011.
17. L. Francis, G. Hancke, K. Mayes, and K. Markantonakis. Practical NFC peer-to-peer relay attack using mobile phones. In Radio Frequency Identification: Security and Privacy Issues. 2010.
18. L. Francis, G. P. Hancke, K. Mayes, and K. Markantonakis. Practical relay attack on contactless transactions by using NFC mobile phones. In Radio Frequency Identification: Security and Privacy Issues, 2010.
19. G. Ho, D. Leung, P. Mishra, A. Hosseini, D. Song, and D. Wagner. Smart locks: Lessons for securing commodity internet of things devices. Technical Report UCB/EECS-2016-11, EECS Department, University of California, Berkeley, Mar 2016. URL: http://www.eecs.berkeley.edu/Pubs/TechRpts/2016/ EECS-2016-11.html.
20. Kevo. http://www.kwikset.com/kevo/default.aspx.
21. Z. Kfir and A. Wool. Picking virtual pockets using relay attacks on contactless smartcard. In Security and Privacy for Emerging Areas in Communications Networks (SecureComm), 2005.
22. T. H.-J. Kim, L. Bauer, J. Newsome, A. Perrig, and J. Walker. Challenges in access right assignment for secure home networks. In HotSec, 2010.
23. B. Latré, B. Braem, I. Moerman, C. Blondia, and P. Demeester. A survey on wireless body area networks. Wireless Networks, 2011.
24. A. Levi, E. Çetintaş, M. Aydos, C. K. Koç, and M. U. Ça?glayan. Relay attacks on Bluetooth authentication and solutions. In Computer and Information Sciences (ISCIS). 2004.
25. Lockitron. https://lockitron.com/.
26. F. Manjoo. The August Smart Lock Shows Why You Should Stick with Dumb Keys. http://bits.blogs. nytimes.com/2014/10/14/the-august-smartlock-\ shows-why-you-should-stick-with-dumb-keys/, Oct 2014.
27. Mercedes-Benz. http://techcenter.mercedes-benz.com/ en/keylessgo/detail.html.
28. E. Mills. Drones can be hijacked via GPS spoofing attack. http://www.cnet.com/news/ drones-can-be-hijacked-via-gps-spoofing-attack/, June 2012.
29. Nest. https://nest.com/.
30. Okidokeys. https://www.okidokeys.com/.
31. Y. Oren and A. D. Keromytis. From the aether to the ethernet-attacking the internet using broadcast digital television. In USENIX Security, 2014.
32. K. B. Rasmussen and S. Capkun. Realization of RF distance bounding. In USENIX Security, 2010.
33. M. Ryan. Bluetooth: With low energy comes low security. In WOOT, 2013.
34. M. Seyedi, B. Kibret, D. T. Lai, and M. Faulkner. A survey on intrabody communications for body area network applications. IEEE Transactions on Biomedical Engineering, 2013.
35. N. O. Tippenhauer, C. Popper, K. B. Rasmussen, and S. Capkun. On the requirements for successful GPS spoofing attacks. In ACM Conference on Computer & Communications Security (CCS), 2011.
36. N. O. Tippenhauer, K. B. Rasmussen, C. Popper, and S. Capkun. Attacks on public WLAN-based positioning systems. In Proceedings of the 7th International Conference on Mobile systems, applications, and services, 2009.
37. B. Ur, J. Jung, and S. Schechter. The current state of access control for smart devices in homes. In Workshop on Home Usable Privacy and Security (HUPS), 2013.
38. B. Ur, J. Jung, and S. Schechter. Intruders versus intrusiveness: teens' and parents' perspectives on home-entryway surveillance. In ACM International Joint Conference on Pervasive and Ubiquitous Computing, 2014.
39. L. Zhong, D. El-Daye, B. Kaufman, N. Tobaoda, T. Mohamed, and M. Liebschner. Osteoconduct: Wireless body-area communication based on bone conduction. In Proceedings of the ICST 2nd International Conference on Body Area Networks, 2007.