Smart solution, poor protection: An empirical study of security and privacy issues in developing and deploying smart home devices

IoT S and P 2017 - Proceedings of the 2017 Workshop on Internet of Things Security and Privacy, co-located with CCS 2017

Volumn , Issue , 2017, Pages 13-18

  Liu, Hui ^a   Li, Changyu ^a   Jin, Xuancheng ^b   Li, Juanru ^a   Zhang, Yuanyuan ^a   Gu, Dawu ^a  

^a SHANGHAI JIAO TONG UNIVERSITY   (China)

^b XIDIAN UNIVERSITY   (China)

Author keywords

IoT; Privacy; Security; Smart home solution

Indexed keywords

AUTOMATION; DATA PRIVACY; INTERNET OF THINGS; MANUFACTURE; PERSONAL COMMUNICATION SYSTEMS; REVERSE ENGINEERING; SOFTWARE DESIGN;

EMPIRICAL STUDIES; MANAGEMENT SYSTEMS; PRIVACY AND SECURITY; SECURITY; SECURITY AND PRIVACY; SECURITY AND PRIVACY ISSUES; SMART HOMES; SOFTWARE DEVELOPMENT KIT;

INTELLIGENT BUILDINGS;

EID: 85037080392     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/3139937.3139948     Document Type: Conference Paper

References (11)

1. 2017. JoyLink 2.0. (2017). Retrieved September 16, 2017 from http://devsmart.jd. com/dev/apiDocDir
2. 2017. Linux Xtensa. (2017). Retrieved September 16, 2017 from http://www. linux-xtensa.org/
3. 2017. Qualcomm QCA4010 SoC. (2017). Retrieved September 16, 2017 from https://www.qualcomm.com/products/qca4010
4. Hossein Fereidooni, Jiska Classen, Tom Spink, Paul Patras, Markus Miettinen, Ahmad-Reza Sadeghi, Matthias Hollick, and Mauro Conti. 2017. Breaking Fitness Records without Moving: Reverse Engineering and Spoofing Fitbit. arXiv preprint arXiv:1706.09165 (2017).
5. Earlence Fernandes, Jaeyeon Jung, and Atul Prakash. 2016. Security Analysis of Emerging Smart Home Applications. In Proceedings of the 37th IEEE Symposium on Security and Privacy (SP).
6. Rohit Goyal, Nicola Dragoni, and Angelo Spognardi. 2016. Mind the Tracker You Wear: A Security Analysis ofWearable Health Trackers. In Proceedings of the 31st Annual ACM Symposium on Applied Computing (SAC).
7. Network Working Group Internet-Draft. 2017. Secure IoT Bootstrapping: A Survey. (2017). Retrieved September 16, 2017 from https://tools.ietf.org/html/draft-sarikaya-t2trg-sbootstrapping-03
8. Eyal Ronen, Adi Shamir, Achi-Or Weingarten, and Colin O'Flynn. 2017. IoT Goes Nuclear: Creating a ZigBee Chain Reaction. In Proceedings of the 38th IEEE Symposium on Security and Privacy (SP).
9. Veracode. 2015. The Internet of Things: Security Research Study. (2015). Retrieved September 16, 2017 from https://www.veracode.com/sites/default/files/Resources/Whitepapers/internet-of-things-whitepaper.pdf
10. Rui Wang, Yuchen Zhou, Shuo Chen, Shaz Qadeer, David Evans, and Yuri Gurevich. 2013. Explicating SDKs: Uncovering Assumptions Underlying Secure Authentication and Authorization. In Proceedings of the 22nd USENIX Security Symposium.
11. Wenbo Yang, Yuanyuan Zhang, Juanru Li, Hui Liu, Qing Wang, Yueheng Zhang, and Dawu Gu. 2017. Show Me the Money! Finding Flawed Implementations of Third-party In-App Payment in Android Apps. (2017).