Vulnerabilities in IoT devices for smart home environment

Luís Costa; João Paulo Barros; Miguel Tavares

doi:10.5220/0007583306150622

Vulnerabilities in IoT devices for smart home environment

Luís Costa, João Paulo Barros, Miguel Tavares

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

18 Citations (Scopus)

46 Downloads (Pure)

Abstract

Recently, consumers have seen multiple products being advertised as smart home. These products promise to make our homes more comfortable, safe, automated, and remotely controlled. To this new reality of processing information it was given the name IoT (Internet of Things). Many news headlines have been published exposing serious security vulnerabilities in many IoT devices, with some of them being exploited to make one of the largest DDoS attacks recorded. In this paper we present a method developed with the purpose of identifying high risk vulnerabilities in smart home IoT devices, giving application examples of actual vulnerabilities found in two commercially available devices. This method uses several open source tools to identify vulnerabilities in some of these IoT devices. Besides, we will also present some topics related to the main threats and vulnerabilities that affect smart home IoT devices.

Original language	English
Title of host publication	ICISSP 2019 - Proceedings of the 5th International Conference on Information Systems Security and Privacy
Editors	Paolo Mori, Olivier Camp, Steven Furnell
Publisher	SciTePress - Science and Technology Publications
Pages	615-622
Number of pages	8
ISBN (Electronic)	9789897583599
DOIs	https://doi.org/10.5220/0007583306150622
Publication status	Published - 2019
Event	5th International Conference on Information Systems Security and Privacy, ICISSP 2019 - Prague, Czech Republic Duration: 23 Feb 2019 → 25 Feb 2019

Conference

Conference	5th International Conference on Information Systems Security and Privacy, ICISSP 2019
Country/Territory	Czech Republic
City	Prague
Period	23/02/19 → 25/02/19

Keywords

Information Security
Internet of Things
IoT
IoT Security
IoT Vulnerabilities
Smart Home

Access to Document

10.5220/0007583306150622Licence: CC BY-NC-ND

ICISSP_2019_100Final published version, 387 KBLicence: CC BY-NC-ND

Cite this

@inproceedings{cb8af8dc73ff4eb98cf992d222a4690f,

title = "Vulnerabilities in IoT devices for smart home environment",

abstract = "Recently, consumers have seen multiple products being advertised as smart home. These products promise to make our homes more comfortable, safe, automated, and remotely controlled. To this new reality of processing information it was given the name IoT (Internet of Things). Many news headlines have been published exposing serious security vulnerabilities in many IoT devices, with some of them being exploited to make one of the largest DDoS attacks recorded. In this paper we present a method developed with the purpose of identifying high risk vulnerabilities in smart home IoT devices, giving application examples of actual vulnerabilities found in two commercially available devices. This method uses several open source tools to identify vulnerabilities in some of these IoT devices. Besides, we will also present some topics related to the main threats and vulnerabilities that affect smart home IoT devices.",

keywords = "Information Security, Internet of Things, IoT, IoT Security, IoT Vulnerabilities, Smart Home",

author = "Lu{\'i}s Costa and Barros, {Jo{\~a}o Paulo} and Miguel Tavares",

year = "2019",

doi = "10.5220/0007583306150622",

language = "English",

pages = "615--622",

editor = "Paolo Mori and Olivier Camp and Steven Furnell",

booktitle = "ICISSP 2019 - Proceedings of the 5th International Conference on Information Systems Security and Privacy",

publisher = "SciTePress - Science and Technology Publications",

address = "Portugal",

note = "5th International Conference on Information Systems Security and Privacy, ICISSP 2019 ; Conference date: 23-02-2019 Through 25-02-2019",

}

Costa, L, Barros, JP & Tavares, M 2019, Vulnerabilities in IoT devices for smart home environment. in P Mori, O Camp & S Furnell (eds), ICISSP 2019 - Proceedings of the 5th International Conference on Information Systems Security and Privacy. SciTePress - Science and Technology Publications, pp. 615-622, 5th International Conference on Information Systems Security and Privacy, ICISSP 2019, Prague, Czech Republic, 23/02/19. https://doi.org/10.5220/0007583306150622

Vulnerabilities in IoT devices for smart home environment. / Costa, Luís; Barros, João Paulo; Tavares, Miguel.
ICISSP 2019 - Proceedings of the 5th International Conference on Information Systems Security and Privacy. ed. / Paolo Mori; Olivier Camp; Steven Furnell. SciTePress - Science and Technology Publications, 2019. p. 615-622.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Vulnerabilities in IoT devices for smart home environment

AU - Costa, Luís

AU - Barros, João Paulo

AU - Tavares, Miguel

PY - 2019

Y1 - 2019

N2 - Recently, consumers have seen multiple products being advertised as smart home. These products promise to make our homes more comfortable, safe, automated, and remotely controlled. To this new reality of processing information it was given the name IoT (Internet of Things). Many news headlines have been published exposing serious security vulnerabilities in many IoT devices, with some of them being exploited to make one of the largest DDoS attacks recorded. In this paper we present a method developed with the purpose of identifying high risk vulnerabilities in smart home IoT devices, giving application examples of actual vulnerabilities found in two commercially available devices. This method uses several open source tools to identify vulnerabilities in some of these IoT devices. Besides, we will also present some topics related to the main threats and vulnerabilities that affect smart home IoT devices.

AB - Recently, consumers have seen multiple products being advertised as smart home. These products promise to make our homes more comfortable, safe, automated, and remotely controlled. To this new reality of processing information it was given the name IoT (Internet of Things). Many news headlines have been published exposing serious security vulnerabilities in many IoT devices, with some of them being exploited to make one of the largest DDoS attacks recorded. In this paper we present a method developed with the purpose of identifying high risk vulnerabilities in smart home IoT devices, giving application examples of actual vulnerabilities found in two commercially available devices. This method uses several open source tools to identify vulnerabilities in some of these IoT devices. Besides, we will also present some topics related to the main threats and vulnerabilities that affect smart home IoT devices.

KW - Information Security

KW - Internet of Things

KW - IoT

KW - IoT Security

KW - IoT Vulnerabilities

KW - Smart Home

UR - http://www.scopus.com/inward/record.url?scp=85064682304&partnerID=8YFLogxK

U2 - 10.5220/0007583306150622

DO - 10.5220/0007583306150622

M3 - Conference contribution

AN - SCOPUS:85064682304

SP - 615

EP - 622

BT - ICISSP 2019 - Proceedings of the 5th International Conference on Information Systems Security and Privacy

A2 - Mori, Paolo

A2 - Camp, Olivier

A2 - Furnell, Steven

PB - SciTePress - Science and Technology Publications

T2 - 5th International Conference on Information Systems Security and Privacy, ICISSP 2019

Y2 - 23 February 2019 through 25 February 2019

ER -

Vulnerabilities in IoT devices for smart home environment

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this