Cyber-security analysis and evaluation for smart home management solutions

Agosta, Giovanni; Antonini, Alessio; Barenghi, Alessandro; Galeri, Dario; Pelosi, Gerardo

doi:10.1109/ccst.2015.7389663

Cited by 7 publications

(5 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…The next year, the authors of [54], after implementing a generic wireless monitor/injector tool based on Software Defined Radio using GNU Radio and the well-known Python Scapy library, were able via a replay attack to prevent a Z-Wave alarm device from arming. The work in [55] concentrates on the key derivation strategy of Z-Wave. To solve the identified deficiencies, the authors introduced a re-keying and IV derivation scheme.…”

Section: Z-wavementioning

confidence: 99%

A State-of-the-Art Review on the Security of Mainstream IoT Wireless PAN Protocol Stacks

Kambourakis

Kolias²,

Geneiatakis³

et al. 2020

Symmetry

View full text Add to dashboard Cite

Protocol stacks specifically designed for the Internet of Things (IoT) have become commonplace. At the same time, security and privacy concerns regarding IoT technologies are also attracting significant attention given the risks that are inherently associated with the respective devices and their numerous applications, ranging from healthcare, smart homes, and cities, to intelligent transportation systems and industrial automation. Considering the still heterogeneous nature of the majority of IoT protocols, a major concern is to find common references for investigating and analyzing their security and privacy threats. To this end, and on top of the current literature, this work provides a comprehensive, vis-à-vis comparison of the security aspects of the thus far most widespread IoT Wireless Personal Area Network (WPAN) protocols, namely BLE, Z-Wave, ZigBee, Thread, and EnOcean. A succinct but exhaustive review of the relevant literature from 2013 up to now is offered as a side contribution.

show abstract

Section: Z-wavementioning

confidence: 99%

A State-of-the-Art Review on the Security of Mainstream IoT Wireless PAN Protocol Stacks

Kambourakis

Kolias²,

Geneiatakis³

et al. 2020

Symmetry

View full text Add to dashboard Cite

show abstract

“…Communication Security. Communication security research emphasizes the security and privacy issues in smart home communication protocols such as BLE, ZigBee, and Z-Wave [14,1,50,27]. Agosta et al [1] approached the security and privacy problems involved in the key derivation algorithm adopted by the widespread Z-Wave home automation protocol.…”

Section: Related Workmentioning

confidence: 99%

“…Communication security research emphasizes the security and privacy issues in smart home communication protocols such as BLE, ZigBee, and Z-Wave [14,1,50,27]. Agosta et al [1] approached the security and privacy problems involved in the key derivation algorithm adopted by the widespread Z-Wave home automation protocol. Ronen et al [50] described a worm attack which has the potential of massive spread by exploiting an implementation bug in the ZigBee Light Link protocol.…”

Section: Related Workmentioning

confidence: 99%

Discovering and Understanding the Security Hazards in the Interactions between IoT Devices, Mobile Apps, and Clouds on Smart Home Platforms

Wei¹,

Jia²,

Yao³

et al. 2018

Preprint

View full text Add to dashboard Cite

A smart home connects tens of home devices to the Internet, where an IoT cloud runs various home automation applications. While bringing unprecedented convenience and accessibility, it also introduces various security hazards to users. Prior research studied smart home security from several aspects. However, we found that the complexity of the interactions among the participating entities (i.e., devices, IoT clouds, and mobile apps) has not yet been systematically investigated. In this work, we conducted an in-depth analysis of five widely-used smart home platforms. Combining firmware analysis, network traffic interception, and blackbox testing, we reverse-engineered the details of the interactions among the participating entities. Based on the details, we inferred three legitimate state transition diagrams for the three entities, respectively. Using these state machines as a reference model, we identified a set of unexpected state transitions. To confirm and trigger the unexpected state transitions, we implemented a set of phantom devices to mimic a real device. By instructing the phantom devices to intervene in the normal entity-entity interactions, we have discovered several new vulnerabilities and a spectrum of attacks against real-world smart home platforms.

show abstract

“…The current trends on implementing security in smart home are using key exchanges and use of certificates and access control mechanism (Agosta, Antonini, Barenghi, Galeri, & Pelosi, 2015;Chitnis, Deshpande, & Shaligram, 2016). The smart home appliances manufactured by vendors uses their own industrial securities protocols (European Union Agency for Network and Information Secu-…”

Section: Introductionmentioning

confidence: 99%

“…Las tendencias actuales en la implementación de seguridad en el hogar inteligente están utilizando intercambios de clave y el uso de certificados y mecanismos de control de acceso (Agosta, Antonini, Barenghi, Galeri, & Pelosi, 2015;Chitnis, Deshpande, & Shaligram, 2016). Los electrodomésticos inteligentes fabricados por proveedores utilizan sus propios protocolos industriales de seguridad (European Union Agency for Network and Information Security, 2015; "Your home...", 2017; "hue: Your...", 2017).…”

Section: Introductionunclassified

Implementing secure smart home using existing infrastructure

2017

View full text Add to dashboard Cite

The emergence of Internet of Things [IoT] paves the path of the smart home. A smart home learns the habits of residents to make intelligent decision, which requires knowledge to be communicated and stored. The communication of generated data creates loop-hole in security and privacy of the user of smart home. Another challenging issue while designing a smart home is that legacy home appliances lack the smart connectivity. This paper focuses on designing a secure architecture to access smart home appliances, while using the existing home appliances that lacks networking and processing power like a bulb or fan. To ensure secure communication using internet, we are using third party authentication tool deployed in cloud. We have installed a gateway as the entry point to our smart home and connected all the appliances to it. The user is authenticated by authentication server and gets access to the services. For implementation purpose, we used Kerberos as authentication tool and DragonBoard as gateway.

show abstract

Cyber-security analysis and evaluation for smart home management solutions

Cited by 7 publications

References 12 publications

A State-of-the-Art Review on the Security of Mainstream IoT Wireless PAN Protocol Stacks

A State-of-the-Art Review on the Security of Mainstream IoT Wireless PAN Protocol Stacks

Discovering and Understanding the Security Hazards in the Interactions between IoT Devices, Mobile Apps, and Clouds on Smart Home Platforms

Implementing secure smart home using existing infrastructure

Contact Info

Product

Resources

About