Detection of Vulnerabilities in Smart Buildings Using the Shodan Tool

Mulero-Palencia, Sofía; Monzon Baeza, Victor

doi:10.3390/electronics12234815

Electronics

2023

DOI: 10.3390/electronics12234815

|View full text |Cite

Detection of Vulnerabilities in Smart Buildings Using the Shodan Tool

Sofía Mulero-Palencia,

Victor Monzon Baeza

Abstract: Smart buildings, integral components of modern urban landscapes, are confronted with diverse vulnerabilities that jeopardize system robustness, cybersecurity, data confidentiality, and the well-being of the occupants. This work aimed to identify and evaluate vulnerabilities specific to smart buildings, introducing an innovative assessment approach leveraging the Shodan tool. The analysis comprised three stages: information collection, result extraction using Shodan, and vulnerability identification, culminatin… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2024

Publication Types

Select...

Article3

Relationship

Self Cite0

Independent3

Authors

Journals

Cited by 3 publications

References 54 publications

(86 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

A Meta-Survey on Intelligent Energy-Efficient Buildings

Islam,

Guerrieri,

Gravina

et al. 2024

BDCC

View full text Add to dashboard Cite

The rise of the Internet of Things (IoT) has enabled the development of smart cities, intelligent buildings, and advanced industrial ecosystems. When the IoT is matched with machine learning (ML), the advantages of the resulting enhanced environments can span, for example, from energy optimization to security improvement and comfort enhancement. Together, IoT and ML technologies are widely used in smart buildings, in particular, to reduce energy consumption and create Intelligent Energy-Efficient Buildings (IEEBs). In IEEBs, ML models are typically used to analyze and predict various factors such as temperature, humidity, light, occupancy, and human behavior with the aim of optimizing building systems. In the literature, many review papers have been presented so far in the field of IEEBs. Such papers mostly focus on specific subfields of ML or on a limited number of papers. This paper presents a systematic meta-survey, i.e., a review of review articles, that compares the state of the art in the field of IEEBs using the Prisma approach. In more detail, our meta-survey aims to give a broader view, with respect to the already published surveys, of the state-of-the-art in the IEEB field, investigating the use of supervised, unsupervised, semi-supervised, and self-supervised models in a variety of IEEB-based scenarios. Moreover, our paper aims to compare the already published surveys by answering five important research questions about IEEB definitions, architectures, methods/models used, datasets and real implementations utilized, and main challenges/research directions defined. This meta-survey provides insights that are useful both for newcomers to the field and for researchers who want to learn more about the methodologies and technologies used for IEEBs’ design and implementation.

show abstract

A Meta-Survey on Intelligent Energy-Efficient Buildings

Islam,

Guerrieri,

Gravina

et al. 2024

BDCC

View full text Add to dashboard Cite

show abstract

Mitigating Adversarial Attacks against IoT Profiling

Neto,

Dadkhah,

Sadeghi

et al. 2024

Electronics

View full text Add to dashboard Cite

Internet of Things (IoT) applications have been helping society in several ways. However, challenges still must be faced to enable efficient and secure IoT operations. In this context, IoT profiling refers to the service of identifying and classifying IoT devices’ behavior based on different features using different approaches (e.g., Deep Learning). Data poisoning and adversarial attacks are challenging to detect and mitigate and can degrade the performance of a trained model. Thereupon, the main goal of this research is to propose the Overlapping Label Recovery (OLR) framework to mitigate the effects of label-flipping attacks in Deep-Learning-based IoT profiling. OLR uses Random Forests (RF) as underlying cleaners to recover labels. After that, the dataset is re-evaluated and new labels are produced to minimize the impact of label flipping. OLR can be configured using different hyperparameters and we investigate how different values can improve the recovery procedure. The results obtained by evaluating Deep Learning (DL) models using a poisoned version of the CIC IoT Dataset 2022 demonstrate that training overlap needs to be controlled to maintain good performance and that the proposed strategy improves the overall profiling performance in all cases investigated.

show abstract

Introducing Security Mechanisms in OpenFog-Compliant Smart Buildings

Martín Toral,

Calvo,

Villar

et al. 2024

Electronics

View full text Add to dashboard Cite

Designing smart building IoT applications is a complex task. It requires efficiently integrating a broad number of heterogeneous, low-resource devices that adopt lightweight strategies. IoT frameworks, especially if they are standard-based, may help designers to scaffold the applications. OpenFog, established as IEEE 1934 standard, promotes the use of free open source (FOS) technologies and has been identified for use in smart buildings. However, smart building systems may present vulnerabilities, which can put their integrity at risk. Adopting state-of-the-art security mechanisms in this domain is critical but not trivial. It complicates the design and operation of the applications, increasing the cost of the deployed systems. In addition, difficulties may arise in finding qualified cybersecurity personnel. OpenFog identifies the security requirements of the applications, although it does not describe clearly how to implement them. This article presents a scalable architecture, based on the OpenFog reference architecture, to provide security by design in buildings of different sizes. It adopts FOS technologies over low-cost IoT devices. Moreover, it presents guidelines to help developers create secure applications, even if they are not security experts. It also proposes a selection of technologies in different layers to achieve the security dimensions defined in the X.805 ITU-T recommendation. A proof-of-concept Indoor Environment Quality (IEQ) system, based on low-cost smart nodes, was deployed in the Faculty of Engineering of Vitoria-Gasteiz to illustrate the implementation of the presented approach. The operation of the IEQ system was analyzed using software tools frequently used to find vulnerabilities in IoT applications. The use of state-of-the-art security mechanisms such as encryption, certificates, protocol selection and network partitioning/configuration in the OpenFog-based architecture improves smart building security.

show abstract

scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.

Contact Info

hi@scite.ai

10624 S. Eastern Ave., Ste. A-614

Henderson, NV 89052, USA

Blog Terms and Conditions API Terms Privacy Policy Contact Cookie Preferences Do Not Sell or Share My Personal Information

Made with 💙 for researchers

Part of the Research Solutions Family.

Detection of Vulnerabilities in Smart Buildings Using the Shodan Tool

Cited by 3 publications

References 54 publications

A Meta-Survey on Intelligent Energy-Efficient Buildings

A Meta-Survey on Intelligent Energy-Efficient Buildings

Mitigating Adversarial Attacks against IoT Profiling

Introducing Security Mechanisms in OpenFog-Compliant Smart Buildings

Contact Info

Product

Resources

About