How to Obtain Common Criteria Certification of Smart TV for Home IoT Security and Reliability

Abstract

Abstract:In the new era of IoT (Internet of Things), numerous gadgets and services include innovative IoT technologies that provide customers with convenience and improve their quality of life. Smart TVs are typical IoT devices that offer broadcasting services. However, they are susceptible to security intrusions via e-mail, media players, cameras, and internet connectivity. The frequency of hacking through malicious applications installed in Smart TV has rapidly increased. Therefore, appropriate countermeasures should be developed immediately. In April 2017, we (with LG electronics) received the 'world-first' Common Criteria EAL2 (Evaluation Assurance Level 2) certification for Smart TVs. As far as we know, no Smart TV has received a Common Criteria EAL2 security certification until now. This article describes our experience with the certification process and examines several security and reliability aspects of Smart TVs.

Gamified Internet of Things Testing within a Virtual Learning Environment — towards the Interactive Simulation Game “IoTCityLab”

“…Depending on the respective learning objective the game modules can focus on the different testing approaches applied in IoT Testing as model-based testing [5], analytical QA [1], security testing [28], interoperability testing [16], performance testing [12] or product certification [11] 2 , on different sub domains of smart cities as smart mobility [20], smart grids [9], smart homes [22], smart factories [21], ehealth [18] or smart agriculture [8] as well as on a respective software development life cycle model [24] as the Waterfall Model, the V Model, Extreme Programming or agile models as Scrum or Kanban. But it needs to be mentioned that this is a long-term strategy.…”

Advances in Future Internet and the Industrial Internet of Things

“…In this special issue, 'Advances in Future Internet and the Industrial Internet of Things' are presented in the five accepted articles [1][2][3][4][5]. All accepted articles are categorized into three different dimensions: communication networks, optimized resource provisioning and data forwarding, privacy and security.…”

“…When hacking a smart TV, sensitive user information may be disclosed and an invasion of privacy may occur because smart TVs are connected to the Internet and have cameras. To solve these problems, Kang et al [4] presented the world's first common criteria evaluation assurance level 2 certification for smart TVs. They discussed their experience with the certification process and examined several aspects of smart TV security and reliability.…”

Certifikace kyberbezpečnostních technologií

“…10 i pro právnické osoby), ale stejně tak i poškození pověsti, omezení pojistného plnění či soukromoprávní nároky na náhradu škody. 24 K dosažení shody nestačí formalistická implementace jakýchsi prázdných pokynů, kterými se nikdo nebude řídit. Je nezbytné, aby společnost, na kterou dopadá regulatorní požadavek (dále také jako "povinný subjekt"), skutečně přijala nezbytná opatření, která budou mít potenciál k naplnění kýženého pozitivního stavu.…”

“…V momentě, kdy je pravidlo regulující chování povinného subjektu nastaveno obecněji (zvláště performativní pravidla, viz níže), způsobuje tento režim značné snížení právní jistoty povinných subjektů, neboť z důvodu absence oficiálních implementačních postupů a návodů neví, jestli mohou považovat svůj způsob naplnění povinnosti za dostatečný. 24 Viz ČERMÁK, Miroslav. Regulatorní požadavky představují jen další riziko, a tak je s nimi třeba i zacházet.…”