Ranking Security of IoT-Based Smart Home Consumer Devices

Abstract

Smart home consumer devices like home theatres, music players, voice-based assistants, smart lighting, and security cameras have widely adopted the Internet of Things (IoT). These devices pose a significant security risk to consumers because the devices are exposed to mobile applications and cloud-based services with known security vulnerabilities. IoT technologies also introduce additional vulnerabilities specific to smart home architectures. Most current home consumer devices provide little or no information about the level of security they afford. Since most consumers are not tech-savvy, it is currently difficult for a consumer to make an informed decision about which consumer device model (e.g., which smart television model?) has the best security. Hence, consumers need an objective security ranking of each type (e.g., security cameras) of home consumer devices. This paper proposes a novel methodology to systematically build such security rankings for home consumer devices. The proposed methodology can be applied by utilizing data from any security assessment study. The paper discusses previous efforts in applying Analytic Hierarchy Process (AHP) to rank security risks in general. The paper also presents a systematic survey of security vulnerabilities of smart home consumer devices when viewed from an IoT lens. Using the proposed methodology, a case study where an AHP model for ranking commonly used home consumer devices including home theatres, security cameras, smart lighting, smart speakers, video surveillance, smart switches, home automation systems, home security systems, smart routers, wireless doorbell cameras, and home audio systems, was developed. Relative security rankings for each type of consumer device were derived from the AHP model. According to the AHP model, network security was the primary driver of smart home device security with a priority of 0.6893 while application security had the least priority of 0.0591. Critical Vulnerabilities were the most important for device security (priority=0.4397), Man-in-The-Middle attacks for network security (priority=0.2019), exploitable services for cloud security (priority=0.26), and sensitive data for application security (0.7626). The AHP model was internally consistent (Consistency Ratio < 0.1). Sensitivity analysis showed that the AHP model was robust against pairing assumptions.INDEX TERMS AHP, consumer applications, cloud computing, home consumer devices, Internet of Things, network security, smart home.

Cybersecurity and Cyber Forensics for Smart Cities: A Comprehensive Literature Review and Survey

“…Bringhenti et al [ 85 ] presented a configurable automation security system to secure personalization data in smart homes and improve usability by minimizing human interventions and implementing policy-based management. Allifah and Zualkernan [ 86 ] presented a novel methodology to rank the security of home consumer devices. They also discussed the analytic hierarchy process (AHP) and applied it to ranking the overall security risks.…”

“…The preservation of event log privacy for smart homeowners Rossi et al [78] 2020 Monitoring and defence against exploiting devices using Shodan APIs Giannoutakis et al [79] 2020 Blocking malicious IPs using dynamic and immutable management Rauti et al [80] 2021 A demonstration of a man-in-the-browser attack on a smart home system Awang et al [81] 2021 Solutions for threats to smart home operational environments Turner et al [82] 2021 Best practice and recommendations for smart homeowners Alshboul et al [83] 2021 Protecting sensor identities from being recognized Mahor et al [84] 2022 A multivariate correlation analysis and correlation detection Bringhenti et al [85] 2022 Cybersecurity personalization based on policy-based management Allifah and Zualkernan [86] 2022 A ranking of the critical vulnerabilities of smart home devices Thammarat and Techapanupreeda [87] 2022…”

Smart Home System: A Comprehensive Review

“…To get a better understanding of the ongoing demand as well as the future of this industry, predictions and analyses carried out by the World Economic Forum (WEF) suggest that the value of this industry will likely hit 13 trillion USD within 2030 [7]. According to Statista, for the year of 2021, the smart home market was likely to hit 99.41 billion USD globally [8]. All the predictions and studies target the greater growth of smart home technology.…”

Digital Twins for Smart Home Gadget Threat Prediction using Deep Convolution Neural Network

“…It describes how to use edge devices, business intelligence, and realistic visualization to create a digital twin for integrated control monitoring [21]. The system's automated generation of digital twin models enables constant communication among field engineers for data collection, designers for modeling, and design engineers for layout changes [22]. As a result of this method, participants can better concentrate on their specific responsibilities in the creation of digital twins.…”