User Perceptions and Experiences with Smart Home Updates

Haney, Julie M.; Furman, Susanne M.

doi:10.1109/sp46215.2023.10179459

Cited by 3 publications

(2 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Haney et al [44] asked an open version of this same question to smart device owners, finding a mix of perceptions across personal, manufacturer, and government responsibility; the majority of their participants stated at least partial personal responsibility for the security of their devices. Interestingly, their participants focused on personal responsibility specifically around fixing lapses or precautionary measures around device security which may result in exposure to risks -this tallies with the setting of our study, where our participants are uniquely queried about real-world infections of their own smart devices, and expressed personal responsibility to resolve the issue.…”

Section: Beliefs About Riskmentioning

confidence: 99%

“…The role of personal responsibility in keeping IoT devices secure has been highlighted in other work [44], and further, that suitably informed personal responsibility requires understanding of communicated risks, the opportunity to act, and to know how to act. We saw a few participants take independent action to verify the right steps to take, rather than follow the notification steps exactly (as in Appendix A).…”

Section: Learning From the Idealized Iot Usermentioning

confidence: 99%

See 1 more Smart Citation

Difficult for Thee, But Not for Me: Measuring the Difficulty and User Experience of Remediating Persistent IoT Malware

Rodriguez

Max

Parkin

et al. 2022

2022 IEEE 7th European Symposium on Security and Privacy (EuroS&P)

View full text Add to dashboard Cite

Consumer IoT devices may suffer malware attacks, and be recruited into botnets or worse. There is evidence that generic advice to device owners to address IoT malware can be successful, but this does not account for emerging forms of persistent IoT malware. Less is known about persistent malware, which resides on persistent storage, requiring targeted manual effort to remove it. This paper presents a field study on the removal of persistent IoT malware by consumers. We partnered with an ISP to contrast remediation times of 760 customers across three malware categories: Windows malware, non-persistent IoT malware, and persistent IoT malware. We also contacted ISP customers identified as having persistent IoT malware on their network-attached storage devices, specifically QSnatch. We found that persistent IoT malware exhibits a mean infection duration many times higher than Windows or Mirai malware; QSnatch has a survival probability of 30% after 180 days, whereby most if not all other observed malware types have been removed. For interviewed device users, QSnatch infections lasted longer, so are apparently more difficult to get rid of, yet participants did not report experiencing difficulty in following notification instructions. We see two factors driving this paradoxical finding: First, most users reported having high technical competency. Also, we found evidence of planning behavior for these tasks and the need for multiple notifications. Our findings demonstrate the critical nature of interventions from outside for persistent malware, since automatic scan of an AV tool or a power cycle, like we are used to for Windows malware and Mirai infections, will not solve persistent IoT malware infections.

show abstract

Section: Beliefs About Riskmentioning

confidence: 99%

Section: Learning From the Idealized Iot Usermentioning

confidence: 99%

Difficult for Thee, But Not for Me: Measuring the Difficulty and User Experience of Remediating Persistent IoT Malware

Rodriguez

Max

Parkin

et al. 2022

2022 IEEE 7th European Symposium on Security and Privacy (EuroS&P)

View full text Add to dashboard Cite

show abstract

Context-Aware Home System Prototype with Sensors Management

Hogan,

Voytenko,

Sykes

2024

2024 4th International Conference on Innovative Research in Applied Science, Engineering and Technology (IRASET)

View full text Add to dashboard Cite

Review of Smart-Home Security Using the Internet of Things

Vardakis,

Hatzivasilis,

Koutsaki

et al. 2024

Electronics

View full text Add to dashboard Cite

As the Internet of Things (IoT) continues to revolutionize the way we interact with our living spaces, the concept of smart homes has become increasingly prevalent. However, along with the convenience and connectivity offered by IoT-enabled devices in smart homes comes a range of security challenges. This paper explores the landscape of smart-home security. In contrast to similar surveys, this study also examines the particularities of popular categories of smart devices, like home assistants, TVs, AR/VR, locks, sensors, etc. It examines various security threats and vulnerabilities inherent in smart-home ecosystems, including unauthorized access, data breaches, and device tampering. Additionally, the paper discusses existing security mechanisms and protocols designed to mitigate these risks, such as encryption, authentication, and intrusion-detection systems. Furthermore, it highlights the importance of user awareness and education in maintaining the security of smart-home environments. Finally, the paper proposes future research directions and recommendations for enhancing smart-home security with IoT, including the development of robust security best practices and standards, improved device authentication methods, and more effective intrusion-detection techniques. By addressing these challenges, the potential of IoT-enabled smart homes to enhance convenience and efficiency while ensuring privacy, security, and cyber-resilience can be realized.

show abstract

User Perceptions and Experiences with Smart Home Updates

Cited by 3 publications

References 25 publications

Difficult for Thee, But Not for Me: Measuring the Difficulty and User Experience of Remediating Persistent IoT Malware

Difficult for Thee, But Not for Me: Measuring the Difficulty and User Experience of Remediating Persistent IoT Malware

Context-Aware Home System Prototype with Sensors Management

Review of Smart-Home Security Using the Internet of Things

Contact Info

Product

Resources

About