Vulnerabilities in IoT devices for smart home environment

• Autor(a) principal: Costa, Luís
• Data de Publicação: 2019
• Outros Autores: Barros, João Paulo, Tavares, Miguel
• Idioma: eng
• Título da fonte: Repositórios Científicos de Acesso Aberto de Portugal (RCAAP)
• Texto Completo: http://hdl.handle.net/10362/107397
• topic: Information Security; Internet of Things; IoT; IoT Security; IoT Vulnerabilities; Smart Home; Computer Networks and Communications; Computer Science Applications; Information Systems; Safety, Risk, Reliability and Quality

Recently, consumers have seen multiple products being advertised as smart home. These products promise to make our homes more comfortable, safe, automated, and remotely controlled. To this new reality of processing information it was given the name IoT (Internet of Things). Many news headlines have been published exposing serious security vulnerabilities in many IoT devices, with some of them being exploited to make one of the largest DDoS attacks recorded. In this paper we present a method developed with the purpose of identifying high risk vulnerabilities in smart home IoT devices, giving application examples of actual vulnerabilities found in two commercially available devices. This method uses several open source tools to identify vulnerabilities in some of these IoT devices. Besides, we will also present some topics related to the main threats and vulnerabilities that affect smart home IoT devices.