Proposal for a security and privacy enhancement system for private smart environments

Abstract

Far from being considered a consolidated and regulated paradigm, the Internet of Things has multiple unaddressed challenges that open the way to unresolved security and privacy issues. The reality is that just as technology has evolved, so have attacks on devices, which are becoming increasingly sophisticated and complicated to prevent and detect. This problem is of particular concern in private environments where sensitive data are handled and which, on many occasions, require an early response to conditions of uncertainty. In this sense, this paper contributes to improving the security and privacy of connected devices in private environments. To this end, we propose a system for managing the security and privacy of connected devices that is adaptable to the environment’s requirements. This system, integrated in the router, consists of a set of components that address the problem through the tasks of monitoring and data acquisition, information storage, data analysis, event processing, and data visualisation. Finally, a set of mechanisms is proposed to further automate the secure integration and continuous monitoring of devices in order to make processes more secure and efficient. Thus, these mechanisms, which can be integrated into the proposed system, provide the environment with real-time management capabilities of the devices and notification of alerts detected in the home network, with the sole purpose of keeping the environment secure against possible threats and attacks.