Proceedings of the 2017 Workshop on Internet of Things Security and Privacy最新文献

Smart Solution, Poor Protection: An Empirical Study of Security and Privacy Issues in Developing and Deploying Smart Home Devices 智能解决方案，缺乏保护:智能家居设备开发和部署中的安全和隐私问题的实证研究

Proceedings of the 2017 Workshop on Internet of Things Security and Privacy Pub Date : 2017-11-03 DOI: 10.1145/3139937.3139948

Hui Liu, Changyu Li, Xuancheng Jin, Juanru Li, Yuanyuan Zhang, Dawu Gu

{"title":"Smart Solution, Poor Protection: An Empirical Study of Security and Privacy Issues in Developing and Deploying Smart Home Devices","authors":"Hui Liu, Changyu Li, Xuancheng Jin, Juanru Li, Yuanyuan Zhang, Dawu Gu","doi":"10.1145/3139937.3139948","DOIUrl":"https://doi.org/10.1145/3139937.3139948","url":null,"abstract":"The concept of Smart Home drives the upgrade of home devices from traditional mode to an Internet-connected version. Instead of developing the smart devices from scratch, manufacturers often utilize existing smart home solutions released by large IT companies (e.g., Amazon, Google) to help build the smart home network. A smart home solution provides components such as software development kit (SDK) and relevant management system to boost the development and deployment of smart home devices. Nonetheless, the participating of third-party SDKs and management systems complicates the workflow of such devices. If not meticulously assessed, the complex workflow often leads to the violation of privacy and security to both the consumer and the manufacturer. In this paper, we illustrate how the security and privacy of smart home devices are affected by JoyLink, a widely used smart home solution. We demonstrate a concrete analysis combined with network traffic interception, source code audit, and binary code reverse engineering to evince that the design of smart home solution is error-prone. We argue that if the security and privacy issues are not considered, devices using the solution are inevitably vulnerable and thus the privacy and security of smart home are seriously threatened.","PeriodicalId":129651,"journal":{"name":"Proceedings of the 2017 Workshop on Internet of Things Security and Privacy","volume":"13 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130200744","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 25

Security & Privacy in Smart Toys 智能玩具的安全和隐私

Proceedings of the 2017 Workshop on Internet of Things Security and Privacy Pub Date : 2017-11-03 DOI: 10.1145/3139937.3139947

J. Valente, A. Cárdenas

引用次数: 57

Computer Security and Privacy for the Physical World 物理世界的计算机安全和隐私

Proceedings of the 2017 Workshop on Internet of Things Security and Privacy Pub Date : 2017-11-03 DOI: 10.1145/3139937.3139956

Earlence Fernandes

引用次数: 0

A Secure Event Logging System for Smart Homes 智能家居的安全事件记录系统

Proceedings of the 2017 Workshop on Internet of Things Security and Privacy Pub Date : 2017-11-03 DOI: 10.1145/3139937.3139945

S. Avizheh, Tam Thanh Doan, Xi Liu, R. Safavi-Naini

引用次数: 11

Enabling Multi-user Controls in Smart Home Devices 在智能家居设备中启用多用户控制

Proceedings of the 2017 Workshop on Internet of Things Security and Privacy Pub Date : 2017-11-03 DOI: 10.1145/3139937.3139941

William Jang, Adil Chhabra, Aarathi Prasad

引用次数: 36

Low-Cost Standard Public Key Cryptography Services for Wireless IoT Systems 无线物联网系统的低成本标准公钥加密服务

Proceedings of the 2017 Workshop on Internet of Things Security and Privacy Pub Date : 2017-11-03 DOI: 10.1145/3139937.3139940

Muslum Ozgur Ozmen, A. Yavuz

{"title":"Low-Cost Standard Public Key Cryptography Services for Wireless IoT Systems","authors":"Muslum Ozgur Ozmen, A. Yavuz","doi":"10.1145/3139937.3139940","DOIUrl":"https://doi.org/10.1145/3139937.3139940","url":null,"abstract":"Internet of Things (IoT) is an integral part of application domains such as smart-home and digital healthcare. Various standard public key cryptography techniques (e.g., key exchange, public key encryption, signature) are available to provide fundamental security services for IoTs. However, despite their pervasiveness and well-proven security, they also have been shown to be highly energy costly for embedded devices. Hence, it is a critical task to improve the energy efficiency of standard cryptographic services, while preserving their desirable properties simultaneously. In this paper, we exploit synergies among various cryptographic primitives with algorithmic optimizations to substantially reduce the energy consumption of standard cryptographic techniques on embedded devices. Our contributions are: (i) We harness special precomputation techniques, which have not been considered for some important cryptographic standards to boost the performance of key exchange, integrated encryption, and hybrid constructions. (ii) We provide self-certification for these techniques to push their performance to the edge. (iii) We implemented our techniques and their counterparts on 8-bit AVR ATmega 2560 and evaluated their performance. We used microECC library and made the implementations on NIST-recommended secp192 curve, due to its standardization. Our experiments confirmed significant improvements on the battery life (up to 7x) while preserving the desirable properties of standard techniques. Moreover, to the best of our knowledge, we provide the first open-source framework including such set of optimizations on low-end devices.","PeriodicalId":129651,"journal":{"name":"Proceedings of the 2017 Workshop on Internet of Things Security and Privacy","volume":"98 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"128709300","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 12

Understanding Security Threats in Consumer Drones Through the Lens of the Discovery Quadcopter Family 通过发现四轴飞行器家族的镜头了解消费无人机的安全威胁

Proceedings of the 2017 Workshop on Internet of Things Security and Privacy Pub Date : 2017-11-03 DOI: 10.1145/3139937.3139943

J. Valente, A. Cárdenas

引用次数: 37

Proceedings of the 2017 Workshop on Internet of Things Security and Privacy 2017物联网安全与隐私研讨会论文集

Proceedings of the 2017 Workshop on Internet of Things Security and Privacy Pub Date : 2017-11-03 DOI: 10.1145/3139937

Peng Liu, Yuqing Zhang, Theophilus A. Benson, S. Sundaresan

引用次数: 0

A Lightweight Vulnerability Mitigation Framework for IoT Devices 物联网设备的轻量级漏洞缓解框架

Proceedings of the 2017 Workshop on Internet of Things Security and Privacy Pub Date : 2017-11-03 DOI: 10.1145/3139937.3139944

Noy Hadar, Shachar Siboni, Y. Elovici

{"title":"A Lightweight Vulnerability Mitigation Framework for IoT Devices","authors":"Noy Hadar, Shachar Siboni, Y. Elovici","doi":"10.1145/3139937.3139944","DOIUrl":"https://doi.org/10.1145/3139937.3139944","url":null,"abstract":"Many of today's Internet of Things (IoT) devices are vulnerable due to the large amount of overhead incurred when their operating systems are patched against emerging vulnerabilities. In addition, legacy IoT devices are no longer supported by their manufacturers, leaving customers with unpatched devices that can be easily exploited by attackers. Thus, there is an urgent need for a solution that provides a lightweight and low-cost mechanism for preventing exploitation of vulnerable IoT devices. In this paper, we propose an innovative cloud-based framework for protecting IoT devices. The proposed framework consists of a cloud service and a designated IoT security appliance. The security appliance controls the network traffic flowing to and from the vulnerable device and verifies that it does not violate a set of rules, represented by a vulnerability mitigation policy, that have been derived and synthesized by the cloud service from public corpora of Common Vulnerabilities and Exposures (CVE). We demonstrate how the proposed solution can be applied as a cost-effective solution capable of preventing exploitation of vulnerable IP cameras as part of a prominent botnet attack called Mirai.","PeriodicalId":129651,"journal":{"name":"Proceedings of the 2017 Workshop on Internet of Things Security and Privacy","volume":"89 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2017-11-03","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122207404","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 27

Source-End DDoS Defense in IoT Environments 物联网环境下的源端DDoS防御

Proceedings of the 2017 Workshop on Internet of Things Security and Privacy Pub Date : 2017-11-03 DOI: 10.1145/3139937.3139954

Samuel Mergendahl, Devkishen Sisodia, Jun Li, H. Çam

引用次数: 7