A Risk Management Framework and A Generalized Attack Automata for IoT based Smart Home Environment

Security has been identified as one of the top barriers of Internet of Things (IoT) based smart home environment. The vulnerabilities in IoT based systems produce security threats and challenges that affect smart environment applications. Since smart home is the fastest developing field of IoT technology, it provides innovative, intellectual, ubiquitous and interactive services to users using different operations. Due to internet-connected, dynamic and heterogeneous nature, smart home environment creates new security, authentication, access control and privacy challenges. To increase information security and integrity, the IoT based smart environment crucially needs an attack model along with a risk management framework. In this paper, we propose the finite state automata-based attack model in order to investigate smart home based security attacks and then evaluate their impact with our proposed risk management framework in order to mitigate IoT smart home related crucial attacks. Finally, through the analysis of typical attack behavior and risk management framework, it shows that the proposed framework is practicable and effective.