Poster Abstract: Who's Watching Your Child? Exploring Home Security Risks with Smart Toy Bears

Poster Abstract: Who's Watching Your Child? Exploring Home Security Risks with Smart Toy Bears
复制标题

海报摘要:谁在照顾你的孩子?

DOI:
10.1109/iotdi.2018.00042
复制
发表时间:
2018
期刊:
2018 IEEE/ACM Third International Conference on Internet-of-Things Design and Implementation (IoTDI)
影响因子:
--
通讯作者:
L. J. Camp
L. J. Camp
中科院分区:
--
文献类型:
--
作者:
Joshua Streiff;O. Kenny;Sanchari Das;Andrew Leeth;L. J. Camp

文献摘要

被引文献

相似文献

物联网(IoT)除了影响儿童的数字安全外,还可能影响他们的身体安全。数字安全问题包括记录了什么以及谁在监控它们。物联网设备,如Fisher Price智能玩具,旨在与3-8岁的儿童一起玩耍,并通过各种活动娱乐他们。这将数字接触扩展到儿童空间。这些玩具包含了用户没有准备好理解的各种通信技术,收集私人数据(包括视频)的无数传感器,并且通常依赖于不充分的安全工具和方法。这种安全性差、侵入性传感器数据和接近儿童的交叉点可能会使儿童在网上和面对面都面临风险。在检查Fisher Price Bear时,我们的研究人员既能够验证安全工具已被实施以修复之前在玩具中发现的网络安全故障,又发现了一个安全漏洞,该漏洞允许root访问智能玩具,允许完全访问鼻子摄像头和其他传感器。初步的结果是如何操作系统可以被修改,以安装软件,使修改后的熊可以远程控制。缓解教育是作为一个重要的工具,自我保护的父母和儿童在一个智能玩具的环境。
The Internet of Things (IoT) can affect the physical safety of a child in addition to their digital safety. Digital safety concerns include what is being recorded and who is monitoring them. IoT devices, like the Fisher Price Smart Toys are designed to play with children of ages 3-8 and entertain them with various activities. This has expanded digital exposure into children's spaces. These toys contain a variety of communication technologies that users are ill-prepared to understand, a myriad of sensors collecting private data, including video, and often rely on inadequate security tools and methodology. This intersection of poor security, invasive sensor data, and proximity to children may put children at risks both online and in-person. In examining the Fisher Price Bear, our researchers were able to both verify that security tools have been implemented to fix network security failures previously found in the toy, but also discovered a security flaw which allows root access to the smart toy, allowing full access to the nose camera and other sensors. Preliminary results are presented in how the operating system can be modified in order to install software so that a modified bear can be controlled remotely. Mitigation education is presented as a critical instrument for self-protection of parents and children in a smart toy environment.