User experiences with simulated cyber-physical attacks on smart home IoT
User experiences with simulated cyber-physical attacks on smart home IoT
复制标题
智能家居物联网模拟网络物理攻击的用户体验
DOI：
10.1007/s00779-023-01774-5
复制
发表时间：
2023
影响因子：
--
通讯作者：
Huijts N
中科院分区：
文献类型：
--
作者：
Huijts N
随着物联网（IoT）在人们的家中变得越来越普遍，对居民的新威胁正在出现，例如网络物理攻击，即具有物理后果的网络攻击。在这项研究中，我们旨在深入了解人们如何体验和应对对其物联网设备的网络物理攻击。我们进行了一项自然主义的实地实验，并为9个荷兰家庭和7个英国家庭提供了一些智能设备，分别为18名和13名参与者。经过一段时间的适应，模拟攻击进行，导致不同的攻击事件（例如，灯开或关一次或几次）。在告知人们发生了模拟袭击后，袭击又重复了一次。通过访谈收集用户体验，并进行专题分析。研究发现了四个相关主题，即（1）对隐私和安全风险的认识和关注程度相当低，（2）模拟攻击对参与者的影响不大，（3）参与者难以正确识别模拟攻击，以及（4）当被告知模拟攻击发生时;参与者注意到更多的模拟攻击，并为他们提出了决策规则（但仍然无法识别和区分它们-见主题3）。研究结果强调了培训干预和入侵检测系统的必要性，以增加对网络物理攻击的检测。
With the Internet of Things (IoT) becoming increasingly prevalent in people’s homes, new threats to residents are emerging such as the cyber-physical attack, i.e. a cyber-attack with physical consequences. In this study, we aimed to gain insights into how people experience and respond to cyber-physical attacks to their IoT devices. We conducted a naturalistic field experiment and provided 9 Dutch and 7 UK households, totalling 18 and 13 participants respectively, with a number of smart devices for use in their home. After a period of adaptation, simulated attacks were conducted, leading to events of varying noticeability (e.g., the light going on or off once or several times). After informing people simulated attacks had occurred, the attacks were repeated one more time. User experiences were collected through interviews and analysed with thematic analyses. Four relevant themes were identified, namely (1) the awareness of and concern about privacy and security risks was rather low, (2) the simulated attacks made little impression on the participants, (3) the participants had difficulties with correctly recognizing simulated attacks, and (4) when informed about simulated attacks taking place; participants noticed more simulated attacks and presented decision rules for them (but still were not able to identify and distinguish them well—see Theme 3). The findings emphasise the need for training interventions and an intrusion detection system to increase detection of cyber-physical attacks.
登录
查看更多内容
DOI：
10.1145/2370216.2370224
发表时间：
2012-09
期刊：
Proceedings of the 2012 ACM Conference on Ubiquitous Computing
影响因子：
--
作者：
Antti Oulasvirta;Aurora Pihlajamaa;Jukka Perkiö;Debarshi Ray;Taneli Vähäkangas;Tero Hasu;Niklas Vainio;P. Myllymäki
通讯作者：
Antti Oulasvirta;Aurora Pihlajamaa;Jukka Perkiö;Debarshi Ray;Taneli Vähäkangas;Tero Hasu;Niklas Vainio;P. Myllymäki
影响因子：
5.6
作者：
Heartfield, Ryan;Loukas, George;Roesch, Etienne
通讯作者：
Roesch, Etienne
物联网安全：问题、攻击和防御调查
DOI：
10.1007/978-981-33-4582-9_18
发表时间：
2021
期刊：
Intelligent Learning for Computer Vision
影响因子：
--
作者：
V. Jain;Jyoti Gajrani
通讯作者：
Jyoti Gajrani
用户对智能家居隐私的看法
DOI：
--
发表时间：
2018
期刊：
arXiv.org
影响因子：
--
作者：
Serena Zheng;M. Chetty;N. Feamster
通讯作者：
N. Feamster
影响因子：
2.8
作者：
Aldossari, Mobark Q.;Sidorova, Anna
通讯作者：
Sidorova, Anna