A taxonomy of cyber-physical threats and impact in the smart home
A taxonomy of cyber-physical threats and impact in the smart home
复制标题
DOI：
10.1016/j.cose.2018.07.011
复制
发表时间：
2018-09-01
影响因子：
5.6
通讯作者：
Roesch, Etienne
中科院分区：
文献类型：
--
作者：
Heartfield, Ryan;Loukas, George;Roesch, Etienne
在过去，家庭自动化是一个技术爱好者的小市场。设备之间的互联性取决于所有者的技术技能和创造力，而安全性不存在或原始，因为网络威胁也基本上不存在或原始。现在情况已经不同了。物联网技术、云计算、人工智能以及越来越广泛的传感和驱动能力的采用，使智能家居更加实用，但也成为网络攻击的真正有吸引力的目标。在这里，我们根据一种新的分类法对适用的网络威胁进行分类，不仅关注可以使用的攻击向量，还关注对系统以及最终对居住者及其家庭生活的潜在影响。利用分类法，我们对25种不同的智能家居攻击进行了分类，提供了合法但易受攻击的智能家居配置的进一步示例，这些配置可能导致二阶攻击向量。然后，我们回顾现有的智能家居防御机制，并讨论开放的研究问题。(C) 2018 Elsevier Ltd.版权所有。
In the past, home automation was a small market for technology enthusiasts. Interconnectivity between devices was down to the owner's technical skills and creativity, while security was non-existent or primitive, because cyber threats were also largely non-existent or primitive. This is not the case any more. The adoption of Internet of Things technologies, cloud computing, artificial intelligence and an increasingly wide range of sensing and actuation capabilities has led to smart homes that are more practical, but also genuinely attractive targets for cyber attacks. Here, we classify applicable cyber threats according to a novel taxonomy, focusing not only on the attack vectors that can be used, but also the potential impact on the systems and ultimately on the occupants and their domestic life. Utilising the taxonomy, we classify twenty five different smart home attacks, providing further examples of legitimate, yet vulnerable smart home configurations which can lead to second-order attack vectors. We then review existing smart home defence mechanisms and discuss open research problems. (C) 2018 Elsevier Ltd. All rights reserved.