All Things Considered: An Analysis of IoT Devices on Home Networks
All Things Considered: An Analysis of IoT Devices on Home Networks
复制标题
DOI：
--
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
Deepak Kumar;K. Shen;Benton Case;D. Garg;Galina Alperovich;Dmitry Kuznetsov;Rajarshi Gupta;Zakir Durumeric
中科院分区：
文献类型：
--
作者：
Deepak Kumar;K. Shen;Benton Case;D. Garg;Galina Alperovich;Dmitry Kuznetsov;Rajarshi Gupta;Zakir Durumeric
在本文中，我们通过利用从1600万个家庭的8300万台设备的用户发起的网络扫描中收集的数据，首次对现实家庭中的物联网设备进行了大规模实证分析。我们发现物联网的采用非常广泛：在几个大洲，超过一半的家庭已经拥有至少一台物联网设备。不同地区的设备类型和制造商受欢迎程度差异很大。例如，虽然近一半的北美家庭拥有联网电视或流媒体设备，但在南亚，只有不到3%的家庭拥有联网电视或流媒体设备，而南亚的大多数设备都是监控摄像头。我们调查了设备的安全状况，详细介绍了它们的开放服务、弱默认凭据以及对已知攻击的脆弱性。设备安全性也因地理位置而异，即使是特定的制造商。例如，在北美，只有不到17%的TP-Link家用路由器的密码是可猜测的，而在东欧和中亚，则有近一半的路由器密码是可猜测的。我们认为物联网设备已经存在，但对于大多数家庭来说，所采用的设备类型并不是积极讨论的类型。我们希望通过揭示这个复杂的生态系统，帮助安全社区开发适用于当今家庭的解决方案。
In this paper, we provide the first large-scale empirical analysis of IoT devices in real-world homes by leveraging data collected from user-initiated network scans of 83M devices in 16M households. We find that IoT adoption is widespread: on several continents, more than half of households already have at least one IoT device. Device types and manufacturer popularity vary dramatically across regions. For example, while nearly half of North American homes have an Internet-connected television or streaming device, less than three percent do in South Asia where the majority of devices are surveillance cameras. We investigate the security posture of devices, detailing their open services, weak default credentials, and vulnerability to known attacks. Device security similarly varies geographically, even for specific manufacturers. For example, while less than 17% of TP-Link home routers in North America have guessable passwords, nearly half do in Eastern Europe and Central Asia. We argue that IoT devices are here, but for most homes, the types of devices adopted are not the ones actively discussed. We hope that by shedding light on this complex ecosystem, we help the security community develop solutions that are applicable to today’s homes.