Who's In Control? On Security Risks of Disjointed IoT Device Management Channels
Who's In Control? On Security Risks of Disjointed IoT Device Management Channels
复制标题
DOI：
10.1145/3460120.3484592
复制
发表时间：
2021-11
期刊：
影响因子：
--
通讯作者：
Yan Jia;Bin Yuan;Luyi Xing;Dongfang Zhao;Yifan Zhang;Xiaofeng Wang;Yijing Liu;Kaimin Zheng;Peyton Crnjak;Yuqing Zhang;Deqing Zou;Hai Jin
中科院分区：
文献类型：
--
作者：
Yan Jia;Bin Yuan;Luyi Xing;Dongfang Zhao;Yifan Zhang;Xiaofeng Wang;Yijing Liu;Kaimin Zheng;Peyton Crnjak;Yuqing Zhang;Deqing Zou;Hai Jin
今天的物联网设备可以通过不同的渠道进行管理，例如，通过其设备制造商的应用程序，或第三方渠道，如苹果的家庭应用程序，或智能扬声器。支持每个通道的是集成在设备中并由不同方提供的管理框架。例如，集成了Apple HomeKit框架的设备可以通过Apple Home应用进行管理。我们将这种管理框架，包括其所有设备和云端组件，称为设备管理通道（DMC）。4种第三方DMC与设备制造商自己的DMC一起沿着广泛集成在当今的物联网设备中：HomeKit、Zigbee/Z-Wave兼容DMC和智能扬声器无缝DMC。这些DMC中的每一个都是对设备具有完全授权的独立系统;但是，如果它们的安全策略和控制不一致，后果可能很严重，允许恶意用户利用一个DMC绕过设备所有者对另一个DMC施加的安全控制。我们称这样的问题为混沌设备管理（Codema）。本文提出了第一个系统的研究Codema，基于一个新的模型引导的方法。我们购买并分析了14个顶级物联网设备及其对多个DMC的集成和管理。我们发现Codema是通用的，也是基本的：这些DMC通常不会在安全策略和控制方面相互协调。Codema问题使得对手实际上能够获得对敏感设备的未经授权的访问（例如，锁、车库门等）。我们向受影响的各方报告了我们的调查结果（例如，苹果，八月，飞利浦顺化，ismartgate，阿卡德），这都承认他们的重要性。为了缓解这种新的威胁，我们设计并实施了一种新的访问控制框架CGuard，设备制造商可以轻松地将其集成到其物联网设备中，以保护最终用户。我们的评估表明，CGuard是高可用性和用户接受，易于制造商采用，并在安全控制的高效和有效的。
An IoT device today can be managed through different channels, e.g., by its device manufacturer's app, or third-party channels such as Apple's Home app, or a smart speaker. Supporting each channel is a management framework integrated in the device and provided by different parties. For example, a device that integrates Apple HomeKit framework can be managed by Apple Home app. We call the management framework of this kind, including all its device- and cloud-side components, a device management channel (DMC). 4 third-party DMCs are widely integrated in today's IoT devices along with the device manufacturer's own DMC: HomeKit, Zigbee/Z-Wave compatible DMC, and smart-speaker Seamless DMC. Each of these DMCs is a standalone system that has full mandate on the device; however, if their security policies and control are not aligned, consequences can be serious, allowing a malicious user to utilize one DMC to bypass the security control imposed by the device owner on another DMC. We call such a problem Chaotic Device Management (Codema). This paper presents the first systematic study on Codema, based on a new model-guided approach. We purchased and analyzed 14 top-rated IoT devices and their integration and management of multiple DMCs. We found that Codema is both general and fundamental: these DMCs are generally not designed to coordinate with each other for security policies and control. The Codema problems enable the adversary to practically gain unauthorized access to sensitive devices (e.g., locks, garage doors, etc.). We reported our findings to affected parties (e.g., Apple, August, Philips Hue, ismartgate, Abode), which all acknowledged their importance. To mitigate this new threat, we designed and implemented CGuard, a new access control framework that device manufacturers can easily integrate into their IoT devices to protect end users. Our evaluation shows that CGuard is highly usable and acceptable to users, easy to adopt by manufacturers, and efficient and effective in security control.