SecWIR: securing smart home IoT communications via wi-fi routers with embedded intelligence
SecWIR: securing smart home IoT communications via wi-fi routers with embedded intelligence
复制标题
DOI：
10.1145/3386901.3388941
复制
发表时间：
2020-06
期刊：
影响因子：
--
通讯作者：
Xinyu Lei;Guan-Hua Tu;Chi-Yu Li;Tian Xie;Mi Zhang
中科院分区：
文献类型：
--
作者：
Xinyu Lei;Guan-Hua Tu;Chi-Yu Li;Tian Xie;Mi Zhang
如今，Smart Home Wi-Fi IoT设备很普遍，并有可能为日常生活带来重大改善。但是，他们为寻求发动攻击的对手构成了一个有吸引力的目标。由于安全的IoT通信是安全IoT设备的基础，因此本研究开始研究主流安全协议在亚马逊平台上的40个最畅销的Wi-Fi智能家用IoT设备的支持程度。结果表明，这些设备中有29个没有部署的安全协议，或者具有有问题的安全协议实现。看来，可以通过安装安全补丁轻松修复这些漏洞。但是，许多物联网设备缺乏必要的软件/硬件资源。为了解决这个问题，本研究建议使用旨在在用户现有的家用Wi-Fi路由器上实现的SECWIR（安全的Wi-Fi IoT通信路由器）框架，以便为物联网设备提供安全的IoT通信能力。但是，由于某些路由器受到资源的约束，因此Secwir有效地在所有家庭Wi-Fi路由器上有效运行。因此，另外提出了几种解决该实施问题的新技术。实验结果表明，Secwir在各种商业现成（COTS）Wi-Fi路由器上的表现良好，但牺牲了非iot数据服务吞吐量（少于8％），而少量减少CPU使用率（4.5％〜7％），RAM使用（1.9 MB〜2.2 MB）和IoT设备访问延迟（24 ms〜154 ms），同时确保250个IoT设备。
Smart home Wi-Fi IoT devices are prevalent nowadays and potentially bring significant improvements to daily life. However, they pose an attractive target for adversaries seeking to launch attacks. Since the secure IoT communications are the foundation of secure IoT devices, this study commences by examining the extent to which mainstream security protocols are supported by 40 of the best selling Wi-Fi smart home IoT devices on the Amazon platform. It is shown that 29 of these devices have either no security protocols deployed, or have problematic security protocol implementations. Seemingly, these vulnerabilities can be easily fixed by installing security patches. However, many IoT devices lack the requisite software/hardware resources to do so. To address this problem, the present study proposes a SecWIR (Secure Wi-Fi IoT communication Router) framework designed for implementation on top of the users' existing home Wi-Fi routers to provide IoT devices with a secure IoT communication capability. However, it is way challenging for SecWIR to function effectively on all home Wi-Fi routers since some routers are resource-constrained. Thus, several novel techniques for resolving this implementation issue are additionally proposed. The experimental results show that SecWIR performs well on a variety of commercial off-the-shelf (COTS) Wi-Fi routers at the expense of only a small reduction in the non-IoT data service throughput (less than 8%), and small increases in the CPU usage (4.5%~7%), RAM usage (1.9 MB~2.2 MB), and the IoT device access delay (24 ms~154 ms) while securing 250 IoT devices.