An IoT analysis framework: An investigation of IoT smart cameras' vulnerabilities
An IoT analysis framework: An investigation of IoT smart cameras' vulnerabilities
复制标题
DOI：
10.1049/cp.2018.0047
复制
发表时间：
2018-06
期刊：
影响因子：
--
通讯作者：
Rana Alharbi;David Aspinall
中科院分区：
文献类型：
--
作者：
Rana Alharbi;David Aspinall
依赖于物联网概念的应用程序数量的显着增加变得越来越明显。它已被部署在智能家居，智能城市和健康监测应用的许多领域。保护这些应用程序的方法比我们对它们日益增长的依赖要慢。本文的目的是通过提出一个威胁模型和一个安全和隐私分析框架来展示家庭监控智能摄像机中存在的各种漏洞，并展示它们对用户安全和隐私的影响。该框架涵盖了智能相机系统的五个主要组件，并设计了一组测试用例。该框架适用于五种商品智能相机。在框架方面发现了一系列漏洞。发现的漏洞表明，物联网设备继续由供应商提供，而没有在安全性上投入足够的努力，也没有充分考虑它们对用户隐私的影响。这里报告的工作是第一作者的硕士论文的一部分[1]。
The significant increase in the number of applications that depend on Internet of Things concept is becoming more evident. It has been deployed in many areas in smart homes, smart cities and health monitoring applications. The means to secure these applications are slower than our growing dependence on them. The aim of this paper is to demonstrate the kinds of vulnerabilities that exist in home monitoring smart cameras and to demonstrate their effects on users' security and privacy, by proposing a threat model and a security and privacy analysis framework. The framework covers five major components of the smart camera system with a set of designed test cases. The framework is applied to five commodity smart cameras. Range of vulnerabilities are discovered with respect to the framework. The vulnerabilities discovered indicate that IoT devices continue to be shipped by vendors without putting enough effort on their security and with insufficient regard for the implications that they have on users' privacy. The work reported here has been part of the first author's MSc thesis [1].