A novel semi-automatic vulnerability detection system for smart home

作者：Jia Xiaoyan; Li Xiaoyong; Gao Yali

来源：2017 International Conference on Big Data and Internet of Thing, BDIOT 2017, 2017-12-20 To 2017-12-22.

DOI：10.1145/3175684.3175718

• Computing machinery
• High-efficiency
• Mobile applications
• Security problems
• Smart homes
• Terminal equipment
• Threat modeling
• Vulnerability detection

With increasing popularity of smart homes, there are more and more security problems. Due to the complex communication in the smart home environment, security issues of Internet of Things not only involves in the smart devices, but also in mobile applications and cloud controllers. Some existing researches have focused on the security issues in smart home;however, most of them just paid attention on the smart devices, such as the terminal equipment, and ignored the issues on cloud controllers and mobile applications. In this paper, we first discuss the vulnerabilities in the architecture of smart home, and propose a threat model. Then we describe how to build a semi-automatic vulnerability detection system, which can detect the vulnerabilities from all-round aspects before the device walk out of the factory's door. The extensive experiments and results demonstrate the effectiveness and high efficiency of our proposed semi-automatic vulnerability detection system for smart home.
�2017 Association for Computing Machinery.

• 出版日期2017