About: Selective Forwarding Attack on IoT Home Security Kits

Not logged in : Login

(Sponging disallowed)

Facets (new session)
Description
Metadata
Settings
- Rule:
- Inverse Functional Properties:
- "Same As":

About: Selective Forwarding Attack on IoT Home Security Kits Goto Sponge NotDistinct Permalink

An Entity of Type : bibo:AcademicArticle, within Data Space : linkeddata.uriburner.com:28898 associated with source document(s)

Attributes	Values
type	http://eprints.org/ontology/ConferenceItemEPrint http://eprints.org/ontology/EPrint Article Academic Article
seeAlso	HTML Summary of #75895 Selective Forwarding Attack on IoT Home Security Kits
sameAs	Selective Forwarding Attack on IoT Home Security Kits
http://eprints.org/ontology/hasAccepted	Selective Forwarding Attack on IoT Home Security Kits (PDF)
http://eprints.org/ontology/hasDocument	Selective Forwarding Attack on IoT Home Security Kits (PDF) Selective Forwarding Attack on IoT Home Security Kits (Other) Selective Forwarding Attack on IoT Home Security Kits (Other) Selective Forwarding Attack on IoT Home Security Kits (Other) Selective Forwarding Attack on IoT Home Security Kits (Other) Selective Forwarding Attack on IoT Home Security Kits (Other)
dc:hasVersion	Selective Forwarding Attack on IoT Home Security Kits (PDF)
Title	Selective Forwarding Attack on IoT Home Security Kits
described by	https://demo.openlinksw.com/about/id/entity/https/www.cs.kent.ac.uk/people/staff/akj22/materials/CO644/export_kar_RDFN3.n3 https://demo.openlinksw.com/about/id/entity/https/raw.githubusercontent.com/annajordanous/CO644Files/main/export_kar_RDFN3.n3
Date	2020-02-22
Creator	Ali Hariri Nicolas Giannelos Budi Arief
status	peer reviewed published
Publisher	Springer
abstract	Efforts have been made to improve the security of the Internet of Things (IoT) devices, but there remain some vulnerabilities and misimplementations. This paper describes a new threat to home security devices in which an attacker can disable all functionality of a device, but to the device’s owner, everything still appears to be operational. We targeted home security devices because their security is critical as people may rely on them to protect their homes. In particular, we exploited a feature called “heartbeat”, which is exchanged between the devices and the cloud in order to check that the devices are still connected. Even though network traffic was encrypted, we successfully identified the heartbeats due to their fixed size and periodic nature. Thereafter, we established a man-in-the-middle attack between the device and the cloud and selectively forwarded heartbeats while filtering out other traffic. As a result, the device appears to be still connected (because the heartbeat traffic is being allowed through), while in reality the device’s functionality is disabled (because non-heartbeat traffic is being filtered out). We applied this exploit on a set of six devices, and five were found to be vulnerable. Consequently, an intruder can use this exploit to disable a home security device and break into a house without the awareness of the owner. We carried out a responsible disclosure exercise with the manufacturers of the affected devices, but the response has been limited. This shows that IoT security is still not taken completely seriously and many threats are still undiscovered. Finally, we provide some recommendations on how to detect and prevent the threats posed by insecure IoT devices, which ironically include IoT home security kits.
Is Part Of	Financial Cryptography and Data Security https://kar.kent.ac.uk/id/repository
list of authors	https://kar.kent.ac.uk/id/eprint/75895#authors
presented at	2nd International Workshop on Attacks and Defenses for Internet-of-Things (ADIoT 2019)
is topic of	https://www.cs.kent.ac.uk/people/staff/akj22/materials/CO644/export_kar_RDFN3.n3 https://raw.githubusercontent.com/annajordanous/CO644Files/main/export_kar_RDFN3.n3
is primary topic of	HTML Summary of #75895 Selective Forwarding Attack on IoT Home Security Kits

Faceted Search & Find service v1.17_git144 as of Jul 26 2024

Alternative Linked Data Documents: iSPARQL | ODE Content Formats:

RDF

ODATA

Microdata

About

OpenLink Virtuoso version 08.03.3331 as of Aug 25 2024, on Linux (x86_64-ubuntu_noble-linux-glibc2.38-64), Single-Server Edition (378 GB total memory, 15 GB memory in use)
Data on this page belongs to its respective rights holders.
Virtuoso Faceted Browser Copyright © 2009-2024 OpenLink Software