Identifying vulnerabilities of consumer Internet of Things (IoT) devices: A scalable approach

Williams, Ryan; McMahon, Emma; Samtani, Sagar; Patton, Mark; Chen, Hsinchun

doi:10.1109/isi.2017.8004904

Cited by 80 publications

(45 citation statements)

References 1 publication

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…In their study, they included devices such as webcams, smart TVs, and printers, and then categorized the security risks associated with each device category. Similar to our study, Williams et al [11], used Shodan to discover IoT devices. However, they followed an active vulnerability assessment approach; whereas in our case we are interested in a passive vulnerability assessment approach [16].…”

Section: Related Workmentioning

confidence: 54%

“…In our work, we use Shodan for three primary reasons: i) it has been repeatedly used by different security researchers as a tool of choice for conducting IoT security assessments (e.g. [10], [11]); ii) it comes with extensive and actively maintained documentation; and iii) it offers intuitive APIs and Graphical User Interfaces. These factors allow Shodan to be used by different users, including a low-skilled malicious threat agent.…”

Section: B Shodan Search Enginementioning

confidence: 99%

“…Williams et al [11] performed a large-scale vulnerability assessment of consumer IoT devices exposed on the Internet. The authors used Shodan and Nessus 15 for vulnerability scanning.…”

Section: Related Workmentioning

confidence: 99%

See 2 more Smart Citations

An Investigation of Vulnerabilities in Smart Connected Cameras

Bugeja

Jonsson

Jacobsson

2018

2018 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops)

View full text Add to dashboard Cite

The Internet of Things is enabling innovative services promising added convenience and value in various domains such as the smart home. Increasingly, households, office environments and cities, are being fitted with smart camera systems aimed to enhance the security of citizens. At the same time, several systems being deployed suffer from weak security implementations. Recognizing this, and to understand the extent of this situation, in this study we perform a global vulnerability assessment using the Shodan search engine and the Common Vulnerabilities and Exposures database. This is done to detect smart connected cameras exposed on the Internet alongside their sensitive, potentially private, data being broadcasted. Furthermore, we discuss whether the discovered data can be used to compromise the safety and privacy of individuals, and identify some mitigations that can be adopted. The results indicate that a significant number of smart cameras are indeed prone to diverse security and privacy vulnerabilities.

show abstract

Section: Related Workmentioning

confidence: 54%

Section: B Shodan Search Enginementioning

confidence: 99%

See 1 more Smart Citation

An Investigation of Vulnerabilities in Smart Connected Cameras

Bugeja

Jonsson

Jacobsson

2018

2018 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops)

View full text Add to dashboard Cite

show abstract

“…CIoT concerns the use of IoT in aspects related to the daily living of people and aims at increasing usefulness of technology in such context. It involves scenarios focused on the interconnection of consumer and devices, as well as of anything involving the users' environments such as homes, offices, and cities [30]. Vertical markets of CIoT comprise, for instance, Smart Cities, Connected Mobility, Smart Health.…”

Section: Iot Communication Backgroundmentioning

confidence: 99%

A Discussion on Context-Awareness to Better Support the IoT Cloud/Edge Continuum

Silva

Sofia

2020

IEEE Access

View full text Add to dashboard Cite

This paper debates on notions of context-awareness as a relevant asset of networking and computing architectures for an Internet of Things (IoT), in particular in regards to a smoother support of the the networking operation between Cloud and Edge. Specifically, the paper debates on notions of contextawareness and goes over different types of context-awareness indicators that are being applied to Edge selection algorithms, covering the approaches currently used, the role of the algorithms applied, their scope, and contemplated performance metrics. Lastly, the paper provides guidelines for future research in the context of Cloud-Edge and the application of context-awareness to assist in a higher degree of automation of the network and, as consequence, a better support of the Cloud to Edge continuum. INDEX TERMS Context-awareness, Internet of Things (IoT), Edge/Fog Computing.

show abstract

“…In [33], the authors demonstrate a systematic, scalable, scanning approach to identifying vulnerable devices exposed to the public internet, and highlight the vulnerable state of the internet of things. Using a search engine targeted for the IoT 7 , researchers were able to target pervasive consumer grade products and scan them using a security vulnerability scanner, and demonstrate that a significant portion of the internet was vulnerable to attacks similar to ones described earlier.…”

Section: Discussionmentioning

confidence: 99%

Survey of Security in Home Connected Internet of Things

Spriggs¹

View full text Add to dashboard Cite

Identifying vulnerabilities of consumer Internet of Things (IoT) devices: A scalable approach

Cited by 80 publications

References 1 publication

An Investigation of Vulnerabilities in Smart Connected Cameras

An Investigation of Vulnerabilities in Smart Connected Cameras

A Discussion on Context-Awareness to Better Support the IoT Cloud/Edge Continuum

Survey of Security in Home Connected Internet of Things

Contact Info

Product

Resources

About