Security Perception of IoT Devices in Smart Homes

Zlatolas, Lili Nemec; Feher, Nataša; Hölbl, Marko

doi:10.3390/jcp2010005

Cited by 12 publications

(6 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For instance, the European General Data Protection Regulation (GDPR) may not properly protect the data processed by this technology [15]. This raises security concerns and users' privacy issues, especially considering the low-security awareness of IoT consumers and the possibility of data breaches [16].…”

Section: Literature Reviewmentioning

confidence: 99%

Understanding Data Breach from a Global Perspective: Incident Visualization and Data Protection Law Review

Pimenta Rodrigues,

Marques Serrano,

Lopes Espiñeira Lemos

et al. 2024

Data

View full text Add to dashboard Cite

Data breaches result in data loss, including personal, health, and financial information that are crucial, sensitive, and private. The breach is a security incident in which personal and sensitive data are exposed to unauthorized individuals, with the potential to incur several privacy concerns. As an example, the French newspaper Le Figaro breached approximately 7.4 billion records that included full names, passwords, and e-mail and physical addresses. To reduce the likelihood and impact of such breaches, it is fundamental to strengthen the security efforts against this type of incident and, for that, it is first necessary to identify patterns of its occurrence, primarily related to the number of data records leaked, the affected geographical region, and its regulatory aspects. To advance the discussion in this regard, we study a dataset comprising 428 worldwide data breaches between 2018 and 2019, providing a visualization of the related statistics, such as the most affected countries, the predominant economic sector targeted in different countries, and the median number of records leaked per incident in different countries, regions, and sectors. We then discuss the data protection regulation in effect in each country comprised in the dataset, correlating key elements of the legislation with the statistical findings. As a result, we have identified an extensive disclosure of medical records in India and government data in Brazil in the time range. Based on the analysis and visualization, we find some interesting insights that researchers seldom focus on before, and it is apparent that the real dangers of data leaks are beyond the ordinary imagination. Finally, this paper contributes to the discussion regarding data protection laws and compliance regarding data breaches, supporting, for example, the decision process of data storage location in the cloud.

show abstract

Section: Literature Reviewmentioning

confidence: 99%

Understanding Data Breach from a Global Perspective: Incident Visualization and Data Protection Law Review

Pimenta Rodrigues,

Marques Serrano,

Lopes Espiñeira Lemos

et al. 2024

Data

View full text Add to dashboard Cite

show abstract

“…In another study [13], authors concluded that user's security risk perception has an effect of their intention to use smart home devices, while authors in [14] stated that users convey responsibilities of their privacy protection while using IoT devices to the manufacturers. Authors in [15] provided an overview of users' perception of security while using IoT devices. They developed a model and tested it with multiple linear regression.…”

Section: Literature Reviewmentioning

confidence: 99%

Threat model and risk management for a smart home IoT system

Mahlous

2023

IJCAI

View full text Add to dashboard Cite

The emergence of smart homes, driven by the rapid growth and development of technology, has brought numerous benefits to human life, including convenience and improved wellbeing. However, the incorporation of IoT devices into smart homes and their connection to the Internet have created new security and privacy challenges that affect the confidentiality, integrity, and availability of data collected and exchanged by these devices. Such challenges have led to security threats that render IoT devices in smart homes vulnerable to various vector attacks. To provide a comprehensive picture of the security of smart homes, this paper applies the STRIDE [1] threat model to identify potential threats at different layers, namely the IoT device, communication, and application layers. Additionally, a risk-rating security threat model, DREAD, is used to assess the risks of these threats. Finally, this paper proposes a risk mitigation strategy to respond to the rated risks and improve the security of smart home IoT systems. The primary aim of this paper is to enhance the understanding of the various security threats insmart homes and provide a security baseline to enhance the security of smart home IoT systems.Povzetek: V članku je predstavljena uporaba modela STRIDE na IoT napravah pametnega doma za prepoznavanje potencialnih groženj na različnih ravneh.

show abstract

“…Human security theory places the well-being and safety of individuals at the center of security concerns, rather than solely focusing on state security (Nemec Zlatolas, et al [16]). It encompasses issues such as poverty, health, environmental sustainability, and human rights.…”

Section: Human Securitymentioning

confidence: 99%