ISSN 1000-1239 CN 11-1777/TP

Journal of Computer Research and Development ›› 2019, Vol. 56 ›› Issue (11): 2349-2364.doi: 10.7544/issn1000-1239.2019.20190412

Special Issue: 2019密码学与智能安全研究专题

Previous Articles     Next Articles

Cyber Physical System Security of Smart Home Platform

Meng Yan1, Li Shaofeng1, Zhang Yichi1, Zhu Haojin1, Zhang Xinpeng2,3   

  1. 1(Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai 200240);2(Shanghai Institute for Advanced Communication and Data Science, Shanghai 200444);3(School of Communication and Information Engineering, Shanghai University, Shanghai 200444)
  • Online:2019-11-12

Abstract: As a typical application of Internet of things (IoT) technology, smart home platform is gradually entering thousands of households. However, the security issues of smart home platforms have hindered their further market expanding. The research on the security of smart home platforms is still at early stages, but many security threats have been proposed by researchers recently. In this paper, we review the typical the architectures of current popular smart home platforms, and analyze their attack interfaces on all components. In the area of information interface security, this paper analyzes the data steganography problems existing in the smart camera’s image interface, as well as the adversarial examples aiming at the voice control interface. In the aspect of cloud backend security, this paper analyses the security rulers’ breaches and the data leakage when running the smart applications. For these security problems, this paper reviews some existing solutions and their limitations. Furthermore, for smart home platform, this paper proposes a third-party malicious application detection system using wireless traffic analysis without any modification on the current platform. This paper introduces the design details of the proposed system, and demonstrates its effectiveness on the Samsung SmartThings platform, and proposes a privacy protection mechanism for this system.

Key words: smart home platform, security analysis, privacy protection, adversarial machine learning, malicious application detection

CLC Number: