Park Mookyu, Oh Haengrok, Lee Kyungho
School of Information Security, Korea University, Seoul 02841, Korea.
Agency for Defense Development (ADD), Seoul 05771, Korea.
Sensors (Basel). 2019 May 9;19(9):2148. doi: 10.3390/s19092148.
Internet-of-Things (IoT) is a technology that is extensively being used in various fields. Companies like Samsung, LG, and Apple are launching home appliances that use IoT as a part of their smart home business. Currently, Intelligent Things which combine artificial intelligence (AI) and IoT are being developed. Most of these devices are configured to collect and respond to human behavior (motion, voice, etc.) through built-in sensors. If IoT devices do not ensure high security, personal information could be leaked. This paper describes the IoT security threats that can cause information leakage from a hierarchical viewpoint of cyberspace. In addition, because these smart home-based IoT devices are closely related to human life, considering social damage is a problem. To overcome this, we propose a framework to measure the risk of IoT devices based on security scenarios that can occur in a smart home.
物联网(IoT)是一项正在各个领域广泛应用的技术。三星、LG和苹果等公司正在推出将物联网作为智能家居业务一部分的家用电器。目前,结合人工智能(AI)和物联网的智能设备正在研发中。这些设备大多配置了内置传感器,用于收集并响应人类行为(动作、语音等)。如果物联网设备不能确保高度安全,个人信息可能会被泄露。本文从网络空间的分层视角描述了可能导致信息泄露的物联网安全威胁。此外,由于这些基于智能家居的物联网设备与人类生活密切相关,考虑其对社会的损害是一个问题。为克服这一问题,我们提出了一个基于智能家居中可能出现的安全场景来衡量物联网设备风险的框架。