School of Computing, Faculty of Engineering, Universiti Teknologi Malaysia, Johor Bahru 81310, Malaysia.
Computer Science Department, College of Computer and Information Sciences, Imam Mohammad Ibn Saud Islamic University (IMSIU), Riyadh 11432, Saudi Arabia.
Sensors (Basel). 2022 Nov 7;22(21):8564. doi: 10.3390/s22218564.
Smart home technologies have attracted more users in recent years due to significant advancements in their underlying enabler components, such as sensors, actuators, and processors, which are spreading in various domains and have become more affordable. However, these IoT-based solutions are prone to data leakage; this privacy issue has motivated researchers to seek a secure solution to overcome this challenge. In this regard, wireless signal eavesdropping is one of the most severe threats that enables attackers to obtain residents' sensitive information. Even if the system encrypts all communications, some cyber attacks can still steal information by interpreting the contextual data related to the transmitted signals. For example, a "fingerprint and timing-based snooping (FATS)" attack is a side-channel attack (SCA) developed to infer in-home activities passively from a remote location near the targeted house. An SCA is a sort of cyber attack that extracts valuable information from smart systems without accessing the content of data packets. This paper reviews the SCAs associated with cyber-physical systems, focusing on the proposed solutions to protect the privacy of smart homes against FATS attacks in detail. Moreover, this work clarifies shortcomings and future opportunities by analyzing the existing gaps in the reviewed methods.
近年来,由于传感器、执行器和处理器等底层使能组件的显著进步,智能家居技术吸引了更多的用户,这些组件正在各个领域普及,而且价格也越来越实惠。然而,这些基于物联网的解决方案容易发生数据泄露;这个隐私问题促使研究人员寻求安全的解决方案来克服这一挑战。在这方面,无线信号窃听是最严重的威胁之一,攻击者可以利用它获取居民的敏感信息。即使系统对所有通信进行了加密,一些网络攻击仍然可以通过解释与传输信号相关的上下文数据来窃取信息。例如,“基于指纹和定时的窥探(FATS)”攻击是一种侧信道攻击(SCA),它是从目标房屋附近的远程位置被动推断家庭活动的。SCA 是一种从智能系统中提取有价值信息的网络攻击,而无需访问数据包的内容。本文综述了与网络物理系统相关的 SCA,重点详细介绍了针对 FATS 攻击保护智能家居隐私的提出的解决方案。此外,通过分析已审查方法中的现有差距,本文还阐明了缺点和未来的机会。