An investigation of previously undiscovered security vulnerabilities of common household IoT devices

Abstract

Convenience versus privacy is a choice many must make as we rely more on connected devices, online services, and software to make our lives easier. There is well-documented literature about the risks associated with sharing personal information and preferences on social media sites and sharing personal interests on websites, thereby allowing targeted advertising and better information delivery. Less understood are the risks associated with smart devices, referred to as Internet of Things (IoT) devices. As with almost any technology solution, IoT devices open the door to potential danger. Risks associated with physical IoT devices are not as well documented. While some risks are small and of minimal threat, some open the user to real personal danger, including unfettered physical access into their homes. This paper documents a primary research effort to investigate and document multiple threat vectors associated with standard consumer IoT devices.