Closing the Blinds: Four Strategies for Protecting Smart Home Privacy from Network Observers
arXiv:1705.06809
Abstract
The growing market for smart home IoT devices promises new conveniences for consumers while presenting novel challenges for preserving privacy within the home. Specifically, Internet service providers or neighborhood WiFi eavesdroppers can measure Internet traffic rates from smart home devices and infer consumers' private in-home behaviors. Here we propose four strategies that device manufacturers and third parties can take to protect consumers from side-channel traffic rate privacy threats: 1) blocking traffic, 2) concealing DNS, 3) tunneling traffic, and 4) shaping and injecting traffic. We hope that these strategies, and the implementation nuances we discuss, will provide a foundation for the future development of privacy-sensitive smart homes.
arXiv comment6 pages, 3 figures, appears in Workshop on Technology and Consumer Protection (ConPro '17)
Cited by in corpus (7)
- A Survey on Device Behavior Fingerprinting: Data Sources, Techniques, Application Scenarios, and Datasets
- Smart Home Survey on Security and Privacy
- PFirewall: Semantics-Aware Customizable Data Flow Control for Home Automation Systems
- PingPong: Packet-Level Signatures for Smart Home Device Events
- PFirewall: Semantics-Aware Customizable Data Flow Control for Smart Home Privacy Protection
- Position paper: A systematic framework for categorising IoT device fingerprinting mechanisms
- Securing Smart Home Edge Devices against Compromised Cloud Servers