PROJECT TITLE :

Security Implications of Permission Models in Smart-Home Application Frameworks - 2017

ABSTRACT:

Several competing good-home programming frameworks that support third-party app development have emerged. Such frameworks' permission models represent the dividing line between malicious apps that compromise user security and helpful apps that offer user edges. The authors survey the permission models of four well-liked frameworks: IoTivity, HomeKit, AllJoyn, and SmartThings, then report on their recent deep empirical analysis of SmartThings. A key finding is that SmartThings apps are automatically overprivileged, which will leave users at risk of various remote attacks.