English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

A new development of smart-home systems is to use mobile apps to control IoTdevices across a Home Area Network (HAN). Those systems tend to rely on theWi-Fi router to authenticate other devices; as verified in our study, IoTvendors tend to trust all devices connected to the HAN. This treatment exposesthem to the attack from malicious apps, particularly those running onauthorized phones, which the router does not have information to control, asconfirmed in our measurement study. Mitigating this threat cannot solely relyon IoT manufacturers, which may need to change the hardware on the devices tosupport encryption, increasing the cost of the device, or software developerswho we need to trust to implement security correctly.  In this work, we present a new technique to control the communication betweenthe IoT devices and their apps in a unified, backward-compatible way. Ourapproach, called Hanguard, does not require any changes to the IoT devicesthemselves, the IoT apps or the OS of the participating phones. Hanguardachieves a fine-grained, per-app protection through bridging the OS-levelsituation awareness and the router-level per-flow control: each phone runs anon-system userspace Monitor app to identify the party that attempts to accessthe protected IoT device and inform the router through a control plane of itsaccess decision; the router enforces the decision on the data plane afterverifying whether the phone should be allowed to talk to the device. Hanguarduses a role-based access control (RBAC) schema which leverages type enforcement(TE) and multi-category security (MCS) primitives to define highly flexibleaccess control rules. We implemented our design over both Android and iOS (>95%of mobile OS market share) and a popular router. Our study shows that Hanguardis both efficient and effective in practice.

Guardian of the HAN: Thwarting Mobile Attacks on Smart-Home Devices Using OS-level Situation Awareness