Risk assessment and detection of API abuse in the IoT cloud
Yuan Bin, Kaimin ZHENG, Wan Jun, Deqing Zou, Hai Jin · Scientia Sinica Informationis · 2023
Recently, the vigorous development of Internet of Things technology has rapidly developed smart home applications. Smart home platforms increasingly provide open interfaces for users to implement customized smart home applications (e.g., device automation control). The possible defects of these open interfaces have also become an important issue affecting the security of smart home systems. In this paper, we study the open interfaces of the SmartThings platform. We identified a series of new vulnerable interfaces and conductedproof-of-concept attacks to demonstrate the security impact of such interfaces. To mitigate this problem, we propose SmartNotify, a tool for identifying malicious smart home applications abusing vulnerable interfaces. Experiment results show the efficiency and effectiveness of SmartNotify.