A myriad of security challenges has accompanied the rapid proliferation of internet-of-things (IoT) smart-home devices. While smart-home security cameras, locks, digital speakers, and thermostats offer the promise of security, their naïve implementations often introduce vulnerability into our digitally connected lives. We argue that the consumer demand for inexpensive IoT has led to a supply of grossly insecure devices. In this talk, we explore our lab’s research identifying various design and implementation flaws that we discovered. Further, we attempt to explain the root causes of these issues and discuss future work to offer greater transparency and control of IoT devices.
