Simona Musilová: When A Pass Is Not Enough: Dev. A New Way Of Protect. Smart Homes [DevFest.cz 2019]
Recording from DevFest.cz 2019
Libčice nad Vltavou, 8th–9th November 2019
More info on https://2019.devfest.cz/
--------------------------------------------------------
Everyone’s home is getting smarter and smarter. But using smart voice assistants, smart light bulbs, and other smart devices can put you and your home network at risk. One of the most significant issues in this field is that IoT devices use insecure passwords. You may change it, but is it enough? What if somebody steals your credentials? Will you know? We agree with the theory that enforcing authorisation by only using credentials is not enough to stop an attacker. This talk presents our research focused on the Telnet protocol, which is highly used nowadays in IoT devices for remote administration.
We propose a new method to detect unauthorised access by an attacker by analysing the network traffic. Our method is based on the differences between the behavioural patterns of the real administrator of the device and attackers. Thanks to the simplicity of the Telnet protocol and the fact it is unencrypted, we can extract good features for the detection of any unauthorised access. Our method is based on extracting commands and parameters sent by the user, pressed keys, reaction times and other characteristics of typing.
Our goal is not only to detect unauthorised access to the administrator account but also to profile the attacker. Based on behavioural patterns, we can identify if your IoT device is attacked by a human or if you are under an attack of some malware - known or unknown.
Talk "When A Password Is Not Enough: Developing A New Way Of Protecting Smart Homes" by Simona Musilová was recorded during DevFest.cz 2019 conference and festival in Libčice nad Vltavou on 9th November.
--------------------------------------------------------
Would you like to know when the next DevFest CZ will take place?
Follow us on:
Facebook: / devfestcz
Twitter: / devfest_cz
Instagram: / devfestcz
Also check out what GUG.cz does throughout the year:
Facebook: / gug.cz
Twitter: / gugcz
Instagram: / gug.cz
© 2019 GUG.cz, in cooperation with AVC ČVUT and GUG.tv