Analyzing Consumer IoT Traffic from Security and Privacy Perspectives: a Comprehensive Survey

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Jia, Yan, Song, Yuxin, Liu, Zihou, Tan, Qingyin, Song, Yang, Zhang, Yu, Liu, Zheli
Format: Preprint
Publié: 2024
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866915286787031040
author Jia, Yan
Song, Yuxin
Liu, Zihou
Tan, Qingyin
Song, Yang
Zhang, Yu
Liu, Zheli
author_facet Jia, Yan
Song, Yuxin
Liu, Zihou
Tan, Qingyin
Song, Yang
Zhang, Yu
Liu, Zheli
contents The Consumer Internet of Things (CIoT), a notable segment within the IoT domain, involves the integration of IoT technology into consumer electronics and devices, such as smart homes and smart wearables. Compared to traditional IoT fields, CIoT differs notably in target users, product types, and design approaches. While offering convenience to users, it also raises new security and privacy concerns. Network traffic analysis, a widely used technique in the security community, has been extensively applied to investigate these concerns about CIoT. Compared to traditional network traffic analysis in fields like mobile apps and websites, CIoT introduces unique characteristics that pose new challenges and research opportunities. Researchers have made significant contributions in this area. To aid researchers in understanding the application of traffic analysis tools for assessing CIoT security and privacy risks, this survey reviews 310 publications on traffic analysis within the CIoT security and privacy domain from January 2018 to June 2024, focusing on three research questions. Our work: 1) outlines the CIoT traffic analysis process and highlights its differences from general network traffic analysis. 2) summarizes and classifies existing research into four categories according to its application objectives: device fingerprinting, user activity inference, malicious traffic detection, and measurement. 3) explores emerging challenges and potential future research directions based on each step of the CIoT traffic analysis process. This will provide new insights to the community and guide the industry towards safer product designs.
format Preprint
id arxiv_https___arxiv_org_abs_2403_16149
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Analyzing Consumer IoT Traffic from Security and Privacy Perspectives: a Comprehensive Survey
Jia, Yan
Song, Yuxin
Liu, Zihou
Tan, Qingyin
Song, Yang
Zhang, Yu
Liu, Zheli
Cryptography and Security
Artificial Intelligence
Machine Learning
The Consumer Internet of Things (CIoT), a notable segment within the IoT domain, involves the integration of IoT technology into consumer electronics and devices, such as smart homes and smart wearables. Compared to traditional IoT fields, CIoT differs notably in target users, product types, and design approaches. While offering convenience to users, it also raises new security and privacy concerns. Network traffic analysis, a widely used technique in the security community, has been extensively applied to investigate these concerns about CIoT. Compared to traditional network traffic analysis in fields like mobile apps and websites, CIoT introduces unique characteristics that pose new challenges and research opportunities. Researchers have made significant contributions in this area. To aid researchers in understanding the application of traffic analysis tools for assessing CIoT security and privacy risks, this survey reviews 310 publications on traffic analysis within the CIoT security and privacy domain from January 2018 to June 2024, focusing on three research questions. Our work: 1) outlines the CIoT traffic analysis process and highlights its differences from general network traffic analysis. 2) summarizes and classifies existing research into four categories according to its application objectives: device fingerprinting, user activity inference, malicious traffic detection, and measurement. 3) explores emerging challenges and potential future research directions based on each step of the CIoT traffic analysis process. This will provide new insights to the community and guide the industry towards safer product designs.
title Analyzing Consumer IoT Traffic from Security and Privacy Perspectives: a Comprehensive Survey
topic Cryptography and Security
Artificial Intelligence
Machine Learning
url https://arxiv.org/abs/2403.16149