IoTFuzz: Automated Discovery of Violations in Smart Homes With Real Environment
Xinbo Ban,Ming Ding,Shigang Liu,Chao Chen,Jun Zhang
DOI: https://doi.org/10.1109/jiot.2023.3325851
IF: 10.6
2023-01-01
IEEE Internet of Things Journal
Abstract:Smart homes (SHs) are rapidly evolving to incorporate intelligent features, including environment management, home automation, and human-machine interactions. However, safety and security risks of SHs hinder their wide adoption. Many work attempts to provide defense mechanisms to ensure safety and security against inter-rule vulnerabilities and spoofing attacks. This paper proposes IoTFuzz, a fuzzing framework that dynamically address cyber security and physical safety aspects of SHs through targeted policies. IoTFuzz mutates the inputs from policies, human activities, indoor environment, and reallife outdoor weather conditions. In addition to the binary status of devices, the continuous-value status in SHs is leveraged to perform mutation and simulation. The policies are expressed as temporal logic formulas with time constraints. For largescale testing, IoTFuzz employs digital twins to simulate normal behaviors, outdoor environment impacts, and human activities in SHs. Moreover, IoTFuzz can also intelligently infer rulepolicy correlation based on Natural Language Processing (NLP) techniques. Evaluation of IoTFuzz in a configured SH with 15 rules and 10 pre-defined unique policies demonstrates its effectiveness in revealing the impacts of real-life outdoor environment. The experimental results demonstrate a range of violations, with a maximum of 4154 violations and a minimum of 41 violations observed over an 8-year period under varying weather conditions. IoTFuzz also identifies the potential risks associated with improper human activities, accounting for up to 35.4% of risky situations in SHs.
computer science, information systems,telecommunications,engineering, electrical & electronic