CPRE 537 Final Project

idleheadedceleryMobile - Wireless

Dec 10, 2013 (3 years and 10 months ago)

69 views

CPRE 537 Final Project

Security Implications of Wireless Technologies in Home Automation


David Gassman and Kevin Hanson

Security Implications of Wireless
Technologies in Home Automation

Topics:

-
Consumer
Adoption

-
Wireless Technologies

-
Home Automation Products

-
Security Implications

-
What we learned




Consumer Adoption

Home Automation:

-
Devices used in home automation products such as sensors, programmable lighting, and video cameras available since
1970s which doesn’t explain the slow adoption trends

-
Many consumers are unaware of some of the home automation technologies out on the market today

-
Majority of consumers who have adopted or plan on adopting home automation products in their home aren’t educated on
the technology used

-
Trends of consumer level home automation adoption finds consumers getting professional installation instead of self
installation

-
Consumers who do self installation often make their homes more vulnerable to attacks

-
Recent surge in home automation industry attributed to consumers wanting more secure homes mainly through remote
video monitoring

-
Main issue consumers will face is the backwards process of adopting technology before becoming educated




Wireless Technologies



CURRENT

Wi
-
Fi

Bluetooth

X10

EMERGING

802.11ac

Near Field Communication

(NFC)

Wi
-
Fi

Miracast


Wireless Technologies


Wi
-
Fi

-
Most popular technology amongst Home Automation products

-
Transmits data over radio waves

-
IEEE standard / managed

-
Various 802.11 protocol implementations (a, b, g, n)

-
WEP, WPA2, WPA2

PSK encryption





Wireless Technologies


Bluetooth

-
Uses radio transmissions to exchange data

-
Short distances


usually up to 30m

-
Relies on strong passkeys for Bluetooth pairing

-
Optional security controls:

-
Pre
-
shared key authentication along with encryption algorithms

-
Discovery settings from other devices

-
User authorization




Wireless Technologies


X10

-
Transmits data over electrical power wiring

-
Also implemented over wireless radio

-
Rather weak security controls

-
Leverages a preconfigured code scheme that yields a maximum
of 256 codes




Wireless Technologies


802.11ac

-
IEEE standard

-
Faster and more scalable than 802.11n

-
Designed with Gigabit Ethernet demands in mind

-
More channel bonding

-
Leverages Multiple MIMO (for better performance and capacity)

-
This is a Wi
-
Fi solution, so same security mechanisms are available



Wireless Technologies


NFC

-
Near Field Communication (NFC)

-
Designed for very close proximity devices (phones / tablets)

-
Contactless; Range of about 4 centimeters

-
Uses electromagnetic radio fields

-
Ability to setup a secure channel with encryption (AES)

-
Inherently more secure due to proximity requirements, but still
susceptible to Eavesdropping






Wireless Technologies


Wi
-
Fi Miracast

-
Wi
-
Fi CERTIFIED Miracast

-
Solution for displaying wireless video between devices

-
No Wi
-
Fi connection needed, built on Wi
-
Fi Direct (Wi
-
Fi Alliance)

-
Supports WPA2
-
PSK encryption

-
Upon the establishment of connectivity between the source and
display devices, the display initiates a Transmission Control
Protocol (TCP) connection, with a control port using Real
-
Time
Streaming Protocol (RTSP) to create and manage the sessions
between source and display devices.






Home Automation Products

Home Automation:

-
DoorBot

-
Lockitron

-
Twine

-
WeMo Switch + Motion

-
AGA iTotal Control


-
Logitech Alert

-
Cyber Rain Pro Controller

-
SecuRemote

-
Honeywell Smart Thermostat




Home Automation Products


Home Automation Products: DoorBot



-
The DoorBot is a home automation product that allows consumers to be connected to their front door via video and voice

-
Uses home wireless network to provide remote access to the product no matter where you are

-
Compatible with any IOS or Android device

-
Video Camera functions at night or during the day

-
Powered by four AA batteries

-
Priced at $189.00



Home Automation Products



Home Automation Products: Lockitron



-
The
Lockitron
is a home automation product that
provides the ability to remotely access the lock on your door

-
Uses home wireless network to provide remote access to the product no matter where you
are

-
Features Bluetooth that allows true keyless entry by sensing when you are close and automatically unlocking

-
Compatible with any IOS or Android device

-
Contains a knock sensor to notify you even if someone knocks on your door

-
Alert notifications sent if the door lock is unlocked with a key

-
Powered by four AA batteries

-
Priced at $
179.00



Home Automation Products


Home Automation Products: Twine




-
Twine is
a home automation product
that contains wireless sensors to provide the functionality to notify you of issues at
home such as pipes freezing, floods, or even if the garage door was left open

-
U
ses
home wireless network
to notify you of important updates which are completely customizable

-
Alerts and notifications based on user created rules

-
P
roduct can notify via E
-
mail, twitter, text messaging, among other methods

-
Priced
at $
199.95 for the Twine + Full Sensor Package



Home Automation Products



Home Automation Products:
WeMo Switch + Motion



-
WeMo Switch + Motion is
a home automation product
that adds wireless functionality to home appliances and electronics

-
Remotely control a device to turn it on or off

-
Use sensors to turn off an appliance if someone comes close to the device

-
Uses Wi
-
Fi to operate and includes a motion sensor and switch

-
Customizable to set schedules for devices

-
Priced
at
$99.99


Home Automation Products



Home Automation Products:
AGA iTotal Control



-
The AGA iTotal Control is
a home automation
cooking appliance that gives consumers the ability to remotely control the
cooker

-
Remotely controlled via text message, web based application, smartphone, or personal computers.

-
Uses Wi
-
Fi or GSM mobile phones with SIM cards

-
Priced available by request


Home Automation Products



Home Automation Products:
Logitech Alert



-
The Logitech Alert is
a home automation
security product that allows users to monitor your home or business from
anywhere

-
High quality camera provides a wide
-
angle lens that includes HD video and night vision capability

-
Motion zones provide automated functionality

-
Uses Wi
-
Fi and can be accessed from a web based application or through a internet connected device with the available
smart application.

-
Priced at $299.99 for the base Indoor Master System


Home Automation Products



Home Automation Products:
Cyber Rain Pro Controller



-
The Cyber Rain Pro Controller is
a home automation
convenience product that allows consumers to remotely control and
monitor your landscaping

-
Set schedules to automatically start the sprinkler system

-
Sprinkler system can be customized to access local weather information to automatically adjust its schedule

-
USB connection to personal computer accesses your wireless network to create its own connection between the controller
and your access point

-
Priced at $699.99 for the Residential Pro Series 8 Zone Bundle


Home Automation Products



Home Automation Products: SecuRemote



-
The SecuRemote is
a home automation
convenience product that allows consumers to remotely control garage doors

-
Uses Bluetooth technology to allow any user to remotely control the garage door opener as long as they are within range

-
Compatible with Blackberry, IOS, and Android devices via smart phone application

-
Priced at $149.99


Home Automation Products


Home Automation Products:
Honeywell Smart
Thermostat



-
The Honeywell Smart Thermostat is
a home
automation product that has many neat features including the ability to
remotely control the thermostat

-
Features include touchscreen interface, smart response temperature timing, humidity sensor, and alert notifications

-
Remotely controlled through software application available to any pc, tablet, or smartphone

-
Thermostat uses your home wireless network to allow access from anywhere

-
Priced at $149.99


Home Automation Products


Home Automation Products: X10 Christmas Kit



-
The X10 Christmas Kit is
a home
automation product that provides the ability to control all of your Christmas lights at
your home or business

-
Uses a transceiver module and an appliance module

-
This product works by X10 technology which sends a signal from the transceiver module to an appliance module

-
Designed to prevent fires and to save electricity

-
Priced at $92.99


Security Implications

-
Wi
-
Fi

-
Using WEP is cause for concern

-
WPA2 is the standard but not a silver bullet

-
At a 2010
BlackHat

security conference, researchers
demonstrated a way to trick nodes on a wireless network into
revealing information about their secret keys.

-
Bluetooth

-
Many published attacks exist

-
Problems with products that have weak default passkeys.

-
X10

-
Susceptible to Brute Force attacks against the device

-
Susceptible to subversion via other power outlets


Closing

-
Adoption rates for Home Automation products released to market
continue to increase right along with consumer adoption rates

-
Depending on the wireless technology implemented, Home
Automation products are generally considered safe for the average
consumer to deploy and start using.

-
Home automation vendors should continue to keep up with wireless
security technology implementations, following guidelines set forth
by reputable organizations such as IEEE and ISO

-
Consumers are encouraged to continue adopting Home Automation
products however they should also ensure proper understanding of
the wireless technologies and any potential security ramifications
for their specific use case.