Vulnerability classification of consumer-based IoT software

Vulnerability classification of consumer-based IoT software

연구 분야: Infrastructure

학회: SERP4IoT '22: Proceedings of the 4th International Workshop on Software Engineering Research and Practice for the IoT

This paper surveys and categorizes potential software vulnerabilities in consumer-based IoT applications. We look at the currently available reported vulnerabilities in the SmartThings platform as well as potential vulnerabilities that face IoT platforms in general. We provide a multi-step categorization that applies available guidance as well as connecting it to frameworks such as OWASP and MITRE ATT&CK to classify the vulnerabilities depending on their platform, layer, nature, class as well as the suggested mitigation.