How I Can Unlock Your Smart Door: Security Pitfalls in Cross-Vendor IoT Access Control
summary
Demonstrates concrete attacks that turn temporary guest access into persistent control of smart locks by exploiting cross-cloud delegation gaps (Google Home, Tuya, SmartThings, Philips Hue, LIFX, August). Builds an automated analysis pipeline called VARIETY that generates transition models from real configs and uses SPIN model checking to produce counterexamples, then crafts PoC exploits that unlock doors. Finds six new delegation flaws after scanning ten mainstream clouds, exposes issues like device id leakage and secret trigger URL disclosure and shows transitivity and policy-enforcement failures.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 0:46Background
- 11:37Example
- 15:48Formal Verification
- 18:13Vulnerability Discovery
- 19:58Presentation Overview
- 20:20First Vulnerability
- 24:11Second Vulnerability
related talks
39mDilemma in IoT Access Control: Revealing Novel Attacks and Design Challenges in Mobile-as-a-Gateway
41mPwning Centrally-Controlled Smart Homes
26mCodema Attack: Controlling Your Smart Home Through Dangling Management Channels
32mDesign Flaws and Deployment Chaos in Cloud-based IoT Access Control Policies
42mCloudy With a Chance of Exploits: Compromising Critical Infrastructure Through IIoT Cloud Solutions
37mOpen Sesame! The full story behind opening a smart lock
25mTrust in the edge, trouble in the cloud
18mNo Key, No Problem: Vulnerabilities in Master Lock Smart Locks