Sensitive Information Tracking in Commodity IoT
summary
Presents a concrete tool and results: SainT static taint analyzer translates SmartThings apps into an intermediate representation, identifies four IoT-sensitive sources (device state, device info, user input, location), and performs backward, context- and path-sensitive taint tracking. Evaluated on 230 SmartThings apps, 138 (60%) with sensitive flows, and on IoTBench (19 apps, 27 known leaks). A web console reports source→sink paths, recipients and message/content, and the analyzer flags potential leaks but does not label intent.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:00What is IoT
- 2:20Methodology
- 9:30Pet ST
- 11:21Pet ST Evaluation
- 13:48Summary
- 15:25Questions
related talks
31mEcosystem, Interoperability and Standards: IoT Security
06mIoT Inspector: Crowdsourcing Labeled Network Traffic from Smart Home Devices at Scale
36mRevisiting Stealthy Sensitive Information Collection from Android Apps
24mIoT Security Testing Guide (ISTG)
29mSmartAuth: User-Centered Authorization for the Internet of Things
48mSecuring The Internet Of Things
11mReal-Time Compromise: Investigating RTC Security in Consumer IoT
59m(In)secure Things