A two-factor authentication scheme against FDM attack in IFTTT based Smart Home System. Issue 77 (August 2018)

• Record Type: Journal Article
• Authors: Baruah, Barnana; Dhal, Subhasish
• Is Part Of: Computers & security. Issue 77(2018)
• Page Start: 21
• Page End: 35
• Publication Date: 2018-08
• Subjects: IFTTT -- IoT -- Malware -- Recipes -- Smart Home; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2018.03.004
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Smart Home is an emerging key-element of the advantages of Internet of Things (IoT), which facilitates an individual to have control over the smart devices of his house through the Internet. However, its control should be confined to the legitimate user only, which can refrain from malicious activities. Internet services like IFTTT (If This Then That) integrate heterogeneous Smart Home devices and allow the user to customize Smart Home configurations via IFTTT recipes. Earlier researches have suggested an attack scenario based on Feature-Distributed Malware (FDM), where the malware can compromise the victim's IFTTT account and as a result the attacker can manipulate the recipes from his own device. This paper proposes a secure IFTTT-based Smart Home framework by incorporating suitable captcha-based One Time Password (OTP) authentication scheme and Physical Unclonable Function (PUF). A suitable adversarial model has been used to evaluate the security of the framework.