IoT Inspector: Crowdsourcing Labeled Network Traffic from Smart Home Devices at Scale
summary
An open-source tool called IoT Inspector runs on Mac, Linux, and Windows and captures traffic without extra hardware by using ARP spoofing to sit on-path; deployment yields labeled traffic from 5,404 users covering 54,094 devices. The dataset shows concrete problems: 36% of devices use plaintext HTTP, 10% of TLS-using devices support SSL3/TLS1.0, 417 smart TVs contact tracking—with 22% of their domains tied to advertising, 34% to Google and 5% to Comcast—and the data is slated for public release.
AI-written summary · about
chapters (6)
- 0:00Start
- 0:21Difficult to study lot security and privacy at scale
- 1:02Crowdsource loT traffic at scale
- 2:22Collects traffic via ARP spoofing
- 3:28Scale of deployment
- 4:00Examples of insight
related talks
18mThree Years of Crowdsourcing Network Traffic from Smart Homes
05mIoT Inspector: a platform for real-world smart home research
30mThe Hunt for Major League IoT-ICS Threats: A Deep Dive into IoT Threat Terrain
40mUncovering Covert Channels in Your IoT Networks
40mSecurity/Privacy in the IoT generation
13mThe dark side of IoT
51mThings That Go Bump in the Night: Detecting Problems in the Internet of Things
49mLet's See What's Out There - Mapping the Wireless IOT