Security and Privacy Analyses of Internet of Things Children’s Toys

descriptionPublicationkeyboard_double_arrow_right Article , Preprint , Other literature type 01 Feb 2019Embargo end date: 01 Jan 2018Publisher:Institute of Electrical and Electronics Engineers (IEEE)Journal:IEEE Internet of Things Journal, volume 6, pages 978-985 (eissn: 2372-2541,

Copyright policy )Funded by:NSF | CI-New: Collaborative Res..., NSF | NeTS: Small: Collaborativ...

Authors: Gordon Chu; Noah J. Apthorpe; Nick Feamster;

doi: 10.1109/jiot.2018.2866423 , 10.48550/arxiv.1805.02751

arXiv: 1805.02751

Security and Privacy Analyses of Internet of Things Children’s Toys

- Summary
- Subjects
- Related research
  (1)
- Metrics

Abstract

This paper investigates the security and privacy of Internet-connected children's smart toys through case studies of three commercially-available products. We conduct network and application vulnerability analyses of each toy using static and dynamic analysis techniques, including application binary decompilation and network monitoring. We discover several publicly undisclosed vulnerabilities that violate the Children's Online Privacy Protection Rule (COPPA) as well as the toys' individual privacy policies. These vulnerabilities, especially security flaws in network communications with first-party servers, are indicative of a disconnect between many IoT toy developers and security and privacy best practices despite increased attention to Internet-connected toy hacking risks.

8 pages, 8 figures; publication version

Related Organizations

College of New Jersey
United States
Princeton University
United States

Keywords

FOS: Computer and information sciences, Computer Science - Computers and Society, Computer Science - Cryptography and Security, Computers and Society (cs.CY), Cryptography and Security (cs.CR)

1 Research products, page 1 of 1

jadx software on GitHub
IsRelatedTo

Impact byBIP!

	selected citations These citations are derived from selected sources. This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).	49
	popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.	Top 10%
	influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).	Top 10%
	impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.	Top 1%