CPRE 537 Final Project

1. CPRE 537 Final Project Security Implications of Wireless Technologies in Home Automation David Gassman and Kevin Hanson

2. Security Implications of Wireless Technologies in Home Automation Topics: Consumer Adoption Wireless Technologies Home Automation Products Security Implications What we learned

3. Consumer Adoption Home Automation: Devices used in home automation products such as sensors, programmable lighting, and video cameras available since 1970s which doesn’t explain the slow adoption trends Many consumers are unaware of some of the home automation technologies out on the market today Majority of consumers who have adopted or plan on adopting home automation products in their home aren’t educated on the technology used Trends of consumer level home automation adoption finds consumers getting professional installation instead of self installation Consumers who do self installation often make their homes more vulnerable to attacks Recent surge in home automation industry attributed to consumers wanting more secure homes mainly through remote video monitoring Main issue consumers will face is the backwards process of adopting technology before becoming educated

4. Wireless Technologies

5. Wireless Technologies – Wi-Fi Most popular technology amongst Home Automation products Transmits data over radio waves IEEE standard / managed Various 802.11 protocol implementations (a, b, g, n) WEP, WPA2, WPA2 –PSK encryption

6. Wireless Technologies – Bluetooth Uses radio transmissions to exchange data Short distances – usually up to 30m Relies on strong passkeys for Bluetooth pairing Optional security controls: Pre-shared key authentication along with encryption algorithms Discovery settings from other devices User authorization

7. Wireless Technologies – X10 Transmits data over electrical power wiring Also implemented over wireless radio Rather weak security controls Leverages a preconfigured code scheme that yields a maximum of 256 codes

8. Wireless Technologies – 802.11ac IEEE standard Faster and more scalable than 802.11n Designed with Gigabit Ethernet demands in mind More channel bonding Leverages Multiple MIMO (for better performance and capacity) This is a Wi-Fi solution, so same security mechanisms are available

9. Wireless Technologies – NFC Near Field Communication (NFC) Designed for very close proximity devices (phones / tablets) Contactless; Range of about 4 centimeters Uses electromagnetic radio fields Ability to setup a secure channel with encryption (AES) Inherently more secure due to proximity requirements, but still susceptible to Eavesdropping

10. Wireless Technologies – Wi-Fi Miracast Wi-Fi CERTIFIED Miracast Solution for displaying wireless video between devices No Wi-Fi connection needed, built on Wi-Fi Direct (Wi-Fi Alliance) Supports WPA2-PSK encryption Upon the establishment of connectivity between the source and display devices, the display initiates a Transmission Control Protocol (TCP) connection, with a control port using Real-Time Streaming Protocol (RTSP) to create and manage the sessions between source and display devices.

11. Home Automation Products Home Automation: DoorBot Lockitron Twine WeMo Switch + Motion AGA iTotal Control Logitech Alert Cyber Rain Pro Controller SecuRemote Honeywell Smart Thermostat

12. Home Automation Products Home Automation Products: DoorBot The DoorBot is a home automation product that allows consumers to be connected to their front door via video and voice Uses home wireless network to provide remote access to the product no matter where you are Compatible with any IOS or Android device Video Camera functions at night or during the day Powered by four AA batteries Priced at $189.00

13. Home Automation Products Home Automation Products: Lockitron The Lockitron is a home automation product that provides the ability to remotely access the lock on your door Uses home wireless network to provide remote access to the product no matter where you are Features Bluetooth that allows true keyless entry by sensing when you are close and automatically unlocking Compatible with any IOS or Android device Contains a knock sensor to notify you even if someone knocks on your door Alert notifications sent if the door lock is unlocked with a key Powered by four AA batteries Priced at $179.00

14. Home Automation Products Home Automation Products: Twine Twine is a home automation product that contains wireless sensors to provide the functionality to notify you of issues at home such as pipes freezing, floods, or even if the garage door was left open Uses home wireless network to notify you of important updates which are completely customizable Alerts and notifications based on user created rules Product can notify via E-mail, twitter, text messaging, among other methods Priced at $199.95 for the Twine + Full Sensor Package

15. Home Automation Products Home Automation Products: WeMo Switch + Motion WeMo Switch + Motion is a home automation product that adds wireless functionality to home appliances and electronics Remotely control a device to turn it on or off Use sensors to turn off an appliance if someone comes close to the device Uses Wi-Fi to operate and includes a motion sensor and switch Customizable to set schedules for devices Priced at $99.99

16. Home Automation Products Home Automation Products: AGA iTotal Control The AGA iTotal Control is a home automation cooking appliance that gives consumers the ability to remotely control the cooker Remotely controlled via text message, web based application, smartphone, or personal computers. Uses Wi-Fi or GSM mobile phones with SIM cards Priced available by request

17. Home Automation Products Home Automation Products: Logitech Alert The Logitech Alert is a home automation security product that allows users to monitor your home or business from anywhere High quality camera provides a wide-angle lens that includes HD video and night vision capability Motion zones provide automated functionality Uses Wi-Fi and can be accessed from a web based application or through a internet connected device with the available smart application. Priced at $299.99 for the base Indoor Master System

18. Home Automation Products Home Automation Products: Cyber Rain Pro Controller The Cyber Rain Pro Controller is a home automation convenience product that allows consumers to remotely control and monitor your landscaping Set schedules to automatically start the sprinkler system Sprinkler system can be customized to access local weather information to automatically adjust its schedule USB connection to personal computer accesses your wireless network to create its own connection between the controller and your access point Priced at $699.99 for the Residential Pro Series 8 Zone Bundle

19. Home Automation Products Home Automation Products: SecuRemote The SecuRemote is a home automation convenience product that allows consumers to remotely control garage doors Uses Bluetooth technology to allow any user to remotely control the garage door opener as long as they are within range Compatible with Blackberry, IOS, and Android devices via smart phone application Priced at $149.99

20. Home Automation Products Home Automation Products: Honeywell Smart Thermostat The Honeywell Smart Thermostat is a home automation product that has many neat features including the ability to remotely control the thermostat Features include touchscreen interface, smart response temperature timing, humidity sensor, and alert notifications Remotely controlled through software application available to any pc, tablet, or smartphone Thermostat uses your home wireless network to allow access from anywhere Priced at $149.99

21. Home Automation Products Home Automation Products: X10 Christmas Kit The X10 Christmas Kit is a home automation product that provides the ability to control all of your Christmas lights at your home or business Uses a transceiver module and an appliance module This product works by X10 technology which sends a signal from the transceiver module to an appliance module Designed to prevent fires and to save electricity Priced at $92.99

22. Security Implications Wi-Fi Using WEP is cause for concern WPA2 is the standard but not a silver bullet At a 2010 BlackHat security conference, researchers demonstrated a way to trick nodes on a wireless network into revealing information about their secret keys. Bluetooth Many published attacks exist Problems with products that have weak default passkeys. X10 Susceptible to Brute Force attacks against the device Susceptible to subversion via other power outlets

23. Closing Adoption rates for Home Automation products released to market continue to increase right along with consumer adoption rates Depending on the wireless technology implemented, Home Automation products are generally considered safe for the average consumer to deploy and start using. Home automation vendors should continue to keep up with wireless security technology implementations, following guidelines set forth by reputable organizations such as IEEE and ISO Consumers are encouraged to continue adopting Home Automation products however they should also ensure proper understanding of the wireless technologies and any potential security ramifications for their specific use case.