Design And Realization Of Offense And Defense Verification Platform Under Intelligent Home System

With the development of Internet of Things technology,smart home is no longer a dream.With the increasingly wide range of smart home applications,its security issues are also prominent.At the 315 Consumer Rights Day in 2016,white hat hackers exploited router vulnerabilities to monitor traffic to viewers on secure Wi-Fi sites and get information about their APP orders.This is only a small part of the cases.Other smart devices such as drones,smart sockets,smart ovens,smart cameras,etc.,also have different degrees' security issues.Although these smart home devices have facilitated our lives,their insecurity has also lead us to the danger place.At present,in the rapid development of smart home,most of them focus on how to use smart home devices to provide a convenient living without considering that the loopholes in these convenient devices may be provide a door open to the attacker.Moreover,different manufacturers have different development capabilities and may not have safety-related tests or awareness.In view of this situation,we need to build a safety detection platform for unsafe manufacturers and users so that they can recognize that the devices they are using or the upcoming sale of smart home products for loopholes,as well as the repair method.In this paper,the detection theory,technique and method of security problems in smart home scenarios are deeply studied and analyzed,and the platform design scheme including three-party communication detection is given.The main contents of this paper are as follows:(1)Studied the vulnerabilities of smart devices,mobile applications and cloud servers in the smart home environment,and used the model to conduct risk modeling.Under the guidance of the model,we design three main scanning modules of smart home offensive and defensive verification platform:intelligent device scanning module,mobile application scanning module and WEB service scanning module.(2)Realization of the smart home offensive and defensive platform,vulnerabilities detected in the platform include:weak Telnet password,replay attack,insecure configuration,over authorization,component exposure,local file reading,cross-site scripting attacks,etc.Smart devices,mobile applications and WEB applications three communication parties.(3)A detailed test table is designed for the smart home offensive and defensive verification platform,which includes the function test of the module and the overall performance test,and the configuration table of the test environment and the test host is given.After the test function is correct,Several eligible smart home products as the goal,the use of this platform for testing,and achieved good results,and the results were analyzed.Finally,the safety development proposal is given.