Beyond Smart Homes: Characterizing IoT Vulnerabilities Across Sectors, Vendors, and Products
[Kryptografia i bezpieczeństwo] Autorzy: Tina Rezaei, Suzan Bayhan, Andrea Continella i 2 więcej
The Internet of Things (IoT) has expanded beyond consumer smart homes to sectors, such as industrial systems, healthcare, and smart cities, broadening the IoT attack surface. Prior empirical work has focused on studying aggregate IoT vulnerability characteristics or specific protocols, so patching is directed by aggregate security guidance. However, if dominant weaknesses differ substantially across sectors or products, such uniform guidance misdirects the remediation effort. To address this gap, we present a fine-grained, data-driven analysis of IoT vulnerabilities using a dataset of more than 15,000 IoT specific CVEs. We design a pipeline to enrich noisy CPE (Common Platform Enumeration) metadata, normalizing vendors and products, then assigning product type and sector labels using lexical matching, fuzzy clustering, and LLM-assisted classification. We find meaningful differences in t…
- Kategoria arxiv
- cs.CR
- Kategoria
- Kryptografia i bezpieczeństwo