Codema Attack: Controlling Your Smart Home Through Dangling Management Channels

We analyzed 14 top-rated IoT devices and their integration and management of multiple DMCs. We reported our findings to affected parties (e.g., Apple, August Home, Philips Hue, ismartgate, Abode), which all acknowledged their importance. To mitigate this new threat, we designed and implemented CGuard, a new access control framework that device manufacturers can easily integrate into their IoT devices to protect end users. Our evaluation shows that CGuard is highly usable and acceptable to users, easy to adopt by manufacturers, …

attack home management smart smart home