{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T16:00:42Z","timestamp":1787068842793,"version":"build-2736575974"},"reference-count":65,"publisher":"MDPI AG","issue":"3","license":[{"start":{"date-parts":[[2018,3,8]],"date-time":"2018-03-08T00:00:00Z","timestamp":1520467200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>The Internet of Things (IoT) is an emerging paradigm focusing on the connection of devices, objects, or \u201cthings\u201d to each other, to the Internet, and to users. IoT technology is anticipated to become an essential requirement in the development of smart homes, as it offers convenience and efficiency to home residents so that they can achieve better quality of life. Application of the IoT model to smart homes, by connecting objects to the Internet, poses new security and privacy challenges in terms of the confidentiality, authenticity, and integrity of the data sensed, collected, and exchanged by the IoT objects. These challenges make smart homes extremely vulnerable to different types of security attacks, resulting in IoT-based smart homes being insecure. Therefore, it is necessary to identify the possible security risks to develop a complete picture of the security status of smart homes. This article applies the operationally critical threat, asset, and vulnerability evaluation (OCTAVE) methodology, known as OCTAVE Allegro, to assess the security risks of smart homes. The OCTAVE Allegro method focuses on information assets and considers different information containers such as databases, physical papers, and humans. The key goals of this study are to highlight the various security vulnerabilities of IoT-based smart homes, to present the risks on home inhabitants, and to propose approaches to mitigating the identified risks. The research findings can be used as a foundation for improving the security requirements of IoT-based smart homes.<\/jats:p>","DOI":"10.3390\/s18030817","type":"journal-article","created":{"date-parts":[[2018,3,8]],"date-time":"2018-03-08T12:07:33Z","timestamp":1520510853000},"page":"817","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":277,"title":["Cyber and Physical Security Vulnerability Assessment for IoT-Based Smart Homes"],"prefix":"10.3390","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2309-4930","authenticated-orcid":false,"given":"Bako","family":"Ali","sequence":"first","affiliation":[{"name":"Department of Computer Science, Electrical and Space Engineering, Lule\u00e5 University of Technology, 971 87 Lule\u00e5, Sweden"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3800-0757","authenticated-orcid":false,"given":"Ali","family":"Awad","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Electrical and Space Engineering, Lule\u00e5 University of Technology, 971 87 Lule\u00e5, Sweden"},{"name":"Faculty of Engineering, Al Azhar University, P.O. Box 83513 Qena, Egypt"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2018,3,8]]},"reference":[{"key":"ref_1","first-page":"133","article-title":"A Distributed Security Mechanism for Resource-Constrained IoT Devices","volume":"40","author":"King","year":"2016","journal-title":"Informatica (Slovenia)"},{"key":"ref_2","unstructured":"Ning, H. (2013). Unit and Ubiquitous Internet of Things, CRC Press, Inc."},{"key":"ref_3","unstructured":"Miller, M. (2015). The Internet of Things: How Smart TVs, Smart Cars, Smart Homes, and Smart Cities are Changing the World, Que Publishing."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"2347","DOI":"10.1109\/COMST.2015.2444095","article-title":"Internet of Things: A Survey on Enabling Technologies, Protocols, and Applications","volume":"17","author":"Guizani","year":"2015","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Suryadevara, N.K., and Mukhopadhyay, S.C. (2015). Smart Homes: Design, Implementation and Issues, Springer.","DOI":"10.1007\/978-3-319-13557-1"},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Khan, R., Khan, S.U., Zaheer, R., and Khan, S. (2012, January 17\u201319). Future Internet: The Internet of Things Architecture, Possible Applications and Key Challenges. Proceedings of the 10th International Conference on Frontiers of Information Technology, Islamabad, India.","DOI":"10.1109\/FIT.2012.53"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"759","DOI":"10.1016\/j.egypro.2017.03.238","article-title":"Insights on Smart Home Concept and Occupants\u2019 Interaction with Building Controls","volume":"111","author":"Fabi","year":"2017","journal-title":"Energy Procedia"},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Harper, R. (2003). Inside the Smart Home: Ideas, Possibilities and Methods. Inside the Smart Home, Springer.","DOI":"10.1007\/b97527"},{"key":"ref_9","unstructured":"Aarts, E., and Marzano, S. (2003). The New Everyday: Views on Ambient Intelligence, 010 Publishers."},{"key":"ref_10","unstructured":"Nunes, R.J.C., and Delgado, J.C.M. (2000, January 29\u201331). An Internet Application for Home Automation. Proceedings of the 10th Mediterranean Electrotechnical Conference, Lemesos, Cyprus."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Meghanathan, N., Boumerdassi, S., Chaki, N., and Nagamalai, D. (2010). Mobility Monitoring by Using RSSI in Wireless Sensor Networks. Recent Trends in Networks and Communications, Proceedings of the International Conferences, NeCoM 2010, WiMoN 2010, WeST 2010, Chennai, India, 23\u201325 July 2010, Springer.","DOI":"10.1007\/978-3-642-14493-6"},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"294","DOI":"10.1080\/15325008.2013.832439","article-title":"Smart Home Activities: A Literature Review","volume":"42","author":"Ahmed","year":"2014","journal-title":"Electr. Power Compon. Syst."},{"key":"ref_13","first-page":"171","article-title":"Smart-home Energy Management in the Context of Occupants\u2019 Activity","volume":"38","author":"Zupancic","year":"2014","journal-title":"Informatica (Slovenia)"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Granzer, W., Kastner, W., Neugschwandtner, G., and Praus, F. (2006, January 28\u201330). Security in Networked Building Automation Systems. Proceedings of the 2006 IEEE International Workshop on Factory Communication Systems, Torino, Italy.","DOI":"10.1109\/WFCS.2006.1704168"},{"key":"ref_15","unstructured":"Al-Qutayri, M.A. (2010). IIntegrated Wireless Technologies for Smart Homes Applications. Smart Home Systems, InTech."},{"key":"ref_16","unstructured":"Kyas, O. (2013). How to Smart Home, Key Concept Press."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"1313","DOI":"10.1016\/j.engappai.2012.05.002","article-title":"State of the Art of Smart Homes","volume":"25","author":"Morikawa","year":"2012","journal-title":"Eng. Appl. Artif. Intell."},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Acharjya, D.P., and Geetha, M.K. (2017). Internet of Things: Novel Advances and Envisioned Applications, Springer. [1st ed.].","DOI":"10.1007\/978-3-319-53472-5"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Shen, B., Lin, Y., and Wang, X. (2010, January 9\u201311). Research on Data Mining Models for the Internet of Things. Proceedings of the 2010 International Conference on Image Analysis and Signal Processing, Zhejiang, China.","DOI":"10.1109\/IASP.2010.5476146"},{"key":"ref_20","unstructured":"Kang, B., Liu, F., Yun, Z., and Liang, Y. (2011, January 25\u201328). Design of an Internet of Things-based Smart Home System. Proceedings of the 2011 2nd International Conference on Intelligent Control and Information Processing, Harbin, China."},{"key":"ref_21","unstructured":"Evans, D. (2011). The Internet of Things: How the Next Evolution of the Internet is Changing Everything, Cisco Internet Business Solutions Group (IBSG)."},{"key":"ref_22","unstructured":"Montano, C., Lundmark, M., and M\u00e4hr, W. (2006, January 25\u201326). Control vs. Convenience: Critical Factors of Smart Homes. Proceedings of the 2nd Scandinavian Student Interaction Design Research Conference, Gothenburg, Sweden."},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"\u00d6zcan, A., Zizka, J., and Nagamalai, D. (2011). A Survey of Middleware for Internet of Things. Recent Trends in Wireless and Mobile Networks, Proceedings of the Third International Conferences, WiMo 2011 and CoNeCo 2011, Ankara, Turkey, 26\u201328 June 2011, Springer.","DOI":"10.1007\/978-3-642-21937-5"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Papadopoulos, K., Zahariadis, T., Leligou, N., and Voliotis, S. (2008, January 9\u201313). Sensor Networks Security Issues in Augmented Home Environment. Proceedings of the 2008 IEEE International Symposium on Consumer Electronics, Las Vegas, NV, USA.","DOI":"10.1109\/ISCE.2008.4559421"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"He, J., Xiao, Q., He, P., and Pathan, M.S. (2017). An Adaptive Privacy Protection Method for Smart Home Environments Using Supervised Learning. Future Internet, 9.","DOI":"10.3390\/fi9010007"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Ricquebourg, V., Menga, D., Durand, D., Marhic, B., Delahoche, L., and Loge, C. (2006, January 18\u201320). The Smart Home Concept: Our Immediate Future. Proceedings of the 2006 1st IEEE International Conference on E-Learning in Industrial Electronics, Hammamet, Tunisia.","DOI":"10.1109\/ICELIE.2006.347206"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Chaqfeh, M.A., and Mohamed, N. (2012, January 21\u201325). Challenges in Middleware Solutions for the Internet of Things. Proceedings of the 2012 International Conference on Collaboration Technologies and Systems (CTS), Denver, CO, USA.","DOI":"10.1109\/CTS.2012.6261022"},{"key":"ref_28","unstructured":"Yoo, D.Y., Shin, J.W., and Choi, J.Y. (2007). Home-network Security Model in Ubiquitous Environment. Proc. World Acad. Sci. Eng. Technol., 26, Available online: http:\/\/waset.org\/publications\/2785."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Liu, Y., Hu, S., and Ho, T.Y. (2014, January 2\u20136). Vulnerability Assessment and Defense Technology for Smart Home Cybersecurity Considering Pricing Cyberattacks. Proceedings of the 2014 IEEE\/ACM International Conference on Computer-Aided Design (ICCAD), San Jose, CA, USA.","DOI":"10.1109\/ICCAD.2014.7001350"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Nixon, P.A., Wagealla, W., English, C., and Terzis, S. (2005). Security, Privacy and Trust Issues in Smart Environments. Smart Environments, John Wiley & Sons, Inc.","DOI":"10.1002\/047168659X.ch11"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Schiefer, M. (2015, January 18\u201320). Smart Home Definition and Security Threats. Proceedings of the 2015 Ninth International Conference on IT Security Incident Management IT Forensics, Magdeburg, Germany.","DOI":"10.1109\/IMF.2015.17"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Can, O., and Sahingoz, O.K. (2015, January 27\u201329). A Survey of Intrusion Detection Systems in Wireless Sensor Networks. Proceedings of the 2015 6th International Conference on Modeling, Simulation, and Applied Optimization (ICMSAO), Istanbul, Turkey.","DOI":"10.1109\/ICMSAO.2015.7152200"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Rubio-Loyola, J., Sala, D., and Ali, A.I. (2008, January 3\u20136). Maximizing Packet Loss Monitoring Accuracy for Reliable Trace Collections. Proceedings of the 16th IEEE Workshop on Local and Metropolitan Area Networks (LANMAN2008), Chij-Napoca, Transylvania, Romania.","DOI":"10.1109\/LANMAN.2008.4675845"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Rubio-Loyola, J., Sala, D., and Ali, A.I. (2008, January 14\u201317). Accurate Real-time Monitoring of Bottlenecks and Performance of Packet Trace Collection. Proceedings of the 33rd IEEE Conference on Local Computer Networks (LCN2008), Montreal, QC, Canada.","DOI":"10.1109\/LCN.2008.4664298"},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"719","DOI":"10.1016\/j.future.2015.09.003","article-title":"A Risk Analysis of a Smart Home Automation System","volume":"56","author":"Jacobsson","year":"2016","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"2481","DOI":"10.1007\/s11276-014-0761-7","article-title":"Security of the Internet of Things: Perspectives and Challenges","volume":"20","author":"Jing","year":"2014","journal-title":"Wirel. Netw."},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"398","DOI":"10.1007\/s11859-014-1031-3","article-title":"A Novel Risk Assessment Model for Privacy Security in Internet of Things","volume":"19","author":"Wu","year":"2014","journal-title":"Wuhan Univ. J. Nat. Sci."},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"20","DOI":"10.1109\/MITP.2017.3680959","article-title":"Security Risk Assessment in Internet of Things Systems","volume":"19","author":"Nurse","year":"2017","journal-title":"IT Prof."},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Yang, L., Yang, S.H., and Yao, F. (2006, January 8\u201311). Safety and Security of Remote Monitoring and Control of Intelligent Home Environments. Proceedings of the 2006 IEEE International Conference on Systems, Man and Cybernetics, Taipei, Taiwan.","DOI":"10.1109\/ICSMC.2006.384555"},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Mantoro, T., Ayu, M.A., and Mahmod, S.M.B. (2014, January 14\u201316). Securing the Authentication and Message Integrity for Smart Home using Smart Phone. Proceedings of the 2014 International Conference on Multimedia Computing and Systems (ICMCS), Marrakech, Morocco.","DOI":"10.1109\/ICMCS.2014.6911150"},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Tong, J., Sun, W., and Wang, L. (2013, January 26\u201329). An Information Flow Security Model for Home Area Network of Smart Grid. Proceedings of the 2013 IEEE International Conference on Cyber Technology in Automation, Control and Intelligent Systems, Nanjing, China.","DOI":"10.1109\/CYBER.2013.6705489"},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Caralli, R.A., Stevens, J.F., Young, L.R., and Wilson, W.R. (2007). Introducing Octave Allegro: Improving the Information Security Risk Assessment Process, Software Engineering Institute. Technical Report CMU\/SEI-2007-TR-012, ESC-TR-2007-012.","DOI":"10.21236\/ADA470450"},{"key":"ref_43","unstructured":"Caralli, R., Stevens, J., Young, L., and Wilson, W. (2007). The OCTAVE Allegro Guidebook, v 1.0, Software Engineering Institute."},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"186","DOI":"10.1016\/j.cose.2016.03.004","article-title":"Social Engineering Attack Examples, Templates and Scenarios","volume":"59","author":"Mouton","year":"2016","journal-title":"Comput. Secur."},{"key":"ref_45","first-page":"47","article-title":"Impact of Some Biometric Modalities on Forensic Science","volume":"Volume 555","author":"Muda","year":"2014","journal-title":"Computational Intelligence in Digital Forensics: Forensic Investigation and Applications"},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"92","DOI":"10.1007\/978-3-319-19156-0_10","article-title":"Biometrics Applications in e-Health Security: A Preliminary Survey","volume":"Volume 9085","author":"Yin","year":"2015","journal-title":"Health Information Science"},{"key":"ref_47","unstructured":"Balas, V.E., Jain, L.C., and Kova\u010devi\u0107, B. (2016). Fast Fingerprint Orientation Field Estimation Incorporating General Purpose GPU. Soft Computing Applications, Springer. Advances in Intelligent Systems and Computing."},{"key":"ref_48","unstructured":"Stallings, W., and Brown, L. (2014). Computer Security: Principles and Practice, Prentice Hall Press. [3rd ed.]."},{"key":"ref_49","doi-asserted-by":"crossref","unstructured":"Awad, A.I., and Baba, K. (2012, January 20\u201322). Evaluation of a Fingerprint Identification Algorithm with SIFT Features. Proceedings of the 3rd 2012 IIAI International Conference on Advanced Applied Informatics, Fukuoka, Japan.","DOI":"10.1109\/IIAI-AAI.2012.34"},{"key":"ref_50","unstructured":"Elfatah, A.F.A., Tarrad, I.F., Awad, A.I., and Hamed, H.F.A. (2013, January 26\u201328). Optimized Hardware Implementation of the Advanced Encryption Standard Algorithm. Proceedings of the 8th International Conference on Computer Engineering Systems (ICCES), Cairo, Egypt."},{"key":"ref_51","doi-asserted-by":"crossref","first-page":"122","DOI":"10.1007\/978-3-642-22170-5_11","article-title":"Fingerprint Singularity Detection: A Comparative Study","volume":"Volume 179","author":"Awad","year":"2011","journal-title":"Software Engineering and Computer Systems"},{"key":"ref_52","doi-asserted-by":"crossref","unstructured":"Luo, T., Hao, H., Du, W., Wang, Y., and Yin, H. (2011, January 5\u20139). Attacks on WebView in the Android System. Proceedings of the 27th Annual Computer Security Applications Conference, Orlando, FL, USA.","DOI":"10.1145\/2076732.2076781"},{"key":"ref_53","doi-asserted-by":"crossref","first-page":"433","DOI":"10.1109\/TDSC.2015.2465965","article-title":"SPE: Security and Privacy Enhancement Framework for Mobile Devices","volume":"14","author":"Krupp","year":"2017","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_54","unstructured":"Bako, A. (2016). Internet of Things Based Smart Homes: Security Risk Assessment and Recommendations. [Master\u2019s Thesis, Department of Computer Science, Electrical and Space Engineering, Lule\u00e5 University of Technology]. Available online: http:\/\/www.diva-portal.org\/smash\/get\/diva2:1032194\/FULLTEXT02.pdf."},{"key":"ref_55","doi-asserted-by":"crossref","unstructured":"Chakravarthi, V.S., Shirur, Y.J.M., and Prasad, R. (2013, January 17\u201319). Technology for Smart Home. Proceedings of the International Conference on VLSI, Communication, Advanced Devices, Signals & Systems and Networking (VCASAN-2013), Bangalore, India.","DOI":"10.1007\/978-81-322-1524-0"},{"key":"ref_56","doi-asserted-by":"crossref","first-page":"458","DOI":"10.1016\/j.patcog.2014.08.024","article-title":"Secure Biometric Template Generation for Multi-factor Authentication","volume":"48","author":"Khan","year":"2015","journal-title":"Pattern Recognit."},{"key":"ref_57","unstructured":"Zadran, H. (2018, March 06). Amazing Architecture, 2017. Available online: http:\/\/amazingarchitecture.net\/2017\/05\/19\/elegant-home-plan-design-ideas\/."},{"key":"ref_58","doi-asserted-by":"crossref","unstructured":"Pirbhulal, S., Zhang, H., E Alahi, M.E., Ghayvat, H., Mukhopadhyay, S.C., Zhang, Y.T., and Wu, W. (2016). A Novel Secure IoT-based Smart Home Automation System using a Wireless Sensor Network. Sensors, 17.","DOI":"10.3390\/s17010069"},{"key":"ref_59","doi-asserted-by":"crossref","unstructured":"Su\u00e1rez-Albela, M., Fern\u00e1ndez-Caram\u00e9s, T.M., Fraga-Lamas, P., and Castedo, L. (2017). A Practical Evaluation of a High-Security Energy-Efficient Gateway for IoT Fog Computing Applications. Sensors, 17.","DOI":"10.3390\/s17091978"},{"key":"ref_60","doi-asserted-by":"crossref","first-page":"452","DOI":"10.1016\/j.procs.2015.05.013","article-title":"SEA: A Secure and Efficient Authentication and Authorization Architecture for IoT-Based Healthcare Using Smart Gateways","volume":"52","author":"Moosavi","year":"2015","journal-title":"Procedia Comput. Sci."},{"key":"ref_61","doi-asserted-by":"crossref","unstructured":"Gajewski, M., Batalla, J.M., Mastorakis, G., and Mavromoustakis, C.X. (2017). A Distributed IDS Architecture Model for Smart Home Systems. Clust. Comput.","DOI":"10.1007\/s10586-017-1105-z"},{"key":"ref_62","doi-asserted-by":"crossref","first-page":"516","DOI":"10.1007\/978-3-642-35326-0_51","article-title":"Advanced Encryption Standard Algorithm: Issues and Implementation Aspects","volume":"Volume 322","author":"Hassanien","year":"2012","journal-title":"Advanced Machine Learning Technologies and Applications"},{"key":"ref_63","first-page":"279","article-title":"Fingerprint Local Invariant Feature Extraction on GPU with CUDA","volume":"37","author":"Awad","year":"2013","journal-title":"Informatica (Slovenia)"},{"key":"ref_64","doi-asserted-by":"crossref","first-page":"231","DOI":"10.1007\/978-3-642-30567-2_19","article-title":"Evaluation of Acceleration Algorithm for Biometric Identification","volume":"Volume 294","author":"Benlamri","year":"2012","journal-title":"Networked Digital Technologies"},{"key":"ref_65","doi-asserted-by":"crossref","unstructured":"Bilal, M., and Kang, S.G. (2017). An Authentication Protocol for Future Sensor Networks. Sensors, 17.","DOI":"10.3390\/s17050979"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/18\/3\/817\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T14:58:01Z","timestamp":1760194681000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/18\/3\/817"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,3,8]]},"references-count":65,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2018,3]]}},"alternative-id":["s18030817"],"URL":"https:\/\/doi.org\/10.3390\/s18030817","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,3,8]]}}}