{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T01:35:21Z","timestamp":1760232921819,"version":"build-2065373602"},"reference-count":41,"publisher":"MDPI AG","issue":"23","license":[{"start":{"date-parts":[[2022,12,1]],"date-time":"2022-12-01T00:00:00Z","timestamp":1669852800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Key-Area Research and Development Program of Guangdong Province","award":["2019B010137005"],"award-info":[{"award-number":["2019B010137005"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>As more and more smart devices are deployed in homes, the communication between these smart home devices and elastic computing services may face some risks of privacy disclosure. Different device events (such as the camera on, video on, etc.) will generate different data traffic during communication. However, the current smart home system lacks monitoring of these device events, which may cause the disclosure of private data collected by these devices. In this paper, we present our device event monitor system, HomeMonitor. HomeMonitor runs in the OpenWRT system and supports complete event monitoring for smart home devices. HomeMoitor solves the problem that machine learning models for detecting device events do not scale flexibly. It uses the network packet size and the direction of the device event for unique identification during training. When detecting, it only needs to get the packet size and timestamp and then query the policy table for signature matching to control the device events. We evaluated the effectiveness of HomeMonitor, and the experiments show that the match rate of our method is 98.8%, the false positive rate is 1.8%, and the detection time is only 16.67% for PINBALL. The results mean that our method achieves the balance of applicable protocol scope, detection performance, and detection accuracy.<\/jats:p>","DOI":"10.3390\/s22239389","type":"journal-article","created":{"date-parts":[[2022,12,2]],"date-time":"2022-12-02T03:28:04Z","timestamp":1669951684000},"page":"9389","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["HomeMonitor: An Enhanced Device Event Detection Method for Smart Home Environment"],"prefix":"10.3390","volume":"22","author":[{"given":"Meng","family":"Zhao","sequence":"first","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou 510006, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jie","family":"Chen","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou 510006, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhikai","family":"Yang","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou 510006, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yaping","family":"Liu","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou 510006, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shuo","family":"Zhang","sequence":"additional","affiliation":[{"name":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou 510006, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2022,12,1]]},"reference":[{"key":"ref_1","unstructured":"Zhou, W., Jia, Y., Yao, Y., Zhu, L., Guan, L., Mao, Y., Liu, P., and Zhang, Y. (2019, January 14\u201316). Discovering and understanding the security hazards in the interactions between IoT devices, mobile apps, and clouds on smart home platforms. Proceedings of the 28th USENIX Conference on Security Symposium, Santa Clara, CA, USA."},{"key":"ref_2","unstructured":"(2021, May 02). Turning an Echo into a Spy Device Only Took Some Clever Coding. Available online: https:\/\/www.wired.com\/story\/amazon-echo-alexa-skill-spying."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"4682","DOI":"10.1109\/JIOT.2020.2969326","article-title":"A survey on access control in the age of internet of things","volume":"7","author":"Qiu","year":"2020","journal-title":"IEEE Int. Things J."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"433","DOI":"10.1016\/j.future.2020.02.017","article-title":"Selection of effective machine learning algorithm and Bot-IoT attacks traffic identification for internet of things in smart city","volume":"107","author":"Shafiq","year":"2020","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3374749","article-title":"User and entity behavior analysis under urban big data","volume":"1","author":"Tian","year":"2020","journal-title":"ACM\/IMS Trans. Data Sci."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Ren, J., Dubois, D.J., Choffnes, D., Mandalari, A.M., Kolcun, R., and Haddadi, H. (2019, January 21\u201323). Information exposure from consumer IoT devices: A multidimensional, network-informed measurement approach. Proceedings of the Internet Measurement Conference, Amsterdam, The Netherlands.","DOI":"10.1145\/3355369.3355577"},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Mazhar, M.H., and Shafiq, Z. (2020, January 21\u201324). Characterizing smart home IoT traffic in the wild. Proceedings of the 2020 IEEE\/ACM Fifth International Conference on Internet-of-Things Design and Implementation (IoTDI), Sydney, NSW, Australia.","DOI":"10.1109\/IoTDI49375.2020.00027"},{"key":"ref_8","unstructured":"Apthorpe, N., Reisman, D., Sundaresan, S., Narayanan, A., and Feamster, N. (2017). Spying on the smart home: Privacy attacks and defenses on encrypted IoT traffic. arXiv."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"1402","DOI":"10.1109\/JSAC.2019.2904364","article-title":"Audi: Toward autonomous IoT device-type identification using periodic communication","volume":"37","author":"Marchal","year":"2019","journal-title":"IEEE J. Sel. Areas Commun"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Bezawada, B., Bachani, M., Peterson, J., Shirazi, H., Ray, I., and Ray, I. (2018, January 15\u201319). Behavioral fingerprinting of IoT devices. Proceedings of the 2018 Workshop on Attacks and Solutions in Hardware Security, Toronto, ON, Canada.","DOI":"10.1145\/3266444.3266452"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Sivanathan, A., Sherratt, D., Gharakheili, H.H., Radford, A., Wijenayake, C., Vishwanath, A., and Sivaraman, V. (2017, January 1\u20134). Characterizing and classifying IoT traffic in smart cities and campuses. Proceedings of the 2017 IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), Atlanta, GA, USA.","DOI":"10.1109\/INFCOMW.2017.8116438"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Miettinen, M., Marchal, S., Hafeez, I., Asokan, N., Sadeghi, A.R., and Tarkoma, S. (2017, January 5\u20138). IoT SENTINEL: Automated device-type identification for security enforcement in IoT. Proceedings of the 2017 IEEE 37th International Conference on Distributed Computing Systems (ICDCS), Atlanta, GA, USA.","DOI":"10.1109\/ICDCS.2017.283"},{"key":"ref_13","unstructured":"Meidan, Y., Bohadana, M., Shabtai, A., Ochoa, M., Tippenhauer, N.O., Guarnizo, J.D., and Elovici, Y. (2017). Detection of unauthorized IoT devices using machine learning techniques. arXiv."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Santos, M.R.P., Andrade, R.M.C., Gomes, D.G., and Callado, A.C. (2018, January 25\u201328). An efficient approach for device identification and traffic classification in IoT ecosystems. Proceedings of the 2018 IEEE Symposium on Computers and Communications (ISCC), Natal, Brazil.","DOI":"10.1109\/ISCC.2018.8538630"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Shahid, M.R., Blanc, G., Zhang, Z., and Debar, H. (2018, January 10\u201313). IoT devices recognition through network traffic analysis. Proceedings of the 2018 IEEE International Conference on Big Data (Big Data), Seattle, WA, USA.","DOI":"10.1109\/BigData.2018.8622243"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Alshehri, A., Granley, J., and Yue, C. (2020, January 16\u201318). Attacking and protecting tunneled traffic of smart home devices. Proceedings of the Tenth ACM Conference on Data and Application Security and Privacy, New Orleans, LA, USA.","DOI":"10.1145\/3374664.3375723"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Charyyev, B., and Gunes, M.H. (2020, January 6\u20139). IoT event classification based on network traffic. Proceedings of the IEEE INFOCOM 2020\u2014IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), Toronto, ON, Canada.","DOI":"10.1109\/INFOCOMWKSHPS50562.2020.9162885"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Bai, L., Yao, L., Kanhere, S.S., Wang, X., and Yang, Z. (2018, January 1\u20134). Automatic device classification from network traffic streams of internet of things. Proceedings of the 2018 IEEE 43rd Conference on Local Computer Networks (LCN), Chicago, IL, USA.","DOI":"10.1109\/LCN.2018.8638232"},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Dong, S., Li, Z., Tang, D., Chen, J., Sun, M., and Zhang, K. (2020, January 5\u20139). Your smart home can\u2019t keep a secret: Towards automated fingerprinting of IoT traffic. Proceedings of the 15th ACM Asia Conference on Computer and Communications Security, Taipei, Taiwan.","DOI":"10.1145\/3320269.3384732"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"1745","DOI":"10.1109\/TMC.2018.2866249","article-title":"Classifying IoT Devices in Smart Environments Using Network Traffic Characteristics","volume":"18","author":"Sivanathan","year":"2019","journal-title":"IEEE Trans. Mobile Comput."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Aksoy, A., and Gunes, M.H. (2019, January 20\u201324). Automated IoT Device Identification using Network Traffic. Proceedings of the ICC 2019\u20142019 IEEE International Conference on Communications (ICC), Shanghai, China.","DOI":"10.1109\/ICC.2019.8761559"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Pashamokhtari, A. (2020, January 21\u201324). PhD forum abstract: Dynamic inference on IoT network traffic using programmable telemetry and machine learning. Proceedings of the 2020 19th ACM\/IEEE International Conference on Information Processing in Sensor Networks (IPSN), Sydney, NSW, Australia.","DOI":"10.1109\/IPSN48710.2020.00006"},{"key":"ref_23","unstructured":"Sivanathan, A. (2020). IoT behavioral monitoring via network traffic analysis. arXiv."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Acar, A., Fereidooni, H., Abera, T., Sikder, A.K., Miettinen, M., Aksu, H., Conti, M., Sadeghi, A.-R., and Uluagac, S. (2020, January 8\u201310). Peek-a-boo: I see your smart home activities, even encrypted!. Proceedings of the 13th ACM Conference on Security and Privacy in Wireless and Mobile Networks, Linz, Austria.","DOI":"10.1145\/3395351.3399421"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"940","DOI":"10.1109\/JIOT.2018.2865604","article-title":"DEFT: A distributed IoT fingerprinting technique","volume":"6","author":"Thangavelu","year":"2019","journal-title":"IEEE Internet Things J."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Ortiz, J., Crawford, C., and Le, F. (2019, January 15\u201318). DeviceMien: Network device behavior modeling for identifying unknown IoT devices. Proceedings of the International Conference on Internet of Things Design and Implementation, Montreal, QC, Canada.","DOI":"10.1145\/3302505.3310073"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"OConnor, T., Mohamed, R., Miettinen, M., Enck, W., Reaves, B., and Sadeghi, A.-R. (2019, January 15\u201317). HomeSnitch: Behavior transparency and control for smart home IoT devices. Proceedings of the 12th Conference on Security and Privacy in Wireless and Mobile Networks, Miami, Florida.","DOI":"10.1145\/3317549.3323409"},{"key":"ref_28","unstructured":"Apthorpe, N., Reisman, D., and Feamster, N. (2017). A smart home is no castle: Privacy vulnerabilities of encrypted IoT traffic. arXiv."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Sivanathan, A., Gharakheili, H.H., and Sivaraman, V. (2018, January 21\u201322). Can we classify an IoT device using TCP port scan? In , , . Proceedings of the 2018 IEEE International Conference on Information and Automation for Sustainability (ICIAfS), Colombo, Sri Lanka.","DOI":"10.1109\/ICIAFS.2018.8913346"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Valdez, E., Pendarakis, D., and Jamjoom, H. (2019, January 8\u201313). How to discover IoT devices when network traffic is encrypted. Proceedings of the 2019 IEEE International Congress on Internet of Things (ICIOT), Milan, Italy.","DOI":"10.1109\/ICIOT.2019.00016"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Copos, B., Levitt, K., Bishop, M., and Rowe, J. (2016, January 22\u201326). Is anybody home? Inferring activity from smart home network traffic. Proceedings of the 2016 IEEE Security and Privacy Workshops (SPW), San Jose, CA, USA.","DOI":"10.1109\/SPW.2016.48"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Trimananda, R., Varmarken, J., Markopoulou, A., and Demsky, B. (2020, January 23\u201326). Packet-level signatures for smart home devices. Proceedings of the Network and Distributed System Security Symposium, San Diego, CA, USA.","DOI":"10.14722\/ndss.2020.24097"},{"key":"ref_33","unstructured":"Duan, C., Zhang, S., Yang, J., Wang, Z., Yang, Y., and Li, J. (2021, January 17\u201321). PINBALL: Universal and robust signature extraction for smart home devices. Proceedings of the 2021 IFIP\/IEEE International Symposium on Integrated Network Management (IM), Bordeaux, France."},{"key":"ref_34","unstructured":"(2021, February 08). FingerBank\u2014Open DHCP Fingerprints Database. Available online: https:\/\/www.fingerbank.org\/."},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Charyyev, B., and Gunes, M.H. (2020, January 7\u201311). IoT traffic flow identification using locality sensitive hashes. Proceedings of the ICC 2020\u20142020 IEEE International Conference on Communications (ICC), Dublin, Ireland.","DOI":"10.1109\/ICC40277.2020.9148743"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Chen, J., Liu, Y., Zhang, S., Guo, Z., Chen, B., and Han, Z. (2022, January 11\u201313). DESEND: A Fast Device Event Signature Extraction and Detection Method for Smart Home. Proceedings of the 2022 7th IEEE International Conference on Data Science in Cyberspace (DSC), Guilin, China.","DOI":"10.1109\/DSC55868.2022.00098"},{"key":"ref_37","unstructured":"Lear, E., Droms, R., and Romascanu, D. (2022, February 08). Manufacturer Usage Description Specification. Available online: https:\/\/www.rfc-editor.org\/rfc\/rfc8520."},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"927","DOI":"10.1109\/JIOT.2020.3010023","article-title":"IoT-Praetor: Undesired behaviors detection for IoT devices","volume":"8","author":"Wang","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"ref_39","unstructured":"Chi, H., Zeng, Q., Du, X., and Luo, L. (2019). PFirewall: Semantics-aware customizable data flow control for home automation systems. arXiv."},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"63457","DOI":"10.1109\/ACCESS.2019.2911202","article-title":"Privacy leakage in smart homes and its mitigation: IFTTT as a case study","volume":"7","author":"Xu","year":"2019","journal-title":"IEEE Access"},{"key":"ref_41","unstructured":"Song, J., Wang, W., Gadekallu, T., Cao, J., and Liu, Y. (2021). EPPDA: An Efficient Privacy-Preserving Data Aggregation Federated Learning Scheme. IEEE Trans. Netw. Sci. Eng."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/23\/9389\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T01:32:18Z","timestamp":1760146338000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/22\/23\/9389"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,12,1]]},"references-count":41,"journal-issue":{"issue":"23","published-online":{"date-parts":[[2022,12]]}},"alternative-id":["s22239389"],"URL":"https:\/\/doi.org\/10.3390\/s22239389","relation":{},"ISSN":["1424-8220"],"issn-type":[{"type":"electronic","value":"1424-8220"}],"subject":[],"published":{"date-parts":[[2022,12,1]]}}}