{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,4]],"date-time":"2026-08-04T23:55:38Z","timestamp":1785887738868,"version":"3.56.0"},"reference-count":28,"publisher":"MDPI AG","issue":"10","license":[{"start":{"date-parts":[[2017,10,17]],"date-time":"2017-10-17T00:00:00Z","timestamp":1508198400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Symmetry"],"abstract":"<jats:p>In the new era of IoT (Internet of Things), numerous gadgets and services include innovative IoT technologies that provide customers with convenience and improve their quality of life. Smart TVs are typical IoT devices that offer broadcasting services. However, they are susceptible to security intrusions via e-mail, media players, cameras, and internet connectivity. The frequency of hacking through malicious applications installed in Smart TV has rapidly increased. Therefore, appropriate countermeasures should be developed immediately. In April 2017, we (with LG electronics) received the \u2018world-first\u2019 Common Criteria EAL2 (Evaluation Assurance Level 2) certification for Smart TVs. As far as we know, no Smart TV has received a Common Criteria EAL2 security certification until now. This article describes our experience with the certification process and examines several security and reliability aspects of Smart TVs.<\/jats:p>","DOI":"10.3390\/sym9100233","type":"journal-article","created":{"date-parts":[[2017,10,17]],"date-time":"2017-10-17T11:14:35Z","timestamp":1508238875000},"page":"233","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":11,"title":["How to Obtain Common Criteria Certification of Smart TV for Home IoT Security and Reliability"],"prefix":"10.3390","volume":"9","author":[{"given":"Sooyoung","family":"Kang","sequence":"first","affiliation":[{"name":"CIST (Center for Information Security Technologies), Korea University, Seoul 02841, Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Seungjoo","family":"Kim","sequence":"additional","affiliation":[{"name":"CIST (Center for Information Security Technologies), Korea University, Seoul 02841, Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2017,10,17]]},"reference":[{"key":"ref_1","unstructured":"Mustafa, A., and Jacob, J. (2015, January 28). Adapting the Cloud-COVER threat modelling tool to cover threats for the Internet of Things. Proceedings of the Eighth York Doctoral Symposium on Computer Science and Electronics, York, UK."},{"key":"ref_2","unstructured":"Ding, G., Birgitta, L., Gunnar, M., and Andler, S.F. (October, January 30). Towards threat modeling for CPS-based critical infrastructure protection. Proceedings of the 22nd International Emergency Management Society (TIEMS) Annual Conference, Rome, Italy."},{"key":"ref_3","unstructured":"(2017, September 20). Wikileaks. Available online: https:\/\/wikileaks.org\/."},{"key":"ref_4","unstructured":"(2012). Common Criteria Recognition Arrangement, Common Criteria for Information Technology Security Evaluation, Centre for Cellular & Molecular Biology (CCMB). Revision 4."},{"key":"ref_5","unstructured":"(2017, September 20). All Things Apple. Available online: https:\/\/technology.ihs.com\/."},{"key":"ref_6","unstructured":"Seigneur, J.M., Jensen, C.D., Farrell, S., Gray, E., and Chen, Y. (2003, January 15\u201317). Towards security auto-configuration for smart appliances. Proceedings of the Smart Objects Conference, Grenoble, France."},{"key":"ref_7","doi-asserted-by":"crossref","unstructured":"Bachy, Y., Fr\u00e9d\u00e9ric, B., Vincent, N., Eric, A., Mohamed, K., Jean-Christophe, C., and Pierre, L. (2015, January 22\u201325). Smart-TV security analysis: Practical experiments. Proceedings of the 45th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks (DSN), Rio de Janeiro, Brazil.","DOI":"10.1109\/DSN.2015.41"},{"key":"ref_8","unstructured":"Benjamin, M., and Karpow, A. (2014, January 10\u201313). Watch and be watched: compromising all Smart TV generations. Proceedings of the IEEE 11th Consumer Communications and Networking Conference (CCNC), Las Vegas, NV, USA."},{"key":"ref_9","unstructured":"Lee, S., and Seungjoo, K. (2013). Hacking, surveilling and deceiving victims on Smart TV. Blackhat, Legendary Entertainment."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"28","DOI":"10.1109\/MSP.2004.96","article-title":"Certifying open source-the Linux experience","volume":"2","author":"Shankar","year":"2004","journal-title":"IEEE Secur. priv."},{"key":"ref_11","unstructured":"Raimund, G. (2013, January 29\u201331). How hackers are outsmarting Smart TV\u2019s and why it matters to you. Proceedings of the Rsa Conference Europe, Amsterdam, The Netherlands."},{"key":"ref_12","unstructured":"Al Falayleh, M. (2013, January 9\u201311). A review of Smart TV forensics: Present state & future challenges. Proceedings of the International Conference on Digital Information Processing, E-Business and Cloud Computing (DIPECC), Dubai, UAE."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"175","DOI":"10.1016\/j.diin.2014.05.019","article-title":"Forensic analysis of Smart TV: A current issue and call to arms","volume":"11","author":"Sutherland","year":"2014","journal-title":"Digit. Investig."},{"key":"ref_14","unstructured":"Sutherland, I., Xynos, K., Read, H., Jones, A., and Drange, T. (2014, January 1\u20133). A forensic overview of the LG Smart TV. Proceedings of the 12th Australian Digital Forensics Conference, Perth, Australia."},{"key":"ref_15","first-page":"851","article-title":"(The First Experimental) Study on Smart TV forensics","volume":"24","author":"Heesoo","year":"2014","journal-title":"Korea Inst. Inf. Secur. Cryptol."},{"key":"ref_16","unstructured":"Minsu, P., Heesoo, K., Jaeki, K., Seungjin, L., and Seungjoo, K. (2014, January 9\u201311). Developing a protection profile for Smart TV. Proceedings of the 14th International Common Criteria Conference, New Delhi, India."},{"key":"ref_17","unstructured":"(2016). Samsung Smart TV Security Solution V1.0 Security Target V1.5, International Transplant Skin Cancer Collaborative (ITSCC). Version 1.5."},{"key":"ref_18","unstructured":"(2016). Protection Profile for General Purpose Operating Systems, National Information Assurance Partnership (NIAP). Significant Revision."},{"key":"ref_19","unstructured":"(2014). Protection Profile for Mobile Device Fundamentals, National Information Assurance Partnership (NIAP). Version 2.0."},{"key":"ref_20","unstructured":"(2014). Application Software Protection Profile (ASPP), National Information Assurance Partnership (NIAP). Version 1.0."},{"key":"ref_21","unstructured":"(2016). Protection Profile for Application Software, National Information Assurance Partnership (NIAP). Version 1.2."},{"key":"ref_22","unstructured":"(2017). Application Security Solution V1.0 for LG webOS TV Security Target V1.5, National Information Assurance Partnership (NIAP). Version 1.5."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"953","DOI":"10.3923\/jas.2015.953.967","article-title":"Threat modeling approaches for securing cloud computing","volume":"15","author":"Amini","year":"2015","journal-title":"J. Appl. Sci."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Di, J., and Scott, S. (2007, January 20\u201322). A hardware threat modeling concept for trustable integrated circuits. Proceedings of the 2007 IEEE Region 5 Technical Conference, Fayetteville, AR, USA.","DOI":"10.1109\/TPSD.2007.4380353"},{"key":"ref_25","unstructured":"Kornecki, A.J., and Janusz, Z. (2017, September 20). Threat Modeling for Aviation Computer Security. Available online: http:\/\/m.crosstalkonline.org\/issues\/22\/200\/."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"L\u00f6hr, H., Reza Sadeghi, A., St\u00fcble, C., Weber, M., and Winandy, M. (2009, January 6\u20138). Modeling trusted computing support in a protection profile for high assurance security kernels. Proceedings of the 2nd International Conference on Trusted Computing, Oxford, UK.","DOI":"10.1007\/978-3-642-00587-9_4"},{"key":"ref_27","unstructured":"ETAS K.K. (2017, September 20). Security Crash Test\u2014Practical Security Evaluations of Automotive Onboard IT Components. Available online: https:\/\/www.semanticscholar.org\/paper\/Security-Crash-Test-Practical-Security-Evaluations-Bayer-Enderle\/7e564242772ad55f3151f331024638e0c94675b1."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Mich\u00e9le, B. (2015). Security & Privacy Implications. Smart TV Security, Springer Briefs in Computer Science.","DOI":"10.1007\/978-3-319-20994-4"}],"container-title":["Symmetry"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2073-8994\/9\/10\/233\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T18:47:34Z","timestamp":1760208454000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2073-8994\/9\/10\/233"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,10,17]]},"references-count":28,"journal-issue":{"issue":"10","published-online":{"date-parts":[[2017,10]]}},"alternative-id":["sym9100233"],"URL":"https:\/\/doi.org\/10.3390\/sym9100233","relation":{},"ISSN":["2073-8994"],"issn-type":[{"value":"2073-8994","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,10,17]]}}}