All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT...
Transcript of All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT...
![Page 1: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/1.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
All Things Considered: An Analysis of IoT Devices on
Home Networks
Deepak Kumar University of Illinois
Kelly Shen Stanford University
Benton Case Stanford University
Galina Alperovich Avast Software
�1
Deepali Garg Avast Software
Dmitry KuznetsovAvast Software
Rajarshi Gupta Avast Software
Zakir Durumeric Stanford University
![Page 2: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/2.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �2
![Page 3: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/3.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
We have little visibility into the devices consumers are
putting into their homes
�3
![Page 4: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/4.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
What does the home IoT ecosystem look like?
�4
![Page 5: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/5.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �5
![Page 6: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/6.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector
• Performs internal network scans and checks devices for weak security
• Device identification
• Weak default credentials
• Vulnerability to known recent CVEs
�6
![Page 7: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/7.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector
• Performs internal network scans and checks devices for weak security
• Device identification
• Weak default credentials
• Vulnerability to known recent CVEs
�7
![Page 8: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/8.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector
• Performs internal network scans and checks devices for weak security
• Device identification
• Weak default credentials
• Vulnerability to known recent CVEs
�8
![Page 9: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/9.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector
9
70
Open Services
![Page 10: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/10.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector
10
70
Probe devices in increasing IP order via ICMP, TCP/UDP
Open Services
![Page 11: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/11.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector
11
70
Probe devices in increasing IP order via ICMP, TCP/UDP
Open Services
80, 443, 23, 53
![Page 12: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/12.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector
12
70
Probe devices in increasing IP order via ICMP, TCP/UDP
Open Services
80, 443, 23, 53
21, 22, 23
![Page 13: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/13.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector
13
70
Probe devices in increasing IP order via ICMP, TCP/UDP
Open Services
80, 443, 23, 53
21, 22, 23
80, 443, 1900
![Page 14: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/14.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector
14
70
Probe devices in increasing IP order via ICMP, TCP/UDP
Open Services
80, 443, 23, 53
21, 22, 23
80, 443, 1900, 23
![Page 15: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/15.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector
15
70
Collects semantically rich broadcast/multicast
traffic via DHCP, mDNS, UPnP
Open Services
80, 443, 23, 53
21, 22, 23
80, 443, 1900, 23
DHCP Class ID:Hikvision–Surveillance
![Page 16: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/16.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector: DeviceID
16
• Determine device vendor, fit device into one of 14 device classes
• Network Rules (regex)
• Supervised ML
![Page 17: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/17.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector: DeviceID Classes
17
Device Classes
Computer Router
Mobile Device Wearable
Game Console Home Automation
Storage Surveillance
Work Appliance Voice Assistant
Vehicle Media/TV
Home Appliance Generic IoT
![Page 18: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/18.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector: DeviceID Classes
18
Device Classes
Computer Router
Mobile Device Wearable
Game Console Home Automation
Storage Surveillance
Work Appliance Voice Assistant
Vehicle Media/TV
Home Appliance Generic IoT
![Page 19: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/19.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector: DeviceID
19
• Determine device vendor, fit device into one of 14 device classes
• Network Rules (regex)
• Supervised ML
![Page 20: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/20.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �20
Network RulesProtocol Field Pattern Type
DHCP Class ID
(?i)SAMSUNG[- :_]Network[- :_]Printer Printer
mDNS Name(?i)_nanoleaf(?:api|ms)?
\._tcp\.local\. Lighting
UPnP Device Type .*hub2.* IoT Hub
HTTP Title(?i)Polycom - (?:SoundPoint IP )?
(?:SoundStation IP )? VoIP Phone
![Page 21: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/21.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Avast Wi-Fi Inspector: DeviceID
21
• Determine device vendor, fit device into one of 14 device classes
• Network Rules (regex)
• Supervised ML
![Page 22: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/22.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Supervised ML
22
• Ensemble model that leverages several network features
• Trained on 500K devices from real world scans
• 300K labels from network rules
• 200K manually labeled
• Tested on a set of 1K manually labeled unseen devices
![Page 23: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/23.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �23
Machine LearningClassifier Coverage Accuracy F1
Network 0.89 0.96 0.79
UPnP 0.27 0.91 0.37
mDNS 0.05 0.94 0.25
HTTP 0.14 0.98 0.23
Supervised Ensemble 0.92 0.96 0.8
![Page 24: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/24.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Ethical Considerations
• Avast only shared aggregate data to our team, aggregated by device manufacturer, region, and device type
• No personally identifiable data was shared with research team, including IP addresses of homes
• Scans in our dataset are all user initiated, never automated
�24
![Page 25: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/25.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Dataset
Network scans collected from 15.5 million homes, spanning
83 million devices across 11 geographic regions
�25
![Page 26: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/26.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
What do home networks look like?
�26
![Page 27: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/27.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �27
Region % Homes w/ IoT Device Med. Devices per Home
North America 66.3% 7Western Europe 53.5% 4
Oceania 49.2% 4
Central + South America 31.7% 4East Asia 30.8% 3
Eastern Europe 25.2% 3Southeast Asia 21.7% 4
Sub-Saharan Africa 19.7% 3
North Africa/Middle East 19.1% 3
Central Asia 17.3% 2South Asia 8.7% 2
Homes w/ IoT Devices
![Page 28: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/28.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �28
Region % Homes w/ IoT Device Med. Devices per Home
North America 66.3% 7Western Europe 53.5% 4
Oceania 49.2% 4
Central + South America 31.7% 4East Asia 30.8% 3
Eastern Europe 25.2% 3Southeast Asia 21.7% 4
Sub-Saharan Africa 19.7% 3
North Africa/Middle East 19.1% 3
Central Asia 17.3% 2South Asia 8.7% 2
Homes w/ IoT Devices
![Page 29: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/29.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �29
Region % Homes w/ IoT Device Med. Devices per Home
North America 66.3% 7Western Europe 53.5% 4
Oceania 49.2% 4
Central + South America 31.7% 4East Asia 30.8% 3
Eastern Europe 25.2% 3Southeast Asia 21.7% 4
Sub-Saharan Africa 19.7% 3
North Africa/Middle East 19.1% 3
Central Asia 17.3% 2South Asia 8.7% 2
Homes w/ IoT Devices
![Page 30: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/30.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
What is an IoT device?*
�30
*empirically
![Page 31: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/31.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �31
A Typical North American Home
![Page 32: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/32.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �32
A Typical North American HomeDevice Type % of North American
HomesMedia/TV 43%
Work Appliance (e.g., printer) 33%
Gaming Console 16%
Voice Assistant 10%
Surveillance 4%
Storage (NAS) 3%
Home Automation (e.g., Nest) 2%
Wearable (e.g., watch) 0.2%
Other IoT 0.4%
Device Type % of North American Homes
Media/TV 43%
Work Appliance (e.g., printer) 33%
Gaming Console 16%
Voice Assistant 10%
Surveillance 4%
Storage (NAS) 3%
Home Automation (e.g., Nest) 2%
Wearable (e.g., watch) 0.2%
Other IoT 0.4%
Device Type % of North American Homes
Media 43%
Work Appliance (e.g., printer) 33%
Gaming Console 16%
Voice Assistant 10%
Surveillance 4%
Storage (NAS) 3%
Home Automation (e.g., Nest) 2%
Wearable (e.g., watch) 0.2%
Other IoT 0.4%
![Page 33: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/33.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �33
A Typical North American HomeDevice Type % of North American
HomesMedia/TV 43%
Work Appliance (e.g., printer) 33%
Gaming Console 16%
Voice Assistant 10%
Surveillance 4%
Storage (NAS) 3%
Home Automation (e.g., Nest) 2%
Wearable (e.g., watch) 0.2%
Other IoT 0.4%
Device Type % of North American Homes
Media/TV 43%
Work Appliance (e.g., printer) 33%
Gaming Console 16%
Voice Assistant 10%
Surveillance 4%
Storage (NAS) 3%
Home Automation (e.g., Nest) 2%
Wearable (e.g., watch) 0.2%
Other IoT 0.4%
Device Type % of North American Homes
Media 43%
Work Appliance (e.g., printer) 33%
Gaming Console 16%
Voice Assistant 10%
Surveillance 4%
Storage (NAS) 3%
Home Automation (e.g., Nest) 2%
Wearable (e.g., watch) 0.2%
Other IoT 0.4%
![Page 34: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/34.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �34
0
20
40
60
80
100
N America
C + S America
E Europe
W + N Europe
E AsiaC Asia
SE Asia
S AsiaN Africa and Mid East
Oceania
Sub-Saharan Africa
Frac
tion
IoT
Type
Game ConsoleHome Appliance
Home Automation
Generic IoTMedia
Surveillance
Work ApplianceStorage
Voice Assistant
![Page 35: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/35.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �35
0
20
40
60
80
100
N America
C + S America
E Europe
W + N Europe
E AsiaC Asia
SE Asia
S AsiaN Africa and Mid East
Oceania
Sub-Saharan Africa
Frac
tion
IoT
Type
Game ConsoleHome Appliance
Home Automation
Generic IoTMedia
Surveillance
Work ApplianceStorage
Voice Assistant
Media devices are the most popular device type in 7 of 11 regions
![Page 36: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/36.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �36
0
20
40
60
80
100
N America
C + S America
E Europe
W + N Europe
E AsiaC Asia
SE Asia
S AsiaN Africa and Mid East
Oceania
Sub-Saharan Africa
Frac
tion
IoT
Type
Game ConsoleHome Appliance
Home Automation
Generic IoTMedia
Surveillance
Work ApplianceStorage
Voice Assistant
Home automation and voice assistants are only prevalent (>1% of homes) inNorth America, Western Europe, Oceania
![Page 37: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/37.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �37
0
20
40
60
80
100
N America
C + S America
E Europe
W + N Europe
E AsiaC Asia
SE Asia
S AsiaN Africa and Mid East
Oceania
Sub-Saharan Africa
Frac
tion
IoT
Type
Game ConsoleHome Appliance
Home Automation
Generic IoTMedia
Surveillance
Work ApplianceStorage
Voice Assistant
Surveillance devices are the most common device type in South/Southeast Asia
![Page 38: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/38.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �38
0
20
40
60
80
100
N America
C + S America
E Europe
W + N Europe
E AsiaC Asia
SE Asia
S AsiaN Africa and Mid East
Oceania
Sub-Saharan Africa
Frac
tion
IoT
Type
Game ConsoleHome Appliance
Home Automation
Generic IoTMedia
Surveillance
Work ApplianceStorage
Voice Assistant
Work appliances are the most common device type in East Asia/Sub-Saharan Africa
![Page 39: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/39.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �39
0
20
40
60
80
100
N America
C + S America
E Europe
W + N Europe
E AsiaC Asia
SE Asia
S AsiaN Africa and Mid East
Oceania
Sub-Saharan Africa
Frac
tion
IoT
Type
Game ConsoleHome Appliance
Home Automation
Generic IoTMedia
Surveillance
Work ApplianceStorage
Voice Assistant
Each region has unique device type “preferences”
![Page 40: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/40.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Who is making these devices?
�40
![Page 41: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/41.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �41
IoT Vendors by Region
0 0.1 0.2 0.3 0.4 0.5 0.6 0.7 0.8 0.9
1
1 10 100 1000 10000
Cum
ulat
ive F
ract
ion
of D
evice
s
Vendor by Rank
Central and South AmericaCentral Asia
Eastern and Southern EuropeEastern Asia
North Africa and Middle EastNorthern America
OceaniaSoutheastern Asia
Southern AsiaSub-Saharan Africa
Western and Northern Europe
![Page 42: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/42.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �42
IoT Vendors by Region
0 0.1 0.2 0.3 0.4 0.5 0.6 0.7 0.8 0.9
1
1 10 100 1000 10000
Cum
ulat
ive F
ract
ion
of D
evice
s
Vendor by Rank
Central and South AmericaCentral Asia
Eastern and Southern EuropeEastern Asia
North Africa and Middle EastNorthern America
OceaniaSoutheastern Asia
Southern AsiaSub-Saharan Africa
Western and Northern Europe
![Page 43: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/43.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �43
IoT Vendors by Region
0 0.1 0.2 0.3 0.4 0.5 0.6 0.7 0.8 0.9
1
1 10 100 1000 10000
Cum
ulat
ive F
ract
ion
of D
evice
s
Vendor by Rank
Central and South AmericaCentral Asia
Eastern and Southern EuropeEastern Asia
North Africa and Middle EastNorthern America
OceaniaSoutheastern Asia
Southern AsiaSub-Saharan Africa
Western and Northern Europe
90% of IoT devices in every region are manufactured
by ~100 vendors…
![Page 44: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/44.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �44
IoT Vendors by Region
0 0.1 0.2 0.3 0.4 0.5 0.6 0.7 0.8 0.9
1
1 10 100 1000 10000
Cum
ulat
ive F
ract
ion
of D
evice
s
Vendor by Rank
Central and South AmericaCentral Asia
Eastern and Southern EuropeEastern Asia
North Africa and Middle EastNorthern America
OceaniaSoutheastern Asia
Southern AsiaSub-Saharan Africa
Western and Northern Europe
…with a heavy tail of vendors.
![Page 45: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/45.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �45
IoT Vendors by Device Type
0 0.1 0.2 0.3 0.4 0.5 0.6 0.7 0.8 0.9
1
1 10 100 1000 10000
Cum
ulat
ive
Frac
tion
of D
evic
es
Vendor by Rank
MediaHome Appliance
Game ConsoleHome Automation
Generic IoTSurveillance
Work ApplianceStorage
Voice AssistantWearable
![Page 46: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/46.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �46
IoT Vendors by Device Type
0 0.1 0.2 0.3 0.4 0.5 0.6 0.7 0.8 0.9
1
1 10 100 1000 10000
Cum
ulat
ive
Frac
tion
of D
evic
es
Vendor by Rank
Game ConsoleVoice Assistant
![Page 47: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/47.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �47
IoT Vendors by Device Type
0 0.1 0.2 0.3 0.4 0.5 0.6 0.7 0.8 0.9
1
1 10 100 1000 10000
Cum
ulat
ive
Frac
tion
of D
evic
es
Vendor by Rank
MediaSurveillance
Storage
![Page 48: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/48.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �48
IoT Vendors by Device Type
0 0.1 0.2 0.3 0.4 0.5 0.6 0.7 0.8 0.9
1
1 10 100 1000 10000
Cum
ulat
ive
Frac
tion
of D
evic
es
Vendor by Rank
MediaSurveillance
Storage
Vendor diversity depends on device type
![Page 49: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/49.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
What does that mean for IoT security?
�49
![Page 50: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/50.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �50
Weak Credentials• “Security” is hard to measure in such a heterogeneous ecosystem
• WiFi inspector checks for weak FTP, Telnet credentials
• 7.8% devices support FTP, 7.1% devices support Telnet
• 17.4% exhibit weak FTP credentials
• 2.1% exhibit weak Telnet credentials
![Page 51: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/51.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �51
Weak Credentials• “Security” is hard to measure in such a heterogeneous ecosystem
• We check weak credentials as a proxy for security
• 7.8% devices support FTP, 7.1% devices support Telnet
• 17.4% exhibit weak FTP credentials
• 2.1% exhibit weak Telnet credentials
![Page 52: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/52.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �52
Weak Credentials• “Security” is hard to measure in such a heterogeneous ecosystem
• We check weak credentials as a proxy for security
• 7.8% devices support FTP, 7.1% devices support Telnet
• 17.4% exhibit weak FTP credentials
• 2.1% exhibit weak Telnet credentials
![Page 53: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/53.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �53
Weak Credentials• “Security” is hard to measure in such a heterogeneous ecosystem
• We check weak credentials as a proxy for security
• 7.8% devices support FTP, 7.1% devices support Telnet
• 17.4% exhibit weak FTP credentials
• 2.1% exhibit weak Telnet credentials
![Page 54: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/54.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �54
Device Type % Support Telnet % Weak Telnet
Surveillance 14.6% 10.7%
Router 14.6% 1.9%
Home Appliance 3.2% 1.6%
Media 1.4% 0.9%
Case Study: Weak Telnet Credentials
![Page 55: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/55.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �55
Device Type % Support Telnet % Weak Telnet
Surveillance 14.6% 10.7%
Router 14.6% 1.9%
Home Appliance 3.2% 1.6%
Media 1.4% 0.9%
Case Study: Weak Telnet Credentials
![Page 56: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/56.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �56
Case Study: Weak Telnet CredentialsRegion % IoT Weak Telnet % Surveillance
North America 0.5% 3.7%South America 4.9% 13.3%Eastern Europe 3.0% 14.0%
Western Europe 1.0% 5.6%East Asia 0.4% 9.1%
Central Asia 4.9% 30.3%SE Asia 3.6% 37.0%
South Asia 2.9% 54.5%
Oceania 0.7% 4.3%N. Africa + Middle East 4.8% 28.5%
Sub-Saharan Africa 1.1% 18%
![Page 57: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/57.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �57
Case Study: Weak Telnet CredentialsRegion % IoT Weak Telnet % Surveillance
North America 0.5% 3.7%South America 4.9% 13.3%Eastern Europe 3.0% 14.0%
Western Europe 1.0% 5.6%East Asia 0.4% 9.1%
Central Asia 4.9% 30.3%SE Asia 3.6% 37.0%
South Asia 2.9% 54.5%
Oceania 0.7% 4.3%N. Africa + Middle East 4.8% 28.5%
Sub-Saharan Africa 1.1% 18%
![Page 58: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/58.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �58
Mirai Infections
![Page 59: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/59.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks �59
Mirai Infections
Security challenges vary per region depending on device preferences
![Page 60: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/60.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Takeaways
• Home IoT ecosystem is diverse and fragmented
• Regional differences in # of devices, device types, and device vendors
• Quantifying IoT security at scale remains an outstanding challenge
• IoT has been here… for years
�60
![Page 61: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/61.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Takeaways
• Home IoT ecosystem is diverse and fragmented
• Regional differences in # of devices, device types, and device vendors
• Quantifying IoT security at scale remains an outstanding challenge
• IoT has been here… for years
�61
![Page 62: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/62.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Takeaways
• Home IoT ecosystem is diverse and fragmented
• Regional differences in # of devices, device types, and device vendors
• Quantifying IoT security at scale remains an outstanding challenge
• IoT has been here… for years
�62
![Page 63: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/63.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Takeaways
• Home IoT ecosystem is diverse and fragmented
• Regional differences in # of devices, device types, and device vendors
• Quantifying IoT security at scale remains an outstanding challenge
• IoT has been here… for years
�63
![Page 64: All Things Considered: An Analysis of IoT Devices …35 All Things Considered: An Analysis of IoT Devices on Home Networks 0 20 40 60 80 100 N America C + S America E Europe W + N](https://reader033.fdocuments.us/reader033/viewer/2022053015/5f14344fd5c2ab66cc5f85e8/html5/thumbnails/64.jpg)
All Things Considered: An Analysis of IoT Devices on Home Networks
Takeaways
• Home IoT ecosystem is diverse and fragmented
• Regional differences in # of devices, device types, and device vendors
• Quantifying IoT security at scale remains an outstanding challenge
• IoT has been here… for years
�64
@_kumarde