窥探灵巧家庭：加密IoT流量的隐私攻击和防御
Spying on the Smart Home: Privacy Attacks and Defenses on Encrypted IoT Traffic
摘要：
不断增长的灵巧家庭物联网设备市场为消费者带来了新的便利，同时也为保护家庭隐私带来了新的挑战。许多灵巧家庭设备具有始终开启的传感器，该传感器捕获用户在其生活空间中的离线活动并在互联网上传输关于这些活动的信息。在本文中，我们证明了ISP或其他网络观察者可以通过分析包含商用物联网设备的灵巧家庭的互联网流量来推断隐私敏感的家庭活动，即使这些设备使用加密。我们评估了几种策略，以减轻与灵巧家庭设备流量，包括阻塞，隧道和速率整形的隐私风险。我们的实验表明，流量整形可以有效地和实际地减轻许多与灵巧家庭物联网设备相关的隐私风险。我们发现40 KB/s的额外带宽使用足以保护用户活动免受被动网络对手的攻击。对于许多灵巧家庭来说，这种带宽成本完全在互联网速度限制和数据上限之内。
英文摘要：
The growing market for smart home IoT devices promises new conveniences for consumers while presenting new challenges for preserving privacy within the home. Many smart home devices have always-on sensors that capture users' offline activities in their living spaces and transmit information about these activities on the Internet. In this paper, we demonstrate that an ISP or other network observer can infer privacy sensitive in-home activities by analyzing Internet traffic from smart homes containing commercially-available IoT devices even when the devices use encryption. We evaluate several strategies for mitigating the privacy risks associated with smart home device traffic, including blocking, tunneling, and rate-shaping. Our experiments show that traffic shaping can effectively and practically mitigate many privacy risks associated with smart home IoT devices. We find that 40KB/s extra bandwidth usage is enough to protect user activities from a passive network adversary. This bandwidth cost is well within the Internet speed limits and data caps for many smart homes.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
