受保护还是多孔：IoT防护措施威胁检测能力的比较分析
Protected or Porous: A Comparative Analysis of Threat Detection Capability of IoT Safeguards
AI总结：
首次调查IoT防护措施的威胁检测能力，通过开发自动化实验方法在大型测试床进行数千次测试，发现这些防护措施不仅防风险无效，其云交互与数据收集反而会引入新的隐私风险。
摘要：
消费级物联网设备在家庭中越来越普遍，从智能音箱到安防摄像头。伴随其便利性而来的是潜在的隐私和安全威胁。为了限制这些威胁，市面上出现了许多商业服务（IoT防护措施）。这些防护措施声称能提供针对IoT隐私风险和安全威胁的保护。然而，这些防护措施的有效性及其相关的隐私风险仍是一个关键的悬而未决的问题。在本文中，我们首次调查了IoT防护措施的威胁检测能力。我们开发并发布了一种自动化防护措施实验方法，以揭示它们对常见安全威胁和隐私风险的响应。我们在部署于大型IoT测试床中的流行商业IoT防护措施上执行了数千次自动化实验。我们的结果表明，这些设备不仅在防止风险方面可能无效，而且其云交互和数据收集操作可能会为采用它们的家庭带来隐私风险。
英文摘要：
Consumer Internet of Things (IoT) devices are increasingly common, from smart speakers to security cameras, in homes. Along with their benefits come potential privacy and security threats. To limit these threats a number of commercial services have become available (IoT safeguards). The safeguards claim to provide protection against IoT privacy risks and security threats. However, the effectiveness and the associated privacy risks of these safeguards remains a key open question. In this paper, we investigate the threat detection capabilities of IoT safeguards for the first time. We develop and release an approach for automated safeguards experimentation to reveal their response to common security threats and privacy risks. We perform thousands of automated experiments using popular commercial IoT safeguards when deployed in a large IoT testbed. Our results indicate not only that these devices may be ineffective in preventing risks, but also their cloud interactions and data collection operations may introduce privacy risks for the households that adopt them.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
