Iotsafe: Enforcing Safety And Security Policy With Real Iot Physical Interaction Discovery

The Internet of Things (IoT) platforms bring significant convenience for increased home automation. Especially, these platforms provide many new features for managing multiple IoT devices to control their physical surroundings. However, these features also bring new safety and security challenges. For example, an attacker can manipulate IoT devices to launch attacks through unexpected physical interactions. Unfortunately, very few existing research investigates the physical interactions among IoT devices and their impacts on IoT safety and security. In this paper, we propose a novel dynamic safety and security policy enforcement system called IoT SAFE, which can capture and manage real physical interactions considering contextual features on smart home platforms. To identify real physical interactions of IoT devices, we present a runtime physical interaction discovery approach, which employs both static analysis and dynamic testing techniques to identify runtime physical interactions among IoT devices. In addition, IoT SAFE constructs physical models for temporal physical interactions, which can predict incoming risky situations and block unsafe device states accordingly. We implement a prototype of IoT SAFE on the Smart Things platform. Our extensive evaluations demonstrate that IoT SAFE effectively identifies 39 real physical interactions among 130 potential interactions in our experimental environment. IoT SAFE also successfully predicts risky situations related to temporal physical interactions with nearly 96% accuracy and prevents highly risky conditions.