SMART HOME IoT TIZIMLARIDA AXBOROT XAVFSIZLIGI: TAHDIDLAR, ZAIFLIKLAR VA HIMOYA USULLARINING TAHLILI
Keywords:
Smart Home, IoT, axborot xavfsizligi, platforma xavfsizligi, qurilma xavfsizligi, kommunikatsiya xavfsizligi, autentifikatsiya, avtorizatsiya, maxfiylik, zaifliklar.Abstract
Ushbu maqolada Smart Home IoT tizimlarining axborot xavfsizligi holati tizimli ravishda tahlil qilinadi. Tadqiqotning asosiy manbasi sifatida Smart Home xavfsizligiga bag‘ishlangan ilmiy survey olinib, unda xavfsizlik muammolari platforma, qurilma va kommunikatsiya qatlamlariga ajratilgani asos qilib olindi. Smart Home arxitekturasi doirasida aqlli qurilmalar, gateway, bulut platformalari, aloqa kanallari va foydalanuvchi o‘rtasidagi o‘zaro bog‘liqlik ko‘rib chiqildi. Platforma qatlamida dasturlash, ilovalararo bog‘lanish, autentifikatsiya, avtorizatsiya, ovozli yordamchilar va maxfiylik; qurilma qatlamida firmware zaifliklari, sensorlararo bog‘lanish, side-channel hujumlari, autentifikatsiya, avtorizatsiya va maxfiylik; kommunikatsiya qatlamida esa Zigbee, BLE, Bluetooth, Wi‑Fi va MQTT bilan bog‘liq xavflar tahlil qilindi. Tahlil natijasida Smart Home xavfsizligidagi asosiy tizimli sabablar komponentlarning heterojenligi, ishlab chiqaruvchi va platformalarning maxsus moslashtirilgan yechimlari, mas’uliyat chegaralarining noaniqligi hamda yagona standartlashtirishning yetarli emasligi ekanligi ko‘rsatildi. Shuningdek, avtomatlashtirilgan zaifliklarni aniqlash, qat’iy xavfsizlik tekshiruvlari va ma’lumotlarga asoslangan tahlil kelajakdagi muhim yo‘nalishlar sifatida umumlashtirildi.
References
1. B. Yuan, J. Wan, Y.-H. Wu, D.-Q. Zou, H. Jin. On the Security of Smart Home Systems: A Survey. Journal of Computer Science and Technology, 2023, 38(2): 228–247. DOI: 10.1007/s11390-023-2488-3.
2. P. Kumar, A. Braeken, A. Gurtov, J. Iinatti, P. H. Ha. Anonymous secure framework in connected smart home environments. IEEE Transactions on Information Forensics and Security, 2017, 12(4): 968–979. DOI: 10.1109/TIFS.2016.2647225.
3. M. Antonakakis et al. Understanding the Mirai Botnet. In: Proc. 26th USENIX Security Symposium, 2017, pp. 1093–1110.
4. E. Fernandes, J. Jung, A. Prakash. Security Analysis of Emerging Smart Home Applications. IEEE Symposium on Security and Privacy, 2016, pp. 636–654. DOI: 10.1109/SP.2016.44.
5. N. Zhang et al. Dangerous Skills: Understanding and Mitigating Security Risks of Voice-Controlled Third-Party Functions on Virtual Personal Assistant Systems. IEEE Symposium on Security and Privacy, 2019, pp. 1381–1396. DOI: 10.1109/SP.2019.00016.
6. Y. D. Dong, Y. D. Yao. Secure mmWave-Radar-Based Speaker Verification for IoT Smart Home. IEEE Internet of Things Journal, 2021, 8(5): 3500–3511. DOI: 10.1109/JIOT.2020.3023105.
7. C. Celik et al. IOTGUARD: Dynamic analysis and policy enforcement for IoT applications. Mazkur manbada Smart Home avtomatlashtirish xavfsizligi kontekstida tahlil qilingan.
8. F. Shoshitaishvili et al. Firmalice: Automatic Detection of Authentication Bypass Vulnerabilities in Firmware. Mazkur manbada firmware xavfsizligi bo‘yicha usul sifatida tahlil qilingan.
9. National Institute of Standards and Technology. Secure Hash Standard (SHS), FIPS PUB 180-4, 2015.
10. W3C. PROV-DM: The PROV Data Model. W3C Recommendation, 2013.
