Proposal of Low-Cost Automated Security Diagnosis System for IoT Devices

With the development of smart homes, many household products are connected to the network nowadays. Home IoT devices are also connected to the Internet. However, due to a lack of knowledge about security among users and developers, IoT devices are shipped and used in vulnerable configurations. Therefore, protecting household IoT devices from attacks is a critical issue. Universities, enterprises, and ISPs are required to take measures against vulnerabilities of home IoT devices in their networks. As a solution to this issue, we propose an automated security diagnosis system for IoT devices. Using the automated security diagnosis system, we diagnosed one of the university networks connecting around 5,000 devices and detected vulnerable hosts. Following the indication of vulnerability, we requested the users to correct the vulnerable settings of IoT devices. Consequently, the number of vulnerable devices discovered in 2020 was 60% lower than in 2016. We found that our automatic security diagnosis system is useful in reducing the number of vulnerable devices, including home IoT devices, by assisting with the periodical diagnosis of the network.