Defence against the dark artefacts: Smart home cybercrimes and cybersecurity standards

Piasecki, Stanislaw; Urquhart, Lachlan; McAuley, Derek

Abstract

This paper analyses the assumptions underpinning a range of emerging EU and UK smart home cybersecurity standards. We use internet of things (IoT) case studies (such as the Mirai Botnet affair) and the criminological concept of 'routine activity theory' to situate our critique. Our study shows that current cybersecurity standards mainly assume smart home environments are (and will continue to be) underpinned by cloud architectures. This is a shortcoming in the longevity of standards. This paper argues that edge computing approaches, such as personal information management systems, are emerging for the IoT and challenge the cloud focused assumptions of these standards. In edge computing, data can be stored in a decentralised manner, locally and analysed on the client using federated learning. This can have advantages for security, privacy and legal compliance, over centralised cloud-based approaches, particularly around cross border data flows and edge based security analytics. As a consequence, standards should start to reflect the increased interest in this trend to make them more aspirational and responsive for the long term; as ultimately, current IoT architectures are a choice, as opposed to inherent. Our paper unpacks the importance of the adoption of edge computing models which could enable better management of external cyber-criminality threats in smart homes. We also briefly discuss challenges of building smart homes that can accommodate the complex nature of everyday life in the home. In addition to technical aspects, the social and interactional complexities of the home mean internal threats can also emerge. As these human factors remain unresolved in current approaches to smart home cybersecurity, a user's security can be impacted by such technical design choices.

Citation

Piasecki, S., Urquhart, L., & McAuley, D. (2021). Defence against the dark artefacts: Smart home cybercrimes and cybersecurity standards. Computer Law and Security Review, 42, Article 105542. https://doi.org/10.1016/j.clsr.2021.105542

• Journal Article Type: Article
• Acceptance Date: Mar 11, 2021
• Online Publication Date: Jul 29, 2021
• Publication Date: 2021-09
• Deposit Date: Apr 14, 2021
• Publicly Available Date: Jul 29, 2021
• Journal: Computer Law and Security Review
• Print ISSN: 0267-3649
• Electronic ISSN: 0267-3649
• Publisher: Elsevier
• Peer Reviewed: Peer Reviewed
• Volume: 42
• Article Number: 105542
• DOI: https://doi.org/10.1016/j.clsr.2021.105542
• Keywords: Internet of Things; smart homes; standards; security; cloud; edge computing
• Public URL: https://nottingham-repository.worktribe.com/output/5464560
• Publisher URL: https://www.sciencedirect.com/science/article/pii/S0267364921000157
• Additional Information: This article is maintained by: Elsevier; Article Title: Defence against the dark artefacts: Smart home cybercrimes and cybersecurity standards; Journal Title: Computer Law & Security Review; CrossRef DOI link to publisher maintained version: https://doi.org/10.1016/j.clsr.2021.105542; Content Type: article; Copyright: © 2021 The Authors. Published by Elsevier Ltd.