# Review of Smart-Home Security Using the Internet of Things
## 3 Smart-Home Ecosystem
### IoT in Smart Homes  
A typical smart home consists of several IoT devices that are interconnected via a router-modern. This router is the main network device which undertakes the effort to connect all these devices at the edge system, as well as to enable communication with Internet and the cloud. The home devices rarely possess their own Internet connection, while the user can interact with this ecosystem through his/her smartphone, which has a direct broadband connection. Ordinarily, this router is the only barrier between the outworld and the private home. Therefore, its security and proper configuration are of paramount importance. The devices can join Local Area Networks (LANs) formed by the router, either through an Ethernet cable or wirelessly. Some devices might support the direct link with the user's smartphone, e.g., via Bluetooth. Devices may expose services and APIs, either within the edge system or to the Internet. Their security and proper setting must also be examined carefully. In modern settings, home assistants form one main device to interconnect IoT equipment. The home assistant connects to the router for Internet access, while IoT devices are connected wirelessly with the home assistant for local networking. The user adminstrates the system via his/her smartphone, tablet, or PC, which are connected (wired or wirelessly) with the home assistant, while the daily use/operation is driven by vocal commands. Home assistants are one of the most intelligent smart-home devices in modern installations [41]. They can also be deployed to administrate other less intelligent devices, like light and sound devices, and they may also be aware of the residents' preferences and personal information. Also, they constitute one of the main indoor interfaces for the user to interact with the home via vocal commands and without using a smartphone or other device. Therefore, home assistants are a targeted element of state-of-the-art attacks [44]. Assistants, like Google Home and Amazon Alexa, are vulnerable to attacks such as voice squatting [45; 46]--where attackers use similar sounding phrases to trigger the device to perform unintended actions; and eavesdropping--where attackers can use the device to listen to private conversations. There have also been instances of malicious applications and phishing attacks targeting users of smart-home assistant devices. As these devices become more popular and are integrated into more homes, it is likely that there will be continued efforts by attackers to find new vulnerabilities and exploit them [47; 48]. Smart TVs are quite common equipment in houses nowadays [49]. The TV receives the ordinary TV signal from an antenna or a cable and is connected to the Internet via the router (connected wired or wirelessly) for the \"smart\" content, while the user interacts with it through the telecontrol with RF signaling (application developers have also implemented such functionality for mobile devices, like smartphones) or with vocal commands via the home assistant [42]. In some cases, TVs have their own mike and camera sensors, and the user can directly interact with it via vocal commands or gestures. Other devices, like a keyboard or mouse, can be connected via Bluetooth. Also, the owner may be connecting his/her social-media or other accounts (e.g., YouTube or Netflix). However, the TV may also be used by other residents or guests, exposing the owner's privacy, as well as raising some security concerns [50; 51; 52; 53]. Augmented Reality (AR) and Virtual Reality (VR) glasses [43] constitute another type of equipment that may be found in a smart environment, like a house. These devices can be connected wirelessly (i.e., Wi-Fi) to the Internet via the router. Usually, the user may be connected to his/her social media or another service (e.g., Facebook or Netflix). Similar concerns as for the smart TVs are raised. As for the home assistant and TVs, malicious applications may find their place in the related application stores.