# Review of Smart-Home Security Using the Internet of Things
## 4 Analysis and Discussions of the IoT Setting
### Threats Faced by a Smart Home and Related Countermeasures
#### 4.2.1 Application Layer Analysis
This solution emphasizes the importance of accurately defining and extracting these features to improve the performance of ML algorithms in distinguishing between benign and malicious applications. Apart from authentication mechanisms that are designed to utilize the features of modern smart-home devices (e.g., authentication for AR/VR glasses [78; 79]), researchers are proposing general authentication and authorization solutions for the smart-home setting. For example, [PERSON] et al. [134] propose a novel multi-factor authentication protocol specifically designed for smart-home environments, utilizing Elliptic Curve Cryptography (ECC), secret sharing, and Photo Response Non-Uniformity (PRNU) to enhance security. The protocol aims to uniquely identify user smartphones and ensure mutual authentication among all entities involved, making it resilient to common attacks, such as smartphonecapture. Additionally, it leverages face biometrics to authenticate users, ensuring both the security of transactions and ease of use without the need for passwords or smart cards. In another work, [PERSON] et al. [135] define a novel, lightweight, and privacy-preserving remote user authentication protocol. This protocol leverages geometric secret sharing and PRNU to establish mutual authentication among users, their smartphones, and IoT devices without the need for passwords or smart cards. It ensures robust security against common attacks, such as phishing and smartphone capture, and its lightweight nature makes it suitable for deployment on heterogeneous and resource-constrained IoT devices. [PERSON] et al. [136] introduce a sophisticated approach to rootkit detection for embedded IoT devices by utilizing a TEE. This method capitalizes on the TEE's ability to provide an isolated operating context, which prevents rootkits, even those with root privileges, from interfering with the detection process. The solution involves identifying anomalous modifications made by rootkits to the OS kernel code, system programs, and control flow data, as well as detecting rootkit components in persistent storage. [PERSON] and [PERSON] conducted a series of studies concerning the subject of updates' management for smart-home devices. The initial study focused on exploring smart-home users' perceptions and experiences with device updates, particularly in terms of security [137]. The researchers found that many users do not associate updates with security enhancements and often overlook or delay installing them. The paper proposed a follow-up survey aimed at a broader audience to delve deeper into these perceptions and enhance our understanding, which could lead to the development of more effective, user-friendly update mechanisms and communications that emphasize the security benefits of timely updates. In their next study [138], the solution proposed focused on expanding user education and awareness, improving the transparency of update purposes and processes, and enhancing the usability of update mechanisms to ensure that users can easily and promptly apply necessary updates to their smart-home devices.