# Review of Smart-Home Security Using the Internet of Things
## 3 Smart-Home Ecosystem
### Infotainment Devices
Often, these devices serve as hubs for controlling other IoT equipment, such as locks, cameras, and thermostats. However, IoT devices are notoriously insecure, often lacking robust security features. An attacker who compromises a poorly secured IoT device could potentially gain access to the network and use it as an entry point to attack the home assistant or other more sensitive devices that are connected to the same network. Regular updates are crucial for maintaining the security of home assistants by patching known vulnerabilities. However, delays in deploying updates or the discontinuation of support for older devices can leave them vulnerable to exploitation. Users may not always be aware of the need to update their devices or may be unable to do so if the manufacturer no longer supports their model. To address these vulnerabilities, users and manufacturers must take proactive steps [70; 76]. Users should regularly update their devices, use strong, unique passwords, and enable two-factor authentication where available. Additionally, users should be cautious about the permissions granted to third-party skills and applications. Manufacturers need to prioritize security in the design and development of home assistants and connected IoT devices. This includes ensuring the secure storage and handling of voice data, providing timely security updates, and rigorously evaluating third-party integrations for security risks. Home-assistant manufacturers need to build robust voice authentication of the user/owner to counter voice-related attacks, as well as access and authorization policies for multi-user environments. For example, parents must have higher access privileges than their children, and the system must be able to understand when a child misbehaves and tries to annoy the parent (e.g., commanding the home assistant to play music, while the parent has said no). Smart TVs [49; 50; 51; 52; 53], as integral components of the IoT ecosystem, have transformed entertainment systems into sophisticated interactive devices. They combine traditional television technology with Internet capabilities, offering users access to streaming services, applications, and smart-home control. However, their connectivity and processing capabilities introduce significant security and privacy concerns that must be addressed to protect users and ensure system integrity. Smart TV architecture typically comprises several layers [49], including hardware, the operating system, middleware, applications, and connectivity interfaces. At the hardware level, smart TVs are equipped with processors, memory, and networking components that support Internet connectivity, usually through Wi-Fi or Ethernet. The operating system, often a version of Linux or Android, provides the necessary platform for running various applications and handling device operations. Middleware offers additional functionalities, like voice recognition and social media integration, while applications range from video streaming services, like Netflix, to interactive games. The architecture of smart TVs includes complex components [49]: powerful processors, operating systems commonly based on Android, and multiple connectivity options including Wi-Fi and Bluetooth. Each component, while increasing the utility of smart TVs, also opens new avenues for cyber-attacks [50]. For instance, the integration of third-party applications can introduce risks if these applications are not properly evaluated for security. Moreover, the operating systems themselves can be prone to attacks if not regularly updated with security patches.