# Review of Smart-Home Security Using the Internet of Things
## 5 Best-Practices Guide for a Secure Smart Home
Restrict Access: Restrict access rights/permissions and connectivity to the minimum required. 7. Restrict Users: If applicable, restrict the number of users to the minimum required. 8. Use Official and Well-Reputed Vendors: Use only official and authenticated applications/software. 1. Especially for the technicians/engineers, always check the validity of the elements that are about to be installed (e.g., check the digital certification of the website, as well as the digest of the downloaded software). 2. For elements of unknown or less popular vendors, also check for recommendations from other users in related forums. 3. Do not install less trusted applications/software in the core of the system, especially if you have not tested them in a less critical part of your setting. 9. Monitor Operation: Where applicable, install security software for monitoring of the runtime environment and alerting. 10. Set Build-In Security and Privacy Controls: Check the offered options and set the privacy policies to the minimum required. 11. Secure Deletion: Apply secure removal strategies, logging out from all accounts and applications, revoking all acquired accesses/permissions, and securely erasing all permanent and temporary data. 12. Respond to Incidents: Set a response strategy, including details of whom you have to call and your first actions in case you notice something strange. For example, if you start receiving unknown notifications of purchase attempts in your mobile banking, you block your cards immediately and call your bank's 24/7 security service. 13. Recover from Incidents: Set a recovery strategy in case something happens. 4. Secure All Networks' Networking Devices
1. Security Configuration: Set the highest possible protections and set as a high priority the protection of the equipment that facilitates networking, especially for the devices that have direct access/exposure to Internet, and especially the main router. 2. Security Primitives: Activate or set additional firewalls and IDS/IPS. Use the most restrict policies possible. Usage Zones: Create different LANs and virtual LANs (VLANs) for different usage zones of the smart home. * Remote Access: Consider setting an in-house virtual private network (VPN) for accessing the smart home remotely (e.g., the surveillance system). * Least Privileges: Restrict the privileges of services that are exposed to the Internet. * Network Monitoring: Install monitoring systems and periodically audit the activity of your system. * Decrease Attack Surface: Disable insecure communication protocols and services (e.g., http), as well as elements that are not currently in use. * Regular Updates: Similar with the devices, do not use outdated equipment. * Pay Specific Attention to Securing your Wi-Fi Network
* Strong Passwords: Use strong, unique passwords for your Wi-Fi network and each of your smart-home devices. * Network Segmentation: Consider creating a separate Wi-Fi network for your smart devices to isolate them from the network you use for personal computing, reducing the risk of cross-device hacking. * Regular Updates: Keep your router's firmware and your smart devices' software up to date to protect against known vulnerabilities. * Install and Position your Devices Strategically
* Follow Installation Guides: Carefully read and follow the installation instructions provided with your devices. This may include downloading an application, connecting to Wi-Fi, or performing initial setup steps. * Optimal Placement: Place devices in locations where they can function effectively (e.g., smart cameras with a clear field of view, smart thermostats away from direct sunlight). * Integrate Devices with a Central Hub or Application
* Choose a Central Control System: Select a central hub or application that can control all your devices. This unifies control and makes managing your devices more convenient. * Customize Settings: Adjust settings for each device according to your preferences. This may involve setting schedules, creating automation rules, or defining scenes.