# Review of Smart-Home Security Using the Internet of Things
## 3 Smart-Home Ecosystem
### Other Aspects and Actuators  
Smart-home security extends beyond the technological vulnerabilities of devices; it encompasses human factors, user awareness, device management, disposal practices, universal standards, and manufacturers' responsibilities [65; 66]. Understanding and addressing these aspects are crucial for creating a secure smart-home environment.  
The human factor plays a pivotal role in smart-home security [66]. Users often lack awareness of potential security threats and the necessary practices to mitigate them. For instance, many users might not change the default passwords on their smart-home devices, which can make them vulnerable to attacks. Moreover, the convenience of voice-controlled devices can lead to inadvertent disclosures of personal information if conversations are recorded or monitored without user's consent. Users must be educated about the potential risks associated with smart-home devices and trained on the best practices for setting up and maintaining these devices. This includes understanding the importance of securing the home's Wi-Fi networks, recognizing phishing attacks, and knowing how to check and update device security settings in a regular basis. Therefore, enhancing user awareness through education about secure installation, maintenance practices, and the risks associated with careless usage is imperative.  
The management and disposal of smart-home devices also present significant security concerns [65]. Proper management involves regular updates and patches of firmware and software, which can protect against known vulnerabilities. However, many users are either unaware of how to update their devices or neglect this critical maintenance step. As for disposal, improperly discarded devices can become sources of data breaches. For example, a smart thermostat or a home-assistant device may retain user data that could be extracted by malicious actors, if not correctly sanitized before disposal. Encouraging responsible disposal practices and providing clear instructions for wiping data can help to mitigate these risks.  
Manufacturers play a crucial role in the security of smart-home ecosystems [70; 76; 82]. Their focus on securing devices should begin at the design phase, integrating strong encryption methods, secure authentication processes, and robust protection against physical tampering. Moreover, manufacturers need to commit to providing ongoing support for their products, including regular security updates and patches. Transparency regarding known vulnerabilities and quick responses to security threats can help to build trust with consumers. Furthermore, manufacturers can contribute to better security practices by making devices that are easier for consumers to manage. Simplifying the user interface for checking and updating security settings, applying enhanced security by default (i.e., enforce multi-factor authentication, regular password updates, etc.), and providing clear, user-friendly instructions for setup and maintenance can greatly enhance the overall security of smart-home systems. Additionally, incorporating features that alert users to potential security threats or needed updates could further protect consumers and their data.  
On the regulatory front, the lack of universal security standards for smart-home devices complicates the enforcement of consistent security measures (e.g., [93; 94; 95; 96; 97; 98]). Different countries may have varied regulations regarding data protection and device security, making it challenging for manufacturers to comply with all guidelines. Developing comprehensive international standards that address the security requirements of smart-home devices could streamline manufacturers' efforts to enhance security features across markets. Such standards would also aid consumers in making informed decisions about the security of the products they choose to integrate into their homes.