# Review of Smart-Home Security Using the Internet of Things
## 3 Smart-Home Ecosystem
### Ambient Living Devices  
Smart vacuum robots [56], as an integral component of the smart-home environment, have transcended their traditional role to embrace functionalities enriched with IoT capabilities, such as mapping household layouts and scheduled cleaning, operated via smartphone applications. However, as they become more embedded in our personal spaces, the security challenges and vulnerabilities associated with these devices are also magnified. A primary security concern with smart vacuums is their connectivity to the home's network, which if compromised, can serve as a gateway for attackers to infiltrate other connected devices. This vulnerability is exacerbated by the fact that many smart vacuums operate on common operating systems, like Linux, making them susceptible to known exploits and attacks that can gain root access to the devices. For instance, researchers have demonstrated how vulnerabilities in the vacuum's firmware can be exploited to gain unauthorized control over the device, using it to map private spaces or even operate as a listening device [92]. Another significant risk is related to the data collected by these smart vacuums, which includes detailed maps of users' homes [92]. These data, if intercepted or improperly handled, could pose severe privacy risks. Intriguingly, some research has shown that the lidar sensors on these vacuums can be repurposed to eavesdrop on conversations by interpreting vibrations in objects, highlighting a novel attack vector that turns benign household devices into potential spy tools. Moreover, the interconnectivity of these devices with cloud-based platforms for enhanced functionality, like remote control and software updates, introduces additional layers of vulnerability. Data transmitted between the vacuum and the cloud, or stored within the cloud, are at risk of interception or exposure unless properly encrypted and managed. The integration with mobile applications further extends the threat landscape, as insecure application development practices can lead to data leaks and unauthorized access to the vacuum's controls. In response to these vulnerabilities, there is a pressing need for manufacturers to implement robust security measures that address both the physical security of the devices and the integrity of the data they handle. This includes securing communication channels with strong encryption, ensuring secure authentication mechanisms, and providing regular firmware updates to patch known vulnerabilities. Future research in the security of smart vacuums should focus on developing more sophisticated detection systems to identify and mitigate attacks in real time, enhancing data privacy measures to protect sensitive information, and exploring the use of blockchain and other decentralized technologies to secure device communication and data integrity. Overall, the proliferation of smart vacuums and similar IoT devices in smart homes presents a complex set of security challenges. It requires multi-faceted strategies to ensure that the related equipment will not compromise the privacy and security of the environments they are designed to enhance. Smart-home security is a rapidly evolving field, spurred by the widespread adoption of various interconnected devices that aim to enhance convenience and efficiency in the household. Other examined devices, including smart lighting, thermostats, air-conditioning systems, ovens, fridges, and smart plugs, bring numerous benefits, but also introduce a plethora of security risks that must be addressed to protect homeowners from potential threats. Starting with smart-lighting systems, these devices offer the ability to control lighting remotely, set schedules, and even adjust lighting based on ambient conditions or occupancy detected by sensors [57]. However, their connectivity to the home network makes them vulnerable to cyber-attacks, where hackers could potentially gain unauthorized access to the network through poorly secured lighting systems.