# Review of Smart-Home Security Using the Internet of Things
## 4 Analysis and Discussions of the IoT Setting
### Threats Faced by a Smart Home and Related Countermeasures
#### 4.2.3 Network Layer Analysis
The system not only informs the end-user of the infection, but also gathers and processes forensic data to legally document and potentially prosecute the attackers. Key features of WARDOG include its compatibility with the existing Internet infrastructure, transparency to the end-user, scalability across many users, and the ability to handle various types of malicious activities without economic impact to ISPs or end-users. To safeguard applications that allow unauthorized access, as well as to counter man-in-the-middle attacks, [PERSON] et al. [163] developed a secure and efficient multi-factor device authentication scheme. The proposed scheme uses digital signatures and device capability to authenticate a device. Thereupon, a device will only be allowed into the network if it is successfully authenticated through multi-factor authentication; otherwise, the authentication process fails and the whole authentication process restarts. The scheme not only authenticates the device very efficiently through multi-factor authentication, but also authenticates the authentication server with the use of digital signatures. After proper authentication, role- or attribute-based authorization can be enforced. [PERSON] et al. [164] argue that attribute-based control policies are better suited for smart-homeapplications. Therefore, they propose a related solution, called HABAC\(\alpha\), an attribute-based access control model tailored for smart-home IoT environments. This model is dynamic and fine-grained, capturing various characteristics of users, environments, operations, and devices to construct comprehensive access control policies. HABAC\(\alpha\) enhances traditional models by incorporating attribute-based mechanisms that adapt more flexibly to the changing conditions and complex requirements of typical smart-home setups. In order to protect the network against routing and forwarding attacks (e.g., flooding), [PERSON] et al. [165] introduce SCOTRES, a secure routing system designed for IoT and cyber-physical systems (CPSs) in wireless networks. SCOTRES is a trust-based system that utilizes five innovative metrics to enhance network security and performance: energy, topology, channel health, reputation, and trust metrics. This system seeks to intelligently distribute network loads, increase the lifetime of the network, provide robustness against jamming attacks, and ensure cooperative behavior among nodes. Moreover, IDS/IPS solutions are required to monitor the system and counter a series of problematic conditions. Usually, their core algorithm is based on pattern matching or ML for attack identification or anomaly detection. [PERSON] and [PERSON] implement an IDS/IPS for the smart-home IoT devices [166]. They propose TWINKLE, an innovative architecture designed for IoT-enabled smart homes, focusing on enhancing intrusion detection and prevention within such networks. TWINKLE operates in two modes: a normal mode--which conserves resources; and a watchful mode--which is activated when suspicious activity is detected. This approach allows for a dynamic and efficient use of resources, minimizing overhead while enhancing the detection and mitigation of cyber threats like DDoS and sinkhole attacks. Through case studies, TWINKLE demonstrates significant improvements in reducing detection delay and resource consumption compared to existing systems, positioning it as a viable solution for resource-constrained environments.