# Review of Smart-Home Security Using the Internet of Things
###### Abstract
More and more people are becoming familiarized with these settings and are deploying them in their houses and/or other smart environments (e.g., hotels, workplaces, factories, etc.). The human is now a core part of this cyber loop. In the role of the system user, he/she is now the main \"subject\" of these, usually personalized, ecosystems. Therefore, the protection of residents, from both cyber threats and potential physical threats, is of paramount importance. However, the underlying technologies and their interplay in such complex systems make it hard to safeguard them. The IoT; cloud services; the high variety of smart devices, sensory equipment, and networking options; electronic and mobile commerce; social media; and AI form some of these elements. Their evolution has proceeded so quickly during recent years that regulatory efforts, as well as the conscious and mature usage of technology, have fallen behind. Governmental and standardization efforts are seeming to progress very slowly, as they require many years to produce results, and when they do, the technology has progressed further on. Users' awareness is low concerning the dangers underneath; the adaptation of these applications is not mature enough; and, in the event, the market and private sector does not have the required numbers of experts (like technicians and engineers) to support them. Therefore, there are several challenges for smart-home security, including the following. * User awareness level: Users are always considered one of the weak links on the cyber risk chain, and usually, home users are not aware of the cyber threats related to smart-home devices, or may not know how to properly secure them. This can lead to weak passwords, false configurations, failure to update software, and other security vulnerabilities. * Complexity: Smart homes can be complex systems with many devices, sensors, and services. This complexity can make it difficult to manage security and identify vulnerabilities. * Interoperability and Heterogeneity: Smart-home devices are often developed by different manufacturers and use different communication protocols, which makes it difficult to ensure that they can all work together securely. * Remote access: Smart-home devices often allow for remote access via Internet connection, which increases the risk of unauthorized access by attackers. This is especially concerning as many users may not secure their remote access properly. * Limited resources: Smart-home devices often operate with limited resources, such as low power consumption, limited memory, and processing power. This makes it challenging to implement strong security protocols. * Lack of regulation: There are currently no standardized security regulations for smart-home devices, which means that security measures can vary widely between different devices and manufacturers. This paper will analyze the security issues in a home environment and propose solutions to address them [11; 12; 13; 14]. Since almost everything works or uses the Internet, users have a significant responsibility to educate themselves about the proper and safe use of their smart devices and the associated risks and threats [15; 16; 17; 18]. Modern modeling approaches consider that the IoT technology comprises four layers (application, perception, network, and physical) [19], each of which is susceptible to different types of attacks, and this paper will examine these attacks by layer and provide recommendations for dealing with them. Moreover, in contrast to similar works, this review also examines the particularities of popular categories of smart devices, like home assistants, TVs, AR/VR, locks, sensors, etc. The rest of the paper is structured as follows: Section 1 introduces the concept of cyber security in modern smart-home IoT environments. Section 2 presents related surveys. Section 3 describes the modern smart-home ecosystem and the various IoT devices that can be found within it.