# Review of Smart-Home Security Using the Internet of Things
## 3 Smart-Home Ecosystem
### Physical Home Security and Monitoring  
Smart locks, an integral component of the modern smart-home ecosystem, represent a significant shift from traditional mechanical locks to more sophisticated, digitally operated systems [54]. These devices provide users with the ability to lock and unlock doors via smartphones, vocal commands, or even remotely through the Internet. While the convenience and enhanced functionality of smart locks are undeniable, these features also introduce a range of security vulnerabilities that could potentially expose users to risks, such as unauthorized access and data breaches. The core appeal of smart locks lies in their connectivity, which allows users to control access to their homes from virtually anywhere. This convenience, however, also offers several routes for cyber-attacks [81]. Most smart locks connect to the home's networks via Wi-Fi or Bluetooth, and any weaknesses in these communication protocols can be exploited by hackers to gain control of the locks. For example, flaws in Bluetooth security, such as weak pairing mechanisms or vulnerabilities within the Bluetooth protocol itself, can allow attackers to intercept communications between the smart lock and the user's device to unlock doors without permission. Furthermore, many smart locks are integrated into broader smart-home systems and managed through home automation platforms that collect and store personal data [82]. This integration can extend the impact of a potential breach, where compromising a smart lock could provide a gateway to access other sensitive systems and information, including surveillance cameras and personal data stored on networked devices. The risk is compounded by the fact that many users often do not change default passwords or fail to implement strong authentication measures, leaving their smart locks--and by extension, their homes--vulnerable to physical intrusion. Researchers are also exploring the potential of blockchain technology to provide a more secure and decentralized framework for managing access permissions without relying on a central control point that could constitute a single point of failure [83; 84]. Moreover, there is an ongoing push towards developing more intelligent threat detection systems that can adaptively recognize and respond to suspicious activities in real time. ML algorithms could play a crucial role in this area, learning from historical data to identify patterns of normal behavior and detect anomalies that could indicate an attempt to manipulate the lock system [85]. Manufactures of smart locks have taken various measures to mitigate these risks [82], including the use of advanced encryption techniques to secure communications between the lock and its controllers. Many smart locks now feature encryption protocols, such as the Advanced Encryption Standard (AES), which is also used in many other secure communication platforms. Additionally, to counter the risks of unauthorized access, manufacturers have started implementing features such as geofencing, which automatically locks or unlocks doors based on the user's physical location, detected via their smartphone's GPS. Ultimately, securing smart locks is a complex challenge that requires a multidisciplinary approach. It involves not only advancing the technological defenses, but also promoting user education and awareness about the best security practices [86]. Users must be informed about the importance of using strong and unique passwords, enabling two-factor authentication where available and regularly updating their devices' firmware to protect against the latest threats. The integration of surveillance cameras into smart homes significantly enhances security, but also exhibits unique challenges and vulnerabilities [55]. These devices, central to home security, are increasingly smart, interconnected, and capable of recording high-resolution video. However, this connectivity exposes them to several unique security threats that need addressing to protect users' privacy and maintain the system's integrity [87].