Does your smart device protect your privacy well?

Nowadays, a variety of smart devices are developed to achieve automatic operations via different wireless protocols such as Wi-Fi, Bluetooth. To interact with the smart devices, manufacturers commonly support remote controls and/or companion apps to access and control the devices remotely. Without regulated principles, manufacturers design and implement functionalities by following their own regulations, which have weak security guarantees. Considering from the aspects of firmware implementation, remote control communication, and data transmission, we designed and implemented some analysis tools to exploit the ill-protected devices by analyzing the code and communication protocols, through which we successfully helped many manufacturers (e.g., Xiaomi, Hua Wei) identify the severe security issues. All the data and source code information are published on our website: https://code-analysis.org/.

About the Speaker

Siqi Ma a senior lecturer of the Cyber Security team in the School of Engineering and Information System at the University of New South Wales. Before joining UNSW, she was a lecturer at the University of Queensland and she received her PhD degree from Singapore Management University. Her research interests lie in software and system security, including mobile security and IoT security. She has published over 50 papers in prestigious journals and top-tier conferences, including S&P, ICSE, CVPR. She regularly severed as the PC member for many conferences, such as WWW, ASE.