An Analysis of HTTP Attacks on Home IoT Devices

The rise in the number of Internet-connected devices in household environments in recent years has contributed to an entirely new area of computer network security, that of IoT security. In most cases, IoT devices rely on the HTTP protocol for their configuration and for communication with other commodity hardware. Our research focuses on the types of HTTP attacks targeting these devices, the distribution of device types, a classification of attack types targeting them, and finally, techniques for detection and mitigation of the types of attacks observed. A particularity of IoT security, as opposed to securing more complex commodity hardware, such as office environment connected devices, lies in the lack of possibility for installing endpoint-level security software on most smart devices. Therefore, approaches lead to securing the entire local network instead of each device separately.