Security Evaluation of Smart Home Devices Based on the OWASP Top 10 IoT Vulnerabilities

The growing expansion of the Internet of Things (IoT) has introduced significant challenges in the security field, demanding the adoption of innovative methodologies to ensure the integrity and confidentiality of interconnected devices. Protecting these devices is a complex challenge since it requires security solutions that are not only customizable to each device's specificities but also adaptable to the different operating environments in which they are used. In this context, it is essential to investigate effective methodologies for identifying vulnerabilities. Although several promising techniques have been proposed, the heterogeneity of IoT devices requires a combination of approaches to adequately deal with this ecosystem's diversity. A practical method for a given device may not be suitable for another, highlighting the need for segmented strategies to implement security measures, especially in smart homes. Dynamic analysis, in particular, presents itself as a viable approach for detecting vulnerabilities that manifest themselves during the operational execution of devices. Given this scenario, this project aims to develop a solution based on dynamic analysis for the security of IoT devices in the context of smart homes, emphasizing identifying and examining the vulnerabilities described in the OWASP Top 10 IoT list. To achieve this goal, techniques, methodologies, and strategies will be investigated, considering the specific characteristics of smart homes and the diversity of IoT devices, promoting effective vulnerability detection and improving security in this environment.