Development of measures to protect household IoT networks

Abstract

The article discusses a practical technique for improving the information security of smart home household systems. Unlike corporate solutions, home routers are often used without the support of virtual local area networks and expensive security systems. The proposed approach is based on the logical separation of the home network using a guest Wi-Fi hotspot, isolation of clients and prohibition of broadcast services, complemented by strict filtering of outgoing connections and authentication of device updates. The following aspects were investigated on the experimental stand, which includes a standard home gateway, a controller with Home Assistant software, an IP camera, Zigbee sensors and a smart socket: the effect of segmentation on node accessibility and latency, the effectiveness of blocking lateral movement, the correctness of selective access to the network, the speed of verifying the signature of updates and load resistance. The results show that network partitioning reduces the number of reachable nodes by 75% and reduces packet loss by more than half, while latency increases by less than 6%.