AUTOMATING HOME SECURITY RYAN C. KRAUSE

BACKGROUND: HOME SECURITY Many providers including, self-building kits ADT, Gaurdian, Xfinity, LifeShield, Protection 1, and many more A typical standard alarm comes with: Siren, 3 door/window sensors, and 1 motion detector Allows for many other upgrades as to the quantity of each sensor First security system was constructed in 1966 by Marie Van Brittan Brown and Albert Brown This system was created for owners who are afraid of rising crime rates and view surroundings from a safe distance. The system had 4 peep holes and a camera that would move a on a track and capture images from each hole when necessary.

BACKGROUND: HOME AUTOMATION Home Automation is becoming much more popular among consumers Control4; and many home security companies have started cashing in on Home Automation Typically contains a function of home security, which makes it beneficial for Home security companies to include it. There is no typical or standard package that comes with home automation, every package is created fully custom for what the owner or buyer wants. Most systems use Wi-Fi or Ethernet to transmit data to other aspects of the system. Older systems used the Power lines so no extra cable need ran.

BENEFITS OF HOME SECURITY SYSTEMS A monitored system can notify authorities when there is an emergency and you are not there. Insurance companies can offer discounts Security systems can be configured to not just monitor doors and windows but also smoke, heat, carbon monoxide, freezing temperatures and rising water Can notify others when system events happen, such as a child coming home from school. Can call in to the system to arm and disarm the system.

BENEFITS OF HOME AUTOMATION SYSTEMS Offer what Home Security Systems offer plus: Fully automated light control Climate control that adjusts to outside as well as what rooms are being occupied in the house Remote activation and surveillance of all systems in your house Appliance integration Control4 Video

SIMILARITIES/DIFFERENCES BETWEEN SYSTEMS Similarities Both systems use motion and contact sensors to detect occupancy You can monitor the activities and be notified of system events via text message or Both systems are able to monitor for CO2, Fire, Smoke, Water, and Burglary and notify accordingly Differences Home Security is more dedicated towards just security where Automation is more general with security and entertainment Home Security uses one board with the devices connected to it, Automation uses many controllers connected like a network With Automation it is much easier to add on with new products, Home Security, you would need a new board and have to rewire the system.

VULNERABILITIES IN THE SYSTEMS “Sniffer” to read unencrypted data in power lines on Home Automation Systems Have weak Wi-Fi passwords Call in on private number to change system settings Still only relies on 4-digit pin

“SNIFFER” TO READ UNENCRYPTED DATA IN POWER LINES ON HOME AUTOMATION SYSTEMS Problem In older systems home automation systems, devices communicated on Ethernet networks over existing power lines. In order to communicate over power lines, most signals had to be sent unencrypted so every device didn’t have to be authenticated. A display was shown at DefCon in 2011 which used two X10 products, they were able to Jam signals from security alarms, unlock doors, and even monitor the people inside. Solution Encrypt! Encrypt! Encrypt! Authentication may take longer, but worth it in the end Upgrade and use a closed network as state of the art systems are using Use a power line firewall that can block signals from outside the home

WEAK WI-FI PASSWORDS Problem Weak or no Wi-Fi passwords are among the biggest issues in network security Home automation systems use Wi-Fi to communicate with devices such as tablets and control panels for the system A lot of systems don’t require a Wi-Fi password or keep it the default and must be changed manually If a hacker is able to access your network, he/she can easily access your home automation system Solution Enable/Create a much more secure passcode, using the latest encryption (WPA2) Ditch Wi-Fi and only be able to connect to your system via Ethernet Set up MAC address filtering so you are able to set which devices can access your network

CALL IN ON PRIVATE NUMBER TO CHANGE SYSTEM SETTINGS Problem Both Home Automation and Home Security systems have a feature that you can: Receive messages about system events such as a child coming home from school Send messages to have the system perform functions (incase you forget to arm it) This is a problem as all an attacker needs is the 10- digit phone number and a 4-digit pin Chances are you save the phone number in your phone and don’t delete your sent items with your pin Solution Have the telephone company only allow messages from a predefined list of numbers Don’t use text messaging and use calling with better authentication techniques

STILL ONLY RELIES ON 4-DIGIT PIN Problem All systems still only relay on a simple 4-digit pin Pins are typically easy to guess Typically choose 1 pin and use it for many other areas Typically once set, the pin is never changed Solution Allow other ways of authentication, possibly a retinal scan or fingerprint scan Allow more than just a 4-digit pin, allow alpha numeric characters in it s well Have a policy set up that you need to change your pin after a year

WHAT CAN HAPPEN IF AN ATTACKER TAKES OVER MY HOUSE Home Security Attacker can disarm your system to allow a break-in If surveillance equipment is installed, may be able to view it Able to see which rooms are occupied Able to see when people leave and come home Home Automation All issues the same as home security plus… Able to unlock and lock doors in the house Able to turn on appliances such as your oven Able to change your HVAC settings Able to change and power up any entertainment equipment Able to turn lights on and off

CONCLUSION Great Benefit if used correctly Remember Encrypt! Encrypt! Encrypt! Fun to use Can aid in an infinite amount of ways Just be SMART!