When Googling it doesn't work: The challenge of finding security advice for smart home devices

TL;DR

This study analyzes online security advice for smart home devices, revealing inconsistencies and credibility issues, and suggests improvements for clearer, more reliable guidance to help users better protect their IoT devices.

Contribution

It provides a comprehensive analysis of existing online security advice for IoT devices and offers recommendations to enhance clarity and credibility of information.

Findings

Users encounter diverse and conflicting security advice online.

Many sources lack credibility or relevance.

Clearer, consistent guidance is needed for effective security practices.

Abstract

As users increasingly introduce Internet-connected devices into their homes, having access to accurate and relevant cyber security information is a fundamental means of ensuring safe use. Given the paucity of information provided with many devices at the time of purchase, this paper engages in a critical study of the type of advice that home Internet of Things (IoT) or smart device users might be presented with on the Internet to inform their cyber security practices. We base our research on an analysis of 427 web pages from 234 organisations that present information on security threats and relevant cyber security advice. The results show that users searching online for information are subject to an enormous range of advice and news from various sources with differing levels of credibility and relevance. With no clear explanation of how a user may assess the threats as they are pertinent to them, it becomes difficult to understand which pieces of advice would be the most effective in their situation. Recommendations are made to improve the clarity, consistency and availability of guidance from recognised sources to improve user access and understanding.