Description
The rapid proliferation of the Internet of Things (IoT) has fundamentally changed the
landscape of modern access control, with smart locks representing one of the most
critical intersections of digital and physical security. While these devices offer unprecedented
convenience, they also introduce new attack vectors that may compromise the
physical security of protected environments. This thesis conducts a critical analysis of
existing IoT security standards to establish a baseline for conceptually secure smart
locks. In addition, the real-world threat landscape is examined through systematic
threat modeling. Based on this analysis, a selected subset of non-physical attack vectors
is practically evaluated against contemporary smart locks using a black-box testing
methodology. The results provide insights into how current IoT security standards
compare and how they can be used to evaluate smart lock security. Furthermore, the
analysis reveals practical vulnerabilities and compares the evaluated smart locks with
respect to security, usability, and cost. Ultimately, this work contributes to bridging the
gap between high-level standardization efforts and the practical security requirements
of modern smart lock architectures.
|
Thesis topic in co-operation with the Fraunhofer Institute for Applied and Integrated Security AISEC, Garching