Many consumers today are increasingly concerned about IoT security and privacy. There is much media hype about home cameras being hacked or voice assistants eavesdropping on conversations. However, it is unclear exactly what are security and privacy threats, how prevalent they are, and what are the implications on users, policymakers, and manufacturers, because there is no reliable large-scale data in the wild.

In my talk, I’ll describe a new method to systematically collect a large-scale real-world dataset of IoT device network traffic. I’ll show you examples of security and privacy threats we identified on various IoT devices, along with a discussion on the potential legal issues.