How safe is your smart home?

From smart speakers and security cameras to connected fridges and light bulbs, the Internet of Things (IoT) has quietly taken over our homes.

But there is growing concern: how secure are these devices really? At UT, researcher Chakshu Gupta studies how network traffic can reveal what smart devices are doing and what that means for our privacy.

Listening in on the network

“Every smart device in your home is constantly talking to some server over the Internet,” Chakshu explains. “Even when you’re not using it, it sends small signals saying, ‘I’m here, I’m working, this is my status.’” By analysing those patterns of communication (what’s sent, how often, and how data flows between devices and servers), Chakshu can identify which device is which, and how it behaves. “We can generate a fingerprint for each device using the way it talks over the network,” she says. That’s useful for cybersecurity experts who want to monitor networks and spot unusual activity, but it can also be misused. “An attacker could, in theory, stand outside your home, analyse your Wi-Fi traffic, and learn what kind of devices you have,” she explains. “So, it can be used both defensively and offensively.”

Is your security system secure?

Many smart home products, especially those from smaller or newer companies, don’t follow strong security practices. Chakshu has seen how fragile some can be. “We tested a smart alarm that anyone could turn off in seconds using a tool you can buy online,” she says. “It’s marketed as improving your home security, but it can make you more vulnerable instead.” Voice assistants such as Alexa or Google Home also raise privacy concerns. “They’re always listening for their wake word,” Chakshu notes. “If someone hacked their servers, they could send out malicious firmware updates and those devices could easily start recording everything you say. It’s like placing a bug in your living room.”

What you can do at home

While many solutions require technical expertise, Chakshu stresses that everyone can take small steps to stay safer. “If you’re not using a smart device, unplug it,” she advises. “There’s no reason for it to keep sending data while you sleep.” Before buying new gadgets, she also recommends doing a bit of research. “Check whether the company follows security standards or allows you to control what data is collected. Make sure the device and its app are only collecting data relevant for it to function. For example, the light bulb should not need your geo location, and your fridge should not have a microphone. Don’t just go for the cheapest option.” And yes, those long privacy policies are worth skimming. “It’s boring, but that’s where you find out which data is collected and what’s actually happening with your data,” she says.

Chakshu’s work focuses on helping society understand the hidden side of convenience. “These devices are part of our everyday lives now,” she says. “But we need to know what they’re doing behind the scenes.” Her current research looks at what internet providers can learn about household devices simply from encrypted traffic. “Even when your data is encrypted, patterns can still reveal a lot,” she explains. In the end, her motivation is: “I want my work to make technology safer for everyone, not just for experts, but for people at home who just want things to work without worrying who’s listening.”