Skip to content
Review Open access

A Systematic Review of Smart Home IoT Security: Applications, Threat Taxonomy, Privacy Risks, and Emerging Defensive Solutions

Aug 2026 · Big Data and Cognitive Computing · 0 citations · 30 references

TL;DR

It is suggested that scalable smart home security requires coordinated progress in protocol standardization, enforceable device update lifecycles, gateway-level anomaly detection, and privacy-preserving local analytics rather than reliance on a single technical solution.

Abstract

The rapid proliferation of Internet of Things (IoT) technologies has transformed the modern home into a complex cyber–physical ecosystem encompassing hundreds of millions of connected devices globally. Smart homes support automation, energy management, and healthcare monitoring, but they also introduce a broad and evolving range of security and privacy challenges. This review examines 233 sources published between 2018 and May 2025, selected through a PRISMA-informed process covering five major academic databases and relevant standards and technical reports. It discusses communication protocols, including Matter, develops a Threat-Layer-Defense synthesis matrix covering ten attack categories; examines the practical limitations of AI-based anomaly detection and blockchain-based trust management; and derives recommendations for manufacturers, platform providers, users, and regulators. Privacy challenges, regulatory frameworks, and user behavior are considered alongside technical threats. The findings suggest that scalable smart home security requires coordinated progress in protocol standardization, enforceable device update lifecycles, gateway-level anomaly detection, and privacy-preserving local analytics rather than reliance on a single technical solution.

Read PDF

Similar papers

Review Open access Aug 2026

Security Vulnerabilities and Resilience Strategies in Healthcare IoT Systems: A Comprehensive Review

A thorough study of 41 peer-reviewed research papers from January 2018 through May 2025 revealed the current state of security vulnerabilities and resilience strategies in healthcare IoT systems and provides a comprehensive analysis of security threats at the device, network, and application levels.

M. R. M. Hanan, M. J. A. Sabani · 0 citations
Review Open access Aug 2026

Cybersecurity in the IoT Era: Protecting the Expanding Internet of Things

It is argued that securing the IoT ecosystem requires sustained, coordinated effort from manufacturers, regulators and end-users, and where current technological and regulatory responses fall short of that goal is identified.

K. Curran, J. Kyle, Lovepreet Singh · 0 citations
Review Open access Jul 2026

Smart Home IoT: Current Development, Bottlenecks, and Optimization Strategies

The Internet of Things (IoT) and artificial intelligence have advanced quickly, and with shifting consumer behaviors, the smart home has become the most promising field of IoT application. Rapid growth, however, has exposed persistent weaknesses in interoperability, security, and reliability that slow adoption. This paper analyses the deployment of smart home IoT and the obstacles it faces. The paper first clarifies the concept of the smart home and its underlying IoT infrastructure, then reviews the industry's evolution, and finally assesses the domestic market from four angles: overall scale, penetration rate, major platforms and ecosystems, and typical application scenarios. It then identifies five recurring problems—limited interoperability and ecosystem fragmentation, security and privacy hazards, conflicting automation logic and unreliable operation, a weak user experience, and high cost and energy use alongside lagging standards—and proposes strategies built around unified standards, security-oriented design, conflict detection and mitigation, edge computing with AI, and aging-friendly design. Methodologically, the study combines literature review, case analysis, and industry statistics. It concludes that China's smart home market, though large and fast-growing, remains in a growth phase, and that its tensions are best resolved through stronger standards, a security-first stance, and a systems perspective. Finally, since closed commercial ecosystems provide no usable means of detecting rule conflicts, the study put forward a black-box, log-driven approach to conflict identification and severity assessment that requires neither platform source code nor proprietary interfaces. Unlike techniques that depend on open APIs or runtime instrumentation, it can inform risk governance in multi-brand smart homes and the drafting of technical standards.

Hao-Xiang Shi · 0 citations
Open access Aug 2026

Security-by-Design and Risk-Based Certification for AI-Enabled Smart Home

A Security-by-Design and risk-based certification framework that combines a six-layer IoT-AI reference architecture with STRIDE-based threat analysis augmented to capture AI-specific threats, including prompt injection and data poisoning is proposed.

Iván Ortiz-Garcés, Roberto O. Andrade · 0 citations
Review Open access Aug 2026

A Comprehensive Review of Cybersecurity Threats, Vulnerabilities, and Mitigation Techniques in the Internet of Things (IoT)

The ways in which artificial intelligence, blockchain technology, edge computing, and Zero Trust Architecture will transform IoT security paradigms are examined, which will reveal long-standing issues such as resource limitations, device heterogeneity, and scaling challenges.

Muhammad Sami Intizar, Maria Sikandar, Aqsa Siddique et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.