Among the plethora of IoT (Internet of Things) applications, the smart home is one of the fastest-growing. However, the rapid development of the smart home has also made smart home systems a target for attackers. Recently, researchers have made many efforts to investigate and enhance the security of smart home systems. Toward a more secure smart home ecosystem, we present a detailed literature review on the security of smart home systems. Specifically, we categorize smart home systems’ security issues into the platform, device, and communication issues. After exploring the research and specific issues in each of these security areas, we summarize the root causes of the security flaws in today's smart home systems, which include the heterogeneity of internal components of the systems, vendors' customization, the lack of clear responsibility boundaries and the absence of standard security standards. Finally, to better understand the security of smart home systems and potentially provide better protection for smart home systems, we propose research directions, including automated vulnerability mining, vigorous security checking, and data-driven security analysis.

在众多的物联网应用中，智能家居是增长最快的应用之一。然而，智能家居的快速发展也让智能家居系统成为攻击者的攻击目标。最近，研究人员为研究和增强智能家居系统的安全性做出了许多努力。为了建立更安全的智能家居生态系统，我们对智能家居系统的安全性进行了详细的文献综述。具体来说，我们将智能家居系统的安全问题分为平台问题、设备问题和通信问题。在探索了每个安全领域的研究和具体问题后，我们总结了当今智能家居系统安全缺陷的根本原因，其中包括系统内部组件的异构性、供应商的定制化、缺乏明确的责任边界和缺乏标准的安全标准。最后，为了更好地了解智能家居系统的安全性并为智能家居系统提供更好的保护，我们提出了研究方向，包括自动化漏洞挖掘、严格的安全检查和数据驱动的安全分析。