In the largest global study of the Internet of Things in consumers’ homes, researchers from Avast and Stanford University have shown a surprising emergence of IoT devices in consumer homes and shed light on troubling number of devices that continue to use guessable passwords. The study provides the first large-scale empirical analysis of IoT devices by leveraging user-initiated network scans of 83 million devices in 16 million households worldwide. The findings will be published in a paper, All Things Considered: An Analysis of IoT Devices on Home Networks, which will be appearing at USENIX Security this week. Avast researchers scanned the devices to understand the distribution of IoT devices by type and manufacturer and to understand the security profiles of various devices. The findings were validated and analyzed in collaboration with Stanford researchers. Learn more about the research here: https://blog.avast.com/avast-and-stanford-research-shows-global-internet-of-things-avast

1. Home Security Map of the World
Avast in Collaboration with Stanford University
1

2. 2
All Things Considered:
An Analysis of IoT Devices
on Home Networks
Deepak Kumar, University of Illinois at Urbana-Champaign;
Kelly Shen and Benton Case, Stanford University;
Deepali Garg, Galina Alperovich, Dmitry Kuznetsov, and
Rajarshi Gupta, Avast Software s.r.o.;
Zakir Durumeric, Stanford University

3. Device distribution
Stanford University and Avast joint research to understand
what the smart homes of the world look like today.
Analyzing home network data from:
83 million devices in 16 million homes_
Goal
3
IoT distribution
Vendor landscape Vulnerabilities in home devices

4. 4
Methodology
● 290M Avast PC Users
● 55M use Wi-Fi Inspector
● 16M scans in December 2018
Wi-Fi Inspector
Scans home network and the
devices connected to it

5. Consent to participate in research
5
We only collect statistics about
homes where the user
explicitly agreed to share data
for research purposes

6. 6
How much data do we have?
Global United States
Number of households 15.5M 1.0M
Network devices 18.1M 1.4M
Computers 24.4M 1.6M
Phones 23.3M 1.9M
IoT devices 9.5M 1.9M

7. Shape of a Modern Home
7

8. Globally one third of homes have an IoT device
8

9. 9
66% of homes in N. America have at least one IoT device
25% of homes in N. America have 3 or more IoT devices
25% of homes in North America have more than 2 devices
9% of homes in N. America have 5 or more IoT devices

10. IoT adoption varies significantly across world regions
10

11. IoT Analysis
11

12. Globally one third of homes have an IoT device
12

13. 13
Varied regional preferences for IoT devices

14. 100 manufacturers account for over 90% of devices
14
94%
• 100 vendors account
for more than 90% of
devices
• 400 vendors account
for more than 99% of
devices

15. Game Console: Little Regional Variance in Vendors
North America
Vendor %
Microsoft 39%
Nintendo 19%
Azurewave 11%
Sony 9%
Honhai 8%
Other 14%
Western + Northern Europe
Vendor %
Microsoft 30%
Nintendo 22%
Sony 14%
Honhai 11%
Azurewave 8%
Other 15%
South East Asia
Vendor %
Microsoft 44%
Nintendo 11%
Honhai 11%
Azurewave 10%
Sony 6%
Other 18%
There are few manufacturers of Game Consoles and their popularity is similar across regions.

16. Media Devices: Major Regional Variance in Vendors
North America
Vendor %
Roku 17%
Amazon 10%
Samsung 9%
Apple 5%
Google 5%
Other 54%
Western + Northern Europe
Vendor %
Sagem 15%
Samsung 14%
Freebox 9%
Google 6%
Azurewave 8%
Other 15%
South East Asia
Vendor %
Samsung 19%
Honhai 10%
ZTE 10%
LG 10%
Wistron Neweb 4%
Other 47%
There are many manufacturers of Media Devices and their popularity varies across regions.

17. Routers: Major Regional Variance in Vendors
North America
Vendor %
Arris 16%
Cisco 8%
Sagem 5%
Actiontec 4%
TP-Link 4%
Other 63%
Western + Northern Europe
Vendor %
Sagem 18%
Freebox 9%
AVM 5%
Huawei 5%
TP-Link 3%
Other 60%
South East Asia
Vendor %
TP-Link 18%
Huawei 14%
ZTE 12%
Fiberhome 5%
Mikrotic 4%
Other 47%
There are many manufacturers of Routers and their popularity varies across regions.

18. Vulnerabilities
18

19. Open FTP and weak FTP credentials are prevalent
19
8.7%

20. Nearly 20% of work appliances have open Telnet
20

21. Open and weak HTTP credentials are very common:
Case study of one popular router vendor
21