IoTFlows

IoTFlows is a comprehensive tool designed to analyze and understand the behavior of IoT devices through their mobile companion apps. By combining Value Set Analysis (VSA) with data-flow analysis, IoTFlows automatically reconstructs how these apps communicate with IoT devices and cloud-based backends. This approach allows users to identify what data is exchanged, with whom it is shared, and how it is processed.

IoTFlows offers a robust framework for assessing the security and privacy of IoT ecosystems. It has been used to analyze thousands of companion apps, revealing various security issues such as abandoned domains, hardcoded credentials, expired certificates, and the sharing of sensitive personal information. By providing insights into these vulnerabilities, IoTFlows helps users address potential risks before they can be exploited by attackers.

The app's capabilities are particularly useful in the context of the rapidly expanding IoT landscape, where diverse software and hardware architectures present significant challenges for security analysis. IoTFlows' ability to scale and adapt to these complexities makes it a valuable resource for those seeking to enhance the security and privacy of IoT systems.