Investigation of the Security Vulnerabilities of Internet of Things Devices in Smart Homes in Lagos

The proliferation of smart home IoT devices in affluent urban areas of Lagos introduces security vulnerabilities that many homeowners are unaware of, and documenting these risks and the current state of user security management provides evidence for consumer guidance and product standards policy. This study investigated the security vulnerabilities of IoT smart home devices and the security management practices of smart home users in Lekki Phase 1 and Victoria Island, Lagos State, South West Nigeria. A combined technical assessment and user survey methodology was employed. Security configuration audits of 50 consenting participants' smart home devices assessed default credential changes, firmware currency, network segmentation, and encryption. User surveys measured security knowledge and practices. Technical audits revealed that 64.0 percent of devices had not changed default credentials. Firmware was outdated in 70.0 percent of assessed devices. Network segmentation separating IoT devices from main home networks was implemented in only 12.0 percent of homes. User knowledge of IoT-specific security risks was adequate in only 24.0 percent. Income level showed no significant association with security configuration quality. The study recommends mandatory security-by-design standards for IoT devices sold in Nigeria, a NITDA consumer IoT safety guide, retailer-provided setup security checklists, and inclusion of IoT home security content in digital literacy campaigns targeting Lagos urban households.

Keywords: IoT security, smart home, default credentials, firmware update, Lagos