得益于人工智能的高速发展，人们的生活方式也变得更加智能而便捷，但在智能设备猛烈发展的同时，安全问题、隐私问题乃至财产人身安全都带来了极大的潜在威胁。本文以一个可通过Wi-Fi控制的智能灯泡为代表，研究了智能设备与客户端之间的通信原理及如何编写脚本程序去伪造权限并取得智能设备的控制权，实验主要采取了渗透测试的方法，模拟黑客行为远程操控机器人去接近用户的智能电灯网络Wi-Fi源，进而对其智能设备进行模拟攻击，并成功越权，得以在没有用户授权的情况下控制智能电灯的开关，证明了智能设备的安全存在一定的问题。同时也是侧面强调了使用设备的安全性和隐私保护等问题。
Thanks to the rapid development of artificial intelligence, people’s lifestyles have become more intelligent and convenient. However, with the rapid development of smart devices, security issues, privacy issues, and the personal safety of property have brought great potential threats. This article takes a smart light bulb that can be controlled through Wi-Fi as a representative, and studies the communication principle between smart devices and clients and how to write script programs to forge permissions and gain control of smart devices. The experiment mainly uses the penetration test method. Simulate hacking to remotely control the robot to approach the user’s smart light network Wi-Fi source, and then simulate the smart device’s smart device and successfully override the power. The smart light can be controlled without the user’s authorization, which proves certain questions of the safety of the smart device. At the same time, it also emphasized the issues of security and privacy protection of the device.
