The recent proliferation of smart home environments offers new and transformative circumstances for various domains with a commitment to enhancing the quality of life and experience. Most of these environments combine different gadgets offered by multiple stakeholders in a dynamic and decentralized manner, which in turn presents new challenges from the perspective of digital investigation. In addition, a plentiful amount of data records got generated because of the day to day interactions between these gadgets and homeowners, which poses difficulty in managing and analyzing such data. The analysts should endorse new digital investigation approaches to tackle the current limitations in traditional approaches when used in these environments. The digital evidence in such environments can be found inside the records of logfiles that store the historical events occurred inside the smart home. Threat hunting can leverage the collective nature of these gadgets to gain deeper insights into the best way for responding to new threats, which in turn can be valuable in reducing the impact of breaches. Nevertheless, this approach depends mainly on the readiness of smart homeowners to share their own personal usage logs that have been extracted from their smart home environments. However, they might disincline to employ such service due to the sensitive nature of the information logged by their personal gateways. In this paper, we presented an approach to enable smart homeowners to share their usage logs in a privacy preserving manner. A distributed threat hunting approach has been developed to permit the composition of diverse threat classes without revealing the logged records to other involved parties. Furthermore, a scenario was proposed to depict a proactive threat Intelligence sharing for the detection of potential threats in smart home environments with some experimental results.

中文翻译：

---

智能家居环境中的隐私保护威胁搜寻

最近智能家居环境的激增为各个领域提供了新的变革性环境，致力于提高生活质量和体验。这些环境中的大多数以动态和分散的方式结合了多个利益相关者提供的不同小工具，这反过来又从数字调查的角度提出了新的挑战。此外，由于这些小工具和房主之间的日常交互，产生了大量的数据记录，这给管理和分析这些数据带来了困难。分析人员应认可新的数字调查方法，以解决在这些环境中使用的传统方法的当前局限性。这种环境中的数字证据可以在存储智能家居内部发生的历史事件的日志文件的记录中找到。威胁追踪可以利用这些小工具的集体特性来更深入地了解应对新威胁的最佳方式，这反过来又可以减少违规的影响。然而，这种方法主要取决于智能房主是否愿意共享从其智能家居环境中提取的个人使用日志。但是，由于个人网关记录的信息的敏感性，他们可能不愿意使用此类服务​​。在本文中，我们提出了一种使智能房主能够以保护隐私的方式共享其使用日志的方法。已经开发了一种分布式威胁搜寻方法，以允许组合不同的威胁类别，而不会将记录的记录透露给其他相关方。此外，还提出了一个场景来描述主动威胁情报共享，以检测智能家居环境中的潜在威胁，并具有一些实验结果。