The IoT ImpOsTer Lab is a large-scale experimental facility operated by the Internet Analytics Group to study the security, privacy, and trustworthiness of interconnected digital ecosystems. It focuses on the often invisible interactions between mobile apps, IoT devices, and online services that shape today’s data-driven infrastructures.

Equipped with hundreds of state-of-the-art IoT devices and instrumented smartphones, the lab enables controlled, reproducible experimentation on complex hardware–software systems. We investigate how these systems can be misused for large-scale data collection, cross-platform tracking, covert communication channels, and systemic privacy abuse.

By combining program analysis, network measurement, system instrumentation, advanced honeypots, and empirical security research, we uncover architectural weaknesses and structural design flaws that enable exploitation at scale. Beyond exposing vulnerabilities, we develop principled and scalable methodologies to detect, measure, and mitigate these risks, particularly those that occur as a result of coordinated actions across devices that current security and privacy controls cannot limit.

Our mission is to build the scientific foundations for transparent, accountable, and privacy-resilient IoT and mobile ecosystems that serve millions of users worldwide.

Device Inventory