IoT devices (smart lightbulbs, smart plugs, smart cameras, etc) are entering the market without much regard for security. My project will focus on designing and implementing attacks against an IoT device such as a TPLink cloud camera, or on defences that mitigate existing attacks. I will be using my hands-on experience with network traffic sniffing and machine learning (data mining) techniques and algorithms, or, alternatively, reverse-engineering IoT device firmware.