IoT security is often an afterthought. This needs to change, and change now. If our devices are not secure we are not secure
We’ve reached the point where nearly every aspect of our lives is interconnected. Our homes, cars, offices, our commutes, practically every facet of our day-to-day existence has a device associated with it (in fact, several), all of which are designed to make life smoother and easier. The interconnected world is, in theory, a wonderful place to be. Until it isn’t.
What’s the concern? There are multiple currents in play here, but they all revolve around a core driver – security. These “things” (as in “Internet of”) are being produced across an enormous range of applications at a far faster rate than a secure enabling infrastructure that can support them can keep up. All of these myriad things are being designed for convenience and rapid adoption, and by that criteria are clearly succeeding. However, IoT security as an integral part of the design process, is often an afterthought.
How concerning is this? Four quick examples:
Home: your home security system could easily be accessed through an unsecured device on the network (e.g. your refrigerator), then monitoring cameras can be turned on or off, doors unlocked, etc. Manufacturers add network accessibility to devices to track usage and improve the product, but they don’t necessarily think of the associated IoT security risks. That is because these are normally outside the scope of their core competency. Read more...