It’s the hottest thing going today. All your devices connected to the internet — and to you. And, to everyone else!
Walt Manning, a security expert and investigator, provides some insights into the IoT via his presentation at the Government Identity Fraud Conference in March. He notes that we already have more than 25 million devices connected to the internet. And by 2020 (only a few years away) this will double to 50 million! Ultimately, it is expected that the average house will have 100 devices connected to the internet.
Moreover, almost none of these devices are secure. On average, Manning reports, each device has 25 security flaws, and none of them are truly secure. This explosion of connected devices will have 5-10 times the impact that the internet currently has on the security of data.
Because, for all of the convenience of connected devices, we pay a price. That price is data; information about ourselves and our activities is recorded in logs somewhere. Everything. And to compound this problem, so far, every connected device has security flaws. So, someone, somewhere is storing all that data about you. And, that information is also readily available to anyone who wants to hack your systems.
So you want that information available to just anyone? Where is it stored? With what security? Is it encrypted? Do you even know? And, what are “they” allowed to do with that information?
There are some things you can and should do to protect yourself. For it’s a clear conclusion that the convenience of these devices is winning over security. So, some suggestions:
- Most devices will connect via your home Wifi router. Make sure it is passphrase protected.
If your research demonstrates the device has little or no security, and/or data will be provided to others without your permission, look elsewhere. We ARE going to buy this stuff — it’s just too cool and too convienient not to. But, we neeed to protect ourselves with some simple research into the products we buy, and buy smart (pun intended!).
Again, thanks to the good folks at the ITRC and LexisNexis Risk Solutions for the conference and to Walt Manning for his great presentation on the Internet of Things ans security — some of their information is included in this article.