EmailNews
Internet of Things: Growing value, increasing attack target
Recently, Cisco CEO John Chambers stated that the Internet of Things has the potential to generate $19 trillion in economic benefits during the next 10 years.
According to CNET, the Internet of Things is widely considered the next innovation in technology, and opens the doors to countless possibilities for interconnections among users and smart devices. Further adding to the value of the platform is the fact that a number of major technology companies are looking to participate in IoT advancement.
For example, there are numerous connected devices already on the market, including home appliances like refrigerators, building security systems and smart vehicles. CNET reported that Google recently purchased a thermostat and smoke detector company as part of its IoT efforts.
IoT cyberattacks
However, as the reach of the IoT continues to grow, its becoming an increasingly attractive target for cybercriminals. Security researcher Marc Rogers noted that a main reason causing this shift is that other connected devices, like smartphones and laptops, are protected with antivirus and other security programs whereas IoT items currently are not.
A number of malware attacks have been aimed at the IoT devices recently. One, the Carna Botnet, infected 420,000 items at its high point, including Wi-Fi routers, printers and computer modems, according to SiliconANGLE. Another malware sample called Linux.Darlloz was discovered late last year by Symantec, and another recently recognized Botnet infected approximately 100,000 items like smart TVs and refrigerators.
"They all used the same vulnerability," Rogers said. "In all of these cases the attackers were able to compromise these things because the manufacturers left default accounts with published passwords on these 'connected things' to help users with their first time configuration."
Preventing IoT attacks
SiliconANGLE stated that the majority of users are unaware of the inherent security flaws in non-traditional connected devices, and do not lock the default accounts, leaving an exploitable weakness open. To prevent these types of attacks, consumers that purchase connected devices should utilize the default account for first-time setup, but then change the settings to establish a more unique, secure profile with a complex password. The source also advised ensuring that the software is updated on these items, as some manufacturers have released security patches to correct vulnerabilities, such as with outdated Wi-Fi router systems.
Additionally, users can implement firewalls on their home networks to prevent infections on the network level. The U.S. National Security Agency advised ensuring that such security measures can support Network Address Translation, which prevents unauthorized access via the Internet.
Protect data in transit with an SSL certificate today.
corporate office
Thawte
The Gateway
Century Lane
Century City, 7441
Cape Town
South Africa
Postal Address:
P O Box 15986
Panorama 7500
Cape Town
South Africa
Call: +353 1 793 9141
Fax: +27 21 819 2950
