Internet of Things (IoT) Security Threats Matthew Murray

Description The Internet of Things (IoT) is a system of interrelated computing devices, mechanical and digital machines, objects, animals or people that are provided with unique identifiers and the ability to transfer data over a network without requiring human-to-human or human-to-computer interaction.

Types of devices Routers Refrigerators Thermostats Security Cameras Home Assistants (Amazon Eco, Google Home) Wearable Technology/Implanted Devices (Apple Watch) Lights Locks Automobiles

Security Issues Many IOT devices are severely lacking in the security department. Most lack basic security, and many utilize outdated firmware. Human Error (use of default usernames and passwords). Allows hackers to quickly and easily gain access to system.

Threats DDoS Attacks Physical/Real World Ransomeware DDoS attack on DYN caused internet outages across the country. Physical/Real World Ransomeware

DDoS Attacks October 21, 2016 a large scale DDoS attack on DYN servers cause large internet outages across the United States. Many of the devices in the botnet were IOT devices such as home routers and security cameras Access was gained through the use of default login credentials.

Physical Real World Home Invasions Medical Devices By hacking IOT devices an individual could easily shut down security cameras, open door locks, and deactivate any other internet based home security features. This allows them to easily gain access to your house, car, etc. Medical Devices Some medical implant devices, such as pacemakers, have the ability to connect to Wi- Fi.

Ransomware Hackers use the classic approach when it comes to utilizing ransomware attacks on IOT devices (I.E. Locking the device and requiring payment to unlock). For many devices this isn’t a big issue because IOT data is usually stored in the cloud and devices can easily be reset. This can become an issue with medical IOT devices such as drug pumps and pacemakers. Will typically be used for timed attacks when devices cannot be easily reset.

How to be better protected Don’t use default login credentials Update firmware often. Don’t connect devices to the internet that don’t need to be connected (Personal Opinion)

Sources http://internetofthingsagenda.techtarget.com/blog/IoT-Agenda/Security-risks-from-the-internet-of-things http://internetofthingsagenda.techtarget.com/definition/Internet-of-Things-IoT http://www.darkreading.com/endpoint/7-imminent-iot-threats/d/d-id/1327233?image_number=1 https://iotsecurityfoundation.org/the-iot-ransomware-threat-is-more-serious-than-you-think/ http://www.zdnet.com/article/iot-devices-can-be-hacked-in-minuteswarn-researchers/ http://www.pcworld.com/article/3134056/hacking/an-iot-botnet-is-partly-behind-fridays-massive-ddos-attack.html