We find ourselves in a world where an ever-increasing number of devices are communicating with one another for our convenience. With that in mind, when was the last time you reviewed which devices are operating within your network and what critical systems and information are those devices exposed to?
What Is IoT?
Internet of Things (IoT) refers to internet-enabled devices that can connect and exchange information with one another as well as with the cloud. IoT is more than just your typical devices (computers, mobile devices, etc.) - it includes smart TVs, smart speakers, smart light bulbs, smart watches, and the list goes on. IoT is coming at us in many shapes and forms, some of which are quite alarming, such as insulin pumps and pacemakers. We are now seeing businesses adoping IoT at the workplace. You get the point. And by all predictions, the number of devices is increasing at an exponential rate.
What Are the Risks associated with IoT?
Some companies producing IoT products, especially the unknown and cheap ones, do not necessarily have your security in mind throughout the product design process and beyond. There is also a massive target on the backs of these IoT devices since they are embedded so deeply in our operations and homes. For the above reasons, you can rest assured that cybercriminals are constantly looking for ways to exploit IoT devices.
There are also major privacy risks with many IoT devices set to listen out to certain words (ie. listen to entire conversations and sift through the data on the fly). Try talking about booking a trip to Zimbabwe in front of Alexa, and you may just find ads related to Zimbabwe vacations the following day. That example is benign but think about the risk to corporations and their intellectual property when a meeting is held in a room with an insecure IoT device.
Over the last few years we have seen cases of IoT devices being used to hack security systems, car functions being altered, credit card details stolen, and even medical scans being tampered with at hospitals. This is just the beginning and the more IoT devices we introduce, the more exposed we are.
How Can I Securely Introduce IoT Devices into My Home or Business?
Before introducing IoT devices into your home or business, it is important to do some due diligence. As more devices get introduced with the proliferation of IoT, policies and procedures must be put in place to ensure these devices are secure.
Some good first steps: