How to Fix the Many IoT Security Gaps That Nobody Is Thinking About

Found on eWEEK on Saturday, 12 September 2015
Browse Technology

Nobody really knows for sure how many such IoT devices are connected and communicating at any given time. Estimates by Cisco suggest that the total in 2015 may reach over 10 billion. By 2016 some estimates suggest that there may be more connected devices than there are people on Earth. Only a few high profile devices have any security at all.

While it’s likely to be nearly impossible to simply add security to existing sensors and controllers that make up this part of the IoT, perhaps it’s possible to begin with a more measured approach. Clearly some of those things are reporting on critical infrastructure and should be upgraded as quickly as possible.

Why not just hold the manufacturer liable in case of blatant security issues? For example, NAS drives with a default password backdoor (which are pretty common), or the use of known weak (or no) encryption.