The Trouble With IoT Technology

The internet of things (IoT) has resulted in integrated workplaces and homes as smart thermostats, washing machines, security systems and wearable tech devices mean technology is making our lives even easier. However, data from the Internet Crime Complaint Centre (IC3) shows that personal data breaches are one of the most prevalent and fastest-growing cyber crimes in the U,S. With 50,000 people affected by data breaches in 2018, the risks to online security that IoT devices pose can no longer be ignored.

Home Assistants

At home, digital assistants such as Google Home and Amazon Alexa often form the center of IoT networks that allow users to operate a number of devices around their homes using their voices. However, recent news about the way recordings taken by the devices are shared with other human listeners within the parent company has led many to question the level of trust consumers place in these companies to protect their personal data—and how much we should be sharing when Alexa is in earshot.

Cybersecurity Live - Boston

In addition, other IoT devices such as light switches and security systems often operate on much weaker security restrictions, which could leave the entire network open to hackers. Some devices save the network Wi-Fi password insecurely, meaning hackers could break into the system through the washing machine and end up monitoring all internet use or even accessing personal data.

Workplace Security

The same issue can occur in workplaces where interconnected devices such as security systems and coffee machines can be connected to the main network and leave the entire framework vulnerable to opportunists. In much the same way, security teams need to be aware of every device that interacts with the network to ensure the organization is following strong security practices at each point of access.

Bring-your-own-device (BYOD) policies also pose an issue to company security, as devices brought from home may not have the same level of security as the rest of the company. That could allow hackers to exploit the discrepancies and access the personal data of staff or clients.

What’s the Solution?

Blockchain technology is a hot topic specifically in relation to IoT tech, and is seen by some as the answer to IoT security concerns. The main benefits of blockchain are its decentralized infrastructure, so there is no one point of access that could compromise the entire system, and its ability to record timestamps for every device which interacts with it. In the workplace, a blockchain could be well-utilized to ensure that only approved devices have access to the system and that any attempted breaches or unauthorized access is recorded so it can be dealt with quickly and effectively.

For companies that operate a BYOD policy, having a separate network for staff to access using their external devices will help avoid break-ins that occur because of different security standards.

However, neither of these solutions are realistic in the home, so the most likely solution to IoT security issues will come from the creators and manufacturers of the devices. In the rush to get these devices on the market, manufacturers have neglected the security aspects of their interconnectivity; this will need to be resolved before consumers can be certain their personal data is safe.

Customers with home assistants will need to consider the cost of sharing so much of their private data with the companies who own them before making them a part of their integrated homes. Big tech companies should also be required to be more explicit about how they handle their customers’ data and why, to avoid any upsetting surprises such as the recent leaks from Google.

In all, data privacy is the responsibility of everyone and the risks and solutions need to be considered at every point of connection to tackle the rising threat of personal data breaches.

Damon Culbert

Featured eBook
7 Must-Read eBooks for Security Professionals

7 Must-Read eBooks for Security Professionals

From AppSec to SecOps, Security Boulevard eBooks deliver in-depth insights into hot topics that matter to the Cybersecurity and DevSecOps professionals. Our staff of writers are the best in the business, with decades of practical and award-winning experience and credentials. We are excited to share our 2019 favorites. Take a look and download some of ... Read More
Security Boulevard

Damon Culbert

Damon Culbert is a content writer for Cyber Security Professionals.

damon-culbert has 1 posts and counting.See all posts by damon-culbert

API Poll

Step 1 of 5

Do you have an API security project in 2022?