Why Consumer IoT Security Vulnerabilities Threaten the Industry

KaylaMatthews
The IOT Magazine
Published in
3 min readSep 29, 2020

--

The consumer IoT market has become massive in just a few short years. There are now likely billions of live devices, with developers offering consumers everything from home assistants to smart security cameras to smart refrigerators.

However, there’s a big challenge ahead for the industry. Despite advances in IoT security and design, these devices are still quite vulnerable — which could expose people and their home networks to attacks from hackers and other cybercriminals. A lack of consumer knowledge about cybersecurity is making this problem even worse.

Here’s the current state of IoT security, and why these vulnerabilities pose such a major threat to the industry.

The Current State of Consumer IoT Security

Despite big strides in IoT security over the past few years, the industry continues to struggle with keeping devices safe from hackers. Each year, the number of attacks on IoT devices grows. If something is left unsecure — whether because it’s not designed to be patched with new security updates or doesn’t make it easy for end-users to change default passwords — it could easily expose a consumer’s home network to attack.

There are other problems, too. If a developer goes out of business, there’s no one updating the firmware that keeps these devices secure. That means that if hackers discover a new vulnerability, consumers don’t have anyone looking out for them and opening the doors to an attack.

This is made even worse by the fact that most consumers don’t practice good cybersecurity habits when it comes to their IoT devices. For example, 15% of all IoT device owners don’t change default passwords. To hackers, this means that with just five standard username and password combos, it’s possible to access around 10% of all IoT devices out there with zero effort.

How Developers and Consumers Can Boost IoT Security

The tech and methods that IoT devices use are often secure. For instance, voiceover internet protocol (VoIP), which sends voice communications over the internet, is known to be safe. Many providers offer encryption services that help keep data even safer. The security of IoT devices themselves, however, still leaves a lot to be desired.

Developers are taking steps to improve the security of IoT devices. New tech, no matter how simple or streamlined, is mostly designed to be patchable. This means that developers can continue to push security updates long after the device has been sold. They’re also beginning to develop new ways of encrypting IoT data traffic, which will help keep data secure as it travels between IoT devices or to data centers over the internet.

Right now, however, there’s still significant debate on how to encrypt data. Concerns about the processing power are pushing some developers to create new, extra-lightweight solutions, rather than use older, well-tested encryption methods.

Consumers with IoT devices can also take steps to improve the security of their home networks. Implementing basic security practices — like changing default passwords and keeping devices updated to the latest security patch — can go a long way.

More advanced techniques can make these devices even safer. For example, you may use your router to create a secondary network, separate from your main home network, that you use to connect the IoT device to the internet. You might also disable features, like universal plug and play (UPnP), that make it easy for IoT devices to connect.

Staying on top of IoT news can also help. If a major vulnerability is discovered, it may show up in the news before hackers begin using it to target devices. Disabling or limiting vulnerable tech may keep your home network safe.

Security Is Essential to the Future of the IoT Industry

As the number of consumer IoT devices increases, security will become even more important for developers. This is why so many companies are investing more resources in security technology and development. In the meantime, consumers concerned about their security can now implement practices that keep their home networks safe.

Disclaimer: Being a follower of ‘The IoT Magazine’ offers lots of perks :) A consultation session with experts from across the industries is a major one. Submit your query here and we will connect you with the right IoT experts. He might be sitting next door, you never know.

--

--

tech and productivity writer. bylines: @venturebeat, @makeuseof, @motherboard, @theweek, @technobuffalo, @inc and others.