Skip to main content

Entry 1 - Defending the IoT

The internet of things, or IoT, is getting a lot of attention with the exploding popularity of smart home devices and general connectedness of the world in general, but what exactly is it and how safe is it?

What is IoT

IoT can be summarized as the network of devices equipped with electronics, sensors, software and connectivity that allows them to send information to, and receive information from other IoT devices. The super popular Nest home thermostat for example, is on the IoT because it senses temperature in the home, adjusts settings on your A/C or heating units, and relays this information via the internet to your mobile device. Beyond the home it utilizes information on weather conditions and forecasts from weather stations in the area.

Now example this small scale application of the IoT on an enormous scale. The thermostat is now controlling the heating and cooling in laboratories at the CDC. Any unwanted variation in temperature could have potentially disastrous effects on research and pose a safety issue. This is where the question of security truly comes into play. Once hackers infiltrate one IoT device, naturally they have the chance to continue along its network of connected device, turning one breach into many.

The Solution

Traditional IoT devices are built with minimal memory and processing power, so defending themselves from cyber attack is nearly impossible. One tool that hackers utilize in breaching IoT device security is called a botnet. Once botnets get on a device they kill off other malware and claim processing power for themselves, often competing with other botnets. The clever solution to defeat botnets then, is botnets themselves. By reengineering botnets to defeat any type of malware they encounter on a device, the device can be secured even without large amounts of memory or processing capability.

To read more on botnets and securing the IoT, click the following link to learn about MIT PhD student, Gregory Falco, and his unlikely path to computer science and urban planning.

Comments

  1. Laughlin AsheOctober 23, 2017 at 5:49 PM

    The threat of hacks into not only the affected device, but also any connected device seems very dangerous and like it could hinder the progress of IoT. Take, for, example, the Amazon Echo (Alexa) that can control your lights, your thermostat, your music, make phone calls, call ubers, and make purchases on Amazon. Does this mean that a hack into this one device would allow access to all of the related entities, including credit card information? Can botnets protect each aspect of the echo's capabilities at the same time?

    ReplyDelete

Post a Comment

Popular posts from this blog

Entry 5 - Protecting Anonymity

Terminology TOR- "the onion router" or the idea of wrapping a communication in several layers of encryption Mixnet - series of servers that changes the order in which messages are sent and received before being delivered Staying under the radar Privacy comes in many different forms when we think of the internet. Most people are probably familiar with the idea of private accounts on social media, being able to restrict who sees what you post, and private browsing options on things like Google Chrome and Safari. The word privacy in these cases is a matter of personal comfort and a sense of security, but what if your actual safety depended on this privacy ? Would you trust Facebook, or your favorite web browser to safeguard your anonymity? Probably not. Countries around the world practicing internet censorship obviously don't support internet privacy and so anyone interested in skirting these censors has to find another, safer way to achieve privacy, or r
3 comments
Read more

Entry 4 - Location, location, location...

The Anonymity of Location Services The advent of the cell phone and subsequently the smartphone has put a world of knowledge at our fingertips. Recipes, maps, music and much more are just a few clicks away, whenever we want them, wherever we want them. This is great for productivity and connectivity, but herein lies the danger to our privacy. Location services drive much of the functionality and enhance the user's experience on many of today's most popular apps, specifically social media applications. Apps encourage "checking in" and "tagging" people and locations attached to posts, and users often accept the risk of sharing their information because of " hyperbolic discounting" , where people focus on the immediate benefit and discount future risk. (3) Some users chose to disable location services, an option that should t heoretically make a user's location private, but recent studies show that this might be a false sense of security.
2 comments
Read more