GUEST COLUMN
SECURITY PREDICTIONS FOR IOT According to a Gartner report, about 25 billion devices/objects will be connected to the Internet by the year 2020. While this may sound exciting as a technology, but it brings with it immense security risks too. SANJAY KATKAR, Co-Founder and Chief Technology Officer of Quick Heal Technologies. BRIEF PROFILE He attended Pune University in Pune, Maharastra and received a bachelor of computer science degree and he also received a master’s degree in computer science from the University of Pune in 1994. Sanjay also serves as the Director of Association of Anti-Virus Researchers Asia (AAVAR) and is a reporting member of The Wild List Organization International, USA. He is also a member of the Technology Steering Committee of National Security Database. He received the Entrepreneurs International Honors for his significant achievement as a First Generation Entrepreneur on 9th Entrepreneurs Day 29th July 2002.
If your refrigerator, lamp, oven, television, car, or any other physical object is connected to the Internet and is able to exchange data with other connected objects, then you are basically making use of a network called the Internet of Things. The ‘things’ in this term refers to everyday physical objects ranging from home appliances to entire factories, that are assigned a unique IP address and are interconnected to other such objects without any human interaction. According to a Gartner report, about 25 billion devices/objects will be connected to the Internet by the year 2020. The entire canvas of the Internet of Things (IoT) may look peachy, but deep down, it could be a cauldron of security risks. While the end results behind creating this marvel of a wonder is automation, efficiency, safety, and convenience, the other side of the coin could be dark, bearing an entirely different story; unpleasant and horrific. This brief write-up is an attempt to throw some light; pessimistic yet pragmatic, into the many potential security predictions/risks connected with the Internet of Things.
Security Predictions for Some Popular IoT Devices SMARTPHONE GARAGE DOOR OPENERS Preface: These devices enable home owners to operate their garage doors remotely (open and close) with the help of Internet connectivity. The user may operate the device using a smartphone app or a web portal on their computer or laptop. Potential Security Risks: An attacker who is able to hack into the user’s device (smartphone or laptop/desktop) can perform the following operations: n Observe the current state of the garage door; open, closed or in motion.
32 SME CHANNELS AUGUST 2015
n Control the function of the door, commanding it to open or close at will. n Manipulate the device to send notifications on email or mobile whenever the garage door is operated. Impact: Exploiting the above risks can give hackers an opportunity to rob the house or even worse, mess with other Internet-enabled devices in it.
SMART TVS Preface: Originally known as ‘Connected TVs’, these devices can connect to the Internet and offer multiple Internet-based services to users such as online media streaming, online radio, and web browsing to name a few. Potential Security Risks: The greatest and most concerning risk about a compromised Smart TV is getting spied by hackers and being completely aloof of it. Such a device, when compromised, can allow hackers to: n Install spyware (a malicious program that steals user information without their knowledge) in the television itself. n Take control of the television’s microphone and web cam to eavesdrop on the inhabitants of the house. n Steal login credentials and personal information from users who log in to online shopping or banking portals on the television. Impact: n Infiltration of privacy. n Phishing attacks on banking and personal information. SMART THERMOSTAT Preface: Thermostats are devices that help users control/