The Internet of Things (IoT) is a term used to describe the ever-growing list of “smart” devices and other everyday objects that connect to the internet. These items are commonly used around our homes to make our lives easier. While they are incredibly convenient and helpful, there is risk involved in using smart devices.
Risks:
- They make easy targets for attackers. IoT systems (smart devices) often have low security settings. They usually aren’t supported with software updates and patches to protect them from vulnerabilities. They typically have default usernames and passwords that are easy to find online. These poor security settings make them easy for attackers to gain access to and potentially control.
- Personal data from smart devices can be discovered. Smart devices store data. If they are easily compromised, so is the data stored on them. If you have a smart home set up to keep your house at a specific temperature and turn lights off when you are away, attackers could potentially use this information to determine when your home is unoccupied.
- Smart devices provide a pathway to the rest of your network. The smart device isn’t the only thing at risk if an attacker gains access to a network-connected smart device. The attacker can then try to access other devices and data on your home network.
Recommendations:
- Place all of your IoT devices on a guest network instead of the primary Wi-Fi network that you use to connect your PC, phone, or other personal devices. This separation will help prevent any compromised IoT devices from accessing your primary Wi-Fi network. If you use a home security system, ensure it is on a different network than your other smart devices. Read about setting up a secure home network.
- Change the passwords on all your smart devices from the default passwords. If possible, implement multi-factor authentication to access your smart devices. (Read our November 2019 blog post on multi-factor authentication.)
- Keep track of what smart devices you own, and occasionally check online by a quick Google search to make sure that no new vulnerabilities or attacks have been discovered against your devices. Update your smart device’s software whenever updates are available.
Remember, not all smart devices are created equal. Do your research before deciding which devices to keep in your home. Find out what information your devices can access and store before you bring them into your home. Finally, review the tips for securing your devices to ensure that your device is an asset rather than a liability.