Week 6 - Study Notes on The Internet of Things and Security Issues

SOCIAL MEDIA AND DIGITAL IDENTITY

WEEK 6: THE INTERNET OF THINGS / THE CASE STUDY

  • Overview of the week's content.

  • Topics Covered:

    • The Internet of Things (IoT)

    • Assignments related to IoT

    • Case Study on IoT applications

    • Learning Objectives:

    • Pointing out advantages and disadvantages of IoT devices.

    • Interpreting how IoT will mature over time.

THE INTERNET OF THINGS

  • Definition and Scope:

    • The Internet of Things refers to formerly normal objects that can connect to each other and communicate.

    • Examples of IoT Devices:

    • Smart Thermostat: Automatically lowers temperature when you leave the room to conserve energy.

    • Home Automation Systems: Adjust settings in the home for optimum comfort.

    • Smart Meters: Provide real-time energy usage data to improve energy management.

IMPACT ON DIFFERENT GROUPS

  • Affects the following:

    • Home Users: Benefit from convenience and resource management.

    • Corporate/Industry: LeveragingIoT for efficiency and productivity.

    • Cities: Future vision includes smart infrastructure like smart roads.

    • Example: General Motors (GM) urges collaboration to build smart roads suitable for smart vehicles.

    • Products Mentioned:

    • iRobot Roomba (robot vacuum)

    • Waymo (autonomous vehicles)

    • Samsung technologies in smart homes.

POTENTIAL BENEFITS OF IOT

  • Offloading Mundane Tasks: Automation can relieve users of routine responsibilities.

  • Huge Potential Benefits:

    • Cost savings through increased efficiency.

    • Energy savings that contribute to environmental sustainability.

    • Potential to save lives via improved monitoring and response systems (reference to smart technologies).

HOW IoT CAN SAVE LIVES

  • Examples of Applications:

    • Smart Cement: Embedded sensors to monitor conditions of infrastructure such as bridges, informing when to take precautions (e.g. icy conditions).

    • Responsive Road Signs: Communicate real-time road conditions to vehicles.

RISK ASSESSMENT

  • Security Concerns:

    • Despite conveniences, IoT brings substantial risks, especially concerning security.

    • Significant Issues Identified:

    • "Internet of Compromised Things": Noted weaknesses in device security (Mention of Samsung Connect).

    • Increasing incidents of security vulnerabilities and attacks highlighted by usage of tools like Shodan search engine.

    • Statistically, over 50 billion IoT connected devices expected by 2020 (Source: Cisco whitepaper).

SECURITY CHALLENGES IN IoT

  • Major challenges include:

    • Data privacy issues.

    • Safety implications for users.

    • Governance related to management of IoT devices.

    • Erosion of user trust due to multiple security breaches.

    • Many IoT devices are manufactured without adequate security measures due to cost cutting and market pressures.

  • Frequent Hacks: Devices often come with limited support for security updates, exacerbating vulnerabilities.

MARKET DYNAMICS: SECURITY VS. FEATURES

  • Conflict in Development:

    • Device manufacturers face resource limitations, expressed as a tug of war between:

    • Feature-rich products (consumer preference focuses on the latest technology).

    • Security measures (often not visible or marketable).

    • Price concerns: Demand for affordability leads to compromises in security features.

MATURATION OF IoT

  • Progression through Three Stages:

    1. Personification of Dumb Objects:

    • Devices become smarter; for example, smart car keys enable seamless entry.

    1. Partially Autonomous Sensor Networks:

    • Devices like Nest Thermostat adjust behaviors based on user routine.

    1. Autonomous Independent Devices:

    • Future potential where devices will operate independently based on environmental context (Example: Smart drug dispensers.

SHODAN: IoT SEARCH ENGINE

  • Description:

    • Shodan: The first search engine for IoT devices, useful for security professionals and researchers but accessible to anyone who subscribes.

    • Capabilities include identifying unsecured devices such as webcams.

    • Illustration of security vulnerabilities due to improperly secured devices.

CASE STUDIES OF IoT FAILURES

  • Consumer Electronics Show (CES):

    • Annual event showcasing new IoT devices, often highlighting both the innovation and security weaknesses in connected devices.

CBC MARKETPLACE INVESTIGATION

  • Showcase of real risks:

    • Ethical hackers infiltrated a family's automated home, demonstrating various vulnerabilities:

    • Cracked Wi-Fi password in 3 hours.

    • Same password used across multiple devices led to extensive access.

    • Methods included phishing emails which facilitated further device access (e.g., smart locks, lights).

    • Recommendations:

    • Employ vigilance regarding phishing attempts.

    • Invest in password managers.

    • Stability and availability of additional security features like 2-step authentication should be emphasized by manufacturers.

SMART CAMERAS AND HOMES

  • Potential Benefits:

    • Surveillance capabilities in smart devices, such as doorbell cameras that record intruders, enhancing home security.

CONCLUSION ON SMART HOMES

  • General sentiment: Smart home automation can save time, money, and energy but requires thoughtful configuration to maximize benefits. Discussion on whether average consumers can effectively assist these systems in reaching optimal performance.