upamfva
Anmeldungsdatum: 12.04.2022
Beiträge: 940
|
 Verfasst am: 23. Okt 2022 04:17 Titel: Smart Home Security: Security and Vulnerabilities |
 |
|
Smart Home Security: Security and Vulnerabilities
The number of smart homes globally is expected to increase to 478.2 million by next year[1]. One of the biggest attractions of smart home technology is using internet-connected devices to secure personal dwellings remotely. Despite the ease smart home security devices provide for protecting homes against theft, damage, or accident, smart home devices also create the risk of lowering personal data security. To get more news about safe lock systems, you can visit securamsys.com official website.
A 2021 research project revealed that typical smart homes are vulnerable to a high number of data attacks.[2] Reported instances of smart home attacks have included hackers remotely controlling smart lights and smart TVs [3], unlocking IoT-enabled doors, and remotely turning on and streaming video from smart cameras.[4] In one instance, a Milwaukee home only realized they had been attacked when they woke up after their thermostat had been programmed to over 30 degrees Celsius[5].
Two major flaws in connected homes make them susceptible to these attacks; vulnerable local networks and weak IoT devices.
Vulnerable local networks
Wi-Fi can be vulnerable to attack due to default or weak SSIDs or passwords and vulnerable encryption protocols. Default credentials let the intruder access the router with no effort. Strong Wi-Fi passwords force hackers to look for more difficult gateways to infiltrate the network.
Sniffing and encryption cracking are the most common ways hackers intrude into the network. In sniffing, hackers hijack any packet of data transmitted between a device and a router, transfer it onto their device, and use brute force to decipher it. It usually only takes minutes.
Most Wi-Fi routers use WEP (Wired Equivalent Privacy), WPA (Wi-Fi Protected Access), or WPA2 security protocol. WEP is an RC4 stream cipher. The weakness of the WEP is the small size of the initialization vector (24-bit IV), which causes it to be reused. This repetition makes it vulnerable.
More secure options are WPA and WPA2. But researchers identified a severe flaw, KRACK, short for Key Reinstallation Attack in the WPA. A man-in-the-middle attack can exploit it to steal sensitive data sent via the WPA encrypted Wi-Fi connection. The attacker could eavesdrop on traffic and obtain passwords, banking credentials, and credit card information.
Weak IoT devices
Researchers tested a total of 16 commonly used smart home devices from a range of brands and found 54 vulnerabilities that exposed users to attack by hackers. The potential of the attacks ranges from deactivating security systems to stealing personal data.[6] An estimated 80% of IoT devices are vulnerable to a wide range of attacks.[7]
Smart home devices are vulnerable to attacks because they are special-purpose devices. The IoT vendors fail to provide the required special-purpose security solutions. Further, smart home devices often run small operating systems such as INTEGRITY, Contiki, FreeRTOS, and VxWorks, whose security solutions are not as robust as those of Windows or Linux-based systems. Most commonly available devices, once deployed, cannot be upgraded to update the security capability against the evolving cyber-attacks.
Conclusion
Devices connected to the internet are inherently vulnerable to attack. As smart home devices increase in functionality and are more widely installed in homes, understanding personal data security risks and how to mitigate them is critical. IoT engineers must also take responsibility for ensuring smart homes of the future have security built-in as a core feature and not an add-on. |
|
Registrieren
Login
FAQ
Suchen
