Internet of Things is Relevant to Security

According to a researcher, enterprises can draw lessons from vulnerabilities in the first devices to come out of the internet of things.

Alex Chapman, senior consultant at Context Information Security said: "The internet of things is really made up embedded devices, and that is what makes the security issues relevant to the enterprise."

A research team at the UK based incident response and investigation firm, has been investigating the potential impact of IP connected devices on security.

Throughout the investigation, five commercially available IP connected products were used, and worryingly the team were able to compromise all five.

The suppliers of the devices used in the investigation have been notified, and are either releasing fixes or investigating issues.

The team found ways of exploiting weaknesses in each device, to gain access to wireless router passwords and inter-device communication encryption keys. This meant they were able to take control of the devices remotely and get enough information to compromise the network connected to the devices.

Chapman warned traditional penetration testing may miss these issues: "Only in-depth device reviews will identify security vulnerabilities in these devices and not just known vulnerabilities."

print this article

Return to internet news headlines
View Internet News Archive

Share with: