IoT and Cybersecurity by Sashank Gangadharabhotla https://padlet.com/saga8160/lx5fopcrpxibz47 en-us 2022-09-25 23:08:21 UTC 2022-09-26 00:24:42 UTC hello@padlet.com What is IoT? saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312646846 | Internet of Things, refers to the collective network of connected devices and the technology that facilitates communication between devices and the cloud, as well as between the devices themselves. Thanks to the advent of inexpensive computer chips and high bandwidth telecommunication, we now have billions of devices  connected to the internet. This means everyday devices like toothbrushes, vacuums, cars, and machines can use sensors to collect data and respond intelligently to users.  ]]> 2022-09-25 23:10:36 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312646846 Consumer IoT saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312647861 It is an interconnected system of physical and digital objects, personally used by a consumer. These interrelated devices are provided with unique identifiers to recognize and access various entities for many purposes. Consumer IoT covers all the user’s network around their personal and home devices.

]]> 2022-09-25 23:12:40 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312647861 Consumer IoT saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312648802 Commercial IoT refers to devices and systems for business and enterprise use. These can vary broadly by sector. IoT is increasingly leveraged in healthcare, event venues, office buildings, and more. Consumer IoT refers to B2C systems or products, such as wearables, personal medical alert devices, or mobile phones.]]> 2022-09-25 23:14:40 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312648802 Military Things (IoMT) saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312650024 The Internet of Things has strong military applications, connecting ships, planes, tanks, drones, soldiers, and operating bases in a cohesive network that increases situational awareness, risk assessment, and response time. IoMT involves the full realization of pervasive sensing, pervasive computing, and pervasive communication, leading to an unprecedented scale of information produced by the networked sensors and computing units

]]> 2022-09-25 23:17:16 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312650024 Industrial internet of things (IIoT) saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312650717 Industrial internet of things (IIoT) is the use of smart sensors and actuators to enhance manufacturing and industrial processes. Also known as the industrial internet or Industry 4.0, IIoT uses the power of smart machines and real-time analytics to take advantage of the data that "dumb machines" have produced in industrial settings for years. The driving philosophy behind IIoT is that smart machines are not only better than humans at capturing and analyzing data in real time, but they're also better at communicating important information that can be used to drive business decisions faster and more accurately.]]> 2022-09-25 23:18:55 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312650717 Infrastructure IoT saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312651624 Primarily used for connectivity in smart cities.  Eg: infrastructure sensors and management systems. Smart infrastructure, enabled by technologies like IoT, offer numerous of advantages bringing serious cost savings and efficiencies. These kinds of data-driven environments, fuelled by connected devices and network connectivity, become a new attack surface for cyber threats.]]> 2022-09-25 23:20:53 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312651624 Cybersecurity & IoT saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312655390 Cybercriminals love IoT and OT devices, too. Maybe even more than we do. The major issue with IoT and ICS devices is that they make it possible for an individual or company to conduct new and different cyberattacks. Hackers will find malicious ways to interfere with the operations of a company, city or even country. Cybersecurity professionals often refer to this fact by saying that IoT increases the attack surface that hackers can exploit.]]> 2022-09-25 23:27:45 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312655390 Server Disruption saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312657485
Manipulating an IoT device or devices to make an essential service (e.g., a power generating dam, the water system, a database) completely unavailable.]]> 2022-09-25 23:32:02 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312657485 Data Theft saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312657976 Gaining improper access to personally identifiable information (PII), such as names, user accounts, social security, national health ID numbers, telephone numbers and residence addresses. Increasingly, organizations and individuals alike are concerned about the use – and misuse – of personal information.]]> 2022-09-25 23:32:54 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312657976 Data Manipulation saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312658943 Where the attacker can make arbitrary changes to the settings of a device, which can cause loss of life, loss of service, damage to the device itself or damage to other devices.]]> 2022-09-25 23:34:40 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312658943 Use as Botnets saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312660665 IoT security is one of the major cybersecurity challenges today. Several challenges exist. IoT devices can also provide a rich breeding ground for attackers who want to conduct  DDoS attacks, such as through botnets. A botnet is a large collection of devices that has fallen under the control of a centralized attacker, or group of attackers. A botnet can include tens of thousands, or even millions of devices. Attackers can use these botnets to wage DDoS attacks or introduce malware to new victims. Many of the security breaches that find their way into the news are the results of botnets.

]]> 2022-09-25 23:37:46 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312660665 saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312667425 The evolution of technology has brought us a plethora of smart devices, which include, but are not limited to, smart appliances, smart home systems, etc. These devices use similar computing power as other IoT-connected devices and can be used for various activities. A compromised device can be turned into an email server. According to a report by the Internet security firm Proofpoint, a smart refrigerator was used to send thousands of spam emails without its owners having any clue. Most of these smart devices are capable of being turned into email servers to send mass email spam.]]> 2022-09-25 23:48:19 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312667425 Default Passwords saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312668101 Weak credentials leave almost all the IoT-connected devices prone to brute-forcing and password hacking. Companies using unsafe credentials on their IoT devices put their customers and their business at risk of being susceptible to direct attacks and being infected through a brute-force attempt.]]> 2022-09-25 23:49:21 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312668101 Ransomware saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312669295 Ransomware has been used on PC and corporate networks for a long time. Criminals encrypt your entire system and threaten to remove all your data unless you pay the “Ransom,” thus the name. Researchers have already found a way to install ransomware on smart thermostats, which is alarming as criminals can raise or lower the temperature until the ransom has been paid. Attackers gaining control of home security systems or smart appliances are even more terrifying. ]]> 2022-09-25 23:51:11 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312669295 IoT & AI saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312670893 A.I. and automation are just code; if somebody gets access to this code, they can control the automation and carry out whatever they want. So, we have to ensure that our tools stay safe against such attacks and threats.]]> 2022-09-25 23:53:19 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312670893 Machine Phishing saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312672368 Machine phishing will become a significant concern in the coming years. Hackers will infiltrate IoT devices and networks to send fake signals that will cause the owners to take actions that could damage the operational network. Attackers, for example, could have a manufacturing plant report it’s working on half capacity (while it’s working on 100%), and the plant operator will try to increase further the load, which can be devastating for the plant.]]> 2022-09-25 23:55:25 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312672368 Vulnerabilities saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312675048 Inadequate default settings: IoT devices that contain default settings may include default passwords and other settings that cannot be changed.

Non-existent upgrade paths: Sometimes, it is impossible to update the firmware or other information itself, making the device permanently toxic to healthy IoT networks.

The use of inappropriate technology: Many times, organizations will place powerful software onto an IoT device, even though such computing power is not necessary. For example, IoT manufacturers have placed complete Linux operating system on an IoT device, when only a portion was necessary. As a result, once the IoT device was compromised, it became a powerful weapon in the hands of an attacker.

Limited computational abilities and hardware limitations. These devices have specific functions that warrant only limited computational abilities, leaving little room for robust security mechanisms and data protection.

Heterogeneous transmission technology. Devices often use a variety of transmission technology. This can make it difficult to establish standard protection methods and protocols.

Components of the device are vulnerable. Vulnerable basic components affect millions of deployed smart devices.

Users lacking security awareness. Lack of user security awareness could expose smart devices to vulnerabilities and attack openings.

]]> 2022-09-25 23:58:47 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312675048 IoT cybersecurity attacks saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312677235 Articles on some of the recent cybersecurity attacks & IoT]]> 2022-09-26 00:02:14 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312677235 Mirai botnet (Dyn attack) saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312678720
In this attack Mirai temporarily crippled several high-profile services such as OVH, Dyn, and Krebs on Security via massive distributed Denial of service attacks (DDoS). OVH reported that these attacks exceeded 1 Tbps—the largest on public record.

What’s remarkable about these record-breaking attacks is they were carried out via small, innocuous Internet-of-Things (IoT) devices like home routers, air-quality monitors, and personal surveillance cameras. At its peak, Mirai infected over 600,000 vulnerable IoT devices.

]]> 2022-09-26 00:05:03 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312678720 Stuxnet saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312684158 In June 2010, a client contacted their malware detection firm to find out why their machines were constantly rebooting. This company, headquartered in Belarus, identified the root cause as a piece of malware that masqueraded behind what appeared to be a valid digital certificate from a trusted vendor. The worm had already wrought havoc within Iranian nuclear facilities, slowly (even insidiously) sabotaging centrifuges and ultimately the entire Natanz nuclear plant.]]> 2022-09-26 00:11:58 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312684158 Brickerbot saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312686683 While its attack vector is reportedly similar to Mirai (detected by Trend Micro as ELF_MIRAI family), which turns infected devices into bots, BrickerBot “bricks” the device it infects, rendering the device permanently inoperable. BrickerBot is a real-world instance of phlashing.(Permanent DoS). In an attack in 2017 it has killed over 2 million devices.]]> 2022-09-26 00:14:54 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312686683 St. Jude Hackable Pediatric Pacemakers saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312688464 In 2017, attackers demonstrated the ability to manipulate the firmware of over 465,000 implanted pacemakers, making it possible to drain the pacemaker battery, steal sensitive data or even change lifesaving settings on the pacemaker itself.]]> 2022-09-26 00:16:55 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312688464 Western Digital’s My Book Live attack saga8160 https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312693310  The hackers discovered  2 Vulnerabilities, the first vulnerability was exploited to install a malicious binary on the device, and the second vulnerability was later exploited to reset the device. On some devices, the attackers installed a trojan  for My Book Live and Live Duo. People without backup lost nearly 2TB worth of data in this IoT.]]> 2022-09-26 00:21:39 UTC https://padlet.com/saga8160/lx5fopcrpxibz47/wish/2312693310