The challenge around the Internet of Things (IoT) is less around smart devices in the home, but more about devices in the workplace and in the data centre.
Peter Wood, ISACA member and CEO of penetration testers First Base Technologies said that as devices are often built small and cheap, they have little in the way of authentication and encryption built-in. It works in the background, but an educated attacker could leverage devices to get access to the rest of the network.
“As we get smart buildings with connected heating, ventilation and air conditioning it is not unfeasible for an attacker to switch off the air conditioning in the data centre, or to turn up the heating so everyone has to leave,” he said.
“The challenge is all of these devices can talk to each other. A smart building will have servers to address all of the endpoints, but it is not difficult for an attacker to impersonate that server or take the devices over completely. In the Far East you will see smart cities sooner rather than later.” … (Read more)