Consumer IoT vulnerabilities: Thaum interconnectivity txhais tau tias muaj kev pheej hmoo sib koom

• Author:
• Tus sau lub npe

  Quantumrun Foresight
• Lub Xya hli ntuj 5, 2023

Kev nkag siab tseem ceeb

Thaum Internet ntawm Tej Yam (IoT) kev lag luam txuas ntxiv tsim kho tshiab, nws tab tom cuam tshuam nrog cov teeb meem tseem ceeb hauv cybersecurity vim cov neeg siv khoom tsis quav ntsej hloov pauv tus password li qub thiab cov tuam txhab qhia txog cov yam ntxwv tsis raug. Cov kev cov nyom no yog sib xyaw ua ke los ntawm qhov tsis muaj kev tshaj tawm rau pej xeem qhov tsis zoo thiab cov tuam txhab tsis muaj phiaj xwm meej rau kev tuav lawv. Txawm hais tias muaj qee qhov kev siv cov ntawv cog lus tsis pub tshaj tawm, cov phiaj xwm kab laum, thiab Coordinated Vulnerability Disclosure (CVD) raws li cov tswv yim tswj kev pheej hmoo, kev lag luam thoob plaws kev saws me nyuam ntawm cov cai tsis pub tshaj tawm tseem tsawg. 

Consumer IoT vulnerabilities ntsiab lus

Txawm hais tias muaj qhov zoo rau cov khoom siv xws li cov pab cuam hauv tsev thiab lub koob yees duab kev ruaj ntseg ntse, IoT kev lag luam tseem muaj txoj hauv kev mus ntev mus txog cybersecurity. Txawm hais tias kev nce qib hauv kev tsim thiab kev tsim kho vaj tse, cov cuab yeej no tseem muaj kev cuam tshuam rau cyberattacks. Qhov teeb meem no tau ntxiv los ntawm qhov tseeb tias ntau tus neeg siv khoom tsis paub qhov kev coj ua zoo tshaj plaws rau kev txhim kho lawv cov cuab yeej ua haujlwm. Raws li IoT Magazine, 15 feem pua ​​​​ntawm tag nrho IoT cov tswv cuab yeej tsis hloov cov passwords tsis raug, txhais tau hais tias hackers tuaj yeem nkag mus rau 10 feem pua ​​​​ntawm tag nrho cov khoom siv cuam tshuam nrog tsuas yog tsib tus neeg siv lub npe thiab tus password ua ke.

Lwm qhov teeb meem kev nyab xeeb yog rooted nyob rau hauv yuav ua li cas cov cuab yeej no raug teeb tsa lossis tswj xyuas. Yog tias lub tshuab lossis software raug tso tseg tsis muaj kev nyab xeeb - piv txwv li, nws tsis tuaj yeem kho nrog kev ruaj ntseg tshiab lossis cov neeg siv kawg tsis tuaj yeem hloov tus password qub - nws tuaj yeem yooj yim nthuav tawm cov neeg siv khoom hauv tsev network mus rau kev tawm tsam cyberattack. Lwm qhov kev sib tw yog thaum tus tsim tawm kaw, thiab tsis muaj leej twg siv lawv cov software lossis platforms. 

Internet of Things tawm tsam txawv, nyob ntawm lub tshuab lossis cov txheej txheem. Piv txwv li, soft- lossis firmware vulnerabilities tuaj yeem tso cai rau cov neeg nyiag nkas hla lub tsheb hluav taws xob (EVs) 'kev ruaj ntseg tshuab. Lub caij no, qee lub tuam txhab IoT feem ntau ntxiv cov yam ntxwv tshiab rau lawv cov khoom siv lossis kev sib cuam tshuam yam tsis tau kuaj xyuas lawv. Piv txwv li, ib yam dab tsi zoo li yooj yim, zoo li lub charger EV, tuaj yeem raug nyiag mus rau qis- lossis overcharge, ua rau lub cev puas tsuaj.

Kev cuam tshuam

Raws li kev tshawb fawb xyoo 2020 los ntawm IoT Kev Ruaj Ntseg Foundation, ib qho ntawm cov chaw uas IoT cov tuam txhab ua tsis txaus yog muab kev tshaj tawm rau pej xeem qhov tsis zoo. Ib txoj hauv kev tseem ceeb los txhim kho kev ruaj ntseg ntawm cov cuab yeej txuas nrog IoT yog ua kom yooj yim rau cov kws tshawb fawb los qhia txog qhov tsis zoo uas lawv pom ncaj qha rau cov tuam txhab. Nyob rau tib lub sijhawm, cov tuam txhab yuav tsum sib txuas lus lawv yuav teb li cas thaum cov kev txhawj xeeb no tau raug txheeb xyuas thiab lub sijhawm twg tuaj yeem xav tau rau software thaj ua rau thaj lossis lwm yam kho.

Txhawm rau tawm tsam cybersecurity kev hem thawj tshwm sim, qee lub lag luam cia siab rau cov ntawv cog lus tsis qhia tawm. Lwm tus ntxias cov kws tshawb fawb nrog cov kab laum zoo (piv txwv li, them nyiaj rau qhov pom qhov tsis zoo). Kuj tseem muaj cov kev pabcuam tshwj xeeb uas cov tuam txhab tuaj yeem khaws tau los tswj cov kev tshaj tawm thiab cov kev pabcuam kab laum. Lwm cov txheej txheem los tswj cov kev pheej hmoo yog Coordinated Vulnerability Disclosure (CVD), qhov chaw tsim khoom thiab cov kws tshawb fawb ua haujlwm ua ke los txhim kho qhov teeb meem thiab tom qab ntawd tso tawm ob qho kev txhim kho thiab qhov tsis zoo ib txhij los txo cov kev puas tsuaj rau cov neeg siv. 

Hmoov tsis zoo, qee lub tuam txhab tsis muaj phiaj xwm los tuav kev tshaj tawm. Thaum tus naj npawb ntawm cov tuam txhab uas muaj qhov tsis txaus ntseeg tshaj tawm txoj cai tau nce mus rau 13.3 feem pua ​​​​hauv 2019 los ntawm 9.7 feem pua ​​​​hauv 2018, kev lag luam kev saws me nyuam feem ntau tseem qis (2022). Hmoov zoo, muaj ntau txoj cai tswj hwm kev tshaj tawm txoj cai. Xyoo 2020, Tsoomfwv Meskas tau dhau Internet ntawm Tej Yam Cybersecurity Improvement Act, xav kom cov neeg muab kev pabcuam IoT muaj cov cai tsis pub tshaj tawm ua ntej muag rau tsoomfwv cov koomhaum. 

Kev cuam tshuam ntawm cov neeg siv khoom IoT qhov tsis zoo

Kev cuam tshuam dav dav ntawm cov neeg siv khoom IoT qhov tsis zoo yuav suav nrog: 

• Tsoomfwv tswj hwm IoT cov tuam txhab kom muaj cov cai tshaj tawm thiab kev sim nruj thiab pob tshab.
• Ntau lub tuam txhab thev naus laus zis tsim cov koom haum kom pom zoo rau cov qauv kev sib koom ua ke thiab tsim kev sib koom ua ke cybersecurity raws tu qauv uas tuaj yeem ua rau cov khoom siv sib cuam tshuam thiab muaj kev nyab xeeb ntxiv.
• Cov xov tooj smartphones thiab lwm yam khoom siv ntawm tus kheej siv los ua kom paub tseeb ntau qhov tseeb thiab kev txheeb xyuas biometric txhawm rau txhim kho cybersecurity.
• Kev nqis peev ntau ntxiv hauv hluav taws xob thiab kev tswj hwm lub tsheb cybersecurity los tiv thaiv kev nyiag khoom digital.
• Ntau eavesdropping tawm tsam, qhov twg cov neeg ua phem coj mus rau unencrypted kev sib txuas lus raws; Qhov kev ua txhaum cai no tuaj yeem ua rau cov neeg siv khoom nyiam ntau dua cov ntawv xa xov encrypted (EMAs).
• Ntau qhov xwm txheej ntawm social engineering tawm tsam uas ua kom zoo dua ntawm kev tiv thaiv tus password tsis muaj zog, tshwj xeeb tshaj yog cov neeg siv cov khoom qub.

Cov lus nug los tawm tswv yim

• Koj ua li cas kom ntseeg tau tias koj cov khoom siv IoT muaj kev tiv thaiv zoo?
• Lwm txoj hauv kev twg cov neeg siv khoom tuaj yeem txhim kho kev ruaj ntseg ntawm lawv cov khoom siv IoT?