黑客大会引发的物联网安全风险防护之道

上网时间: 2014年09月02日? 作者:John H. Sawyer, Dark Reading? 我来评论 【字号: ? ?小】

关键字:黑客大会? 物联网安全? 家电连网?

Researchers at Black Hat USA demonstrated how they were able to compromise a popular smart thermostat.

Consumers are being bombarded by the Internet of Things (IoT) -- everyday embedded devices and appliances in your home that connect to the Internet. Those same devices are quickly becoming the targets of security researchers looking to show the dangers of such connectivity and the ill effects on owners' privacy. Last week at Black Hat USA 2014 in Las Vegas, the Nest Learning Thermostat was the latest IoT device to come under fire by University of Central Florida researchers Grant Hernandez and Yier Jin, and independent researcher Daniel Buentello.

The three researchers demonstrated the ease with which a Nest thermostat can be compromised if an attacker has physical access to the device. In less than 15 seconds, an attacker can remove the Nest from its mount, plug in a micro USB cable, and backdoor the device without the owner knowing anything has changed. The compromised Nest can then be used to spy on its owner, attack other devices on the network, steal wireless network credentials, and more.

What does this hack mean to current and future Nest owners? Not much at this point. As we saw with the recent DropCam hack, the attack requires physical access and if a bad guy breaks into your house, it's typically for something much more serious than backdooring your thermostat. However, the researchers laid out several scenarios where Nests could be purchased, backdoored, and returned to the store, or sold on Craigslist in order target specific communities.

The biggest concern here is that the owner would never know if his or her device had been hacked. Antivirus is not available to run on it and look for malicious code. Essentially, the only way to know without dumping memory and analyzing the firmware from the device would be to monitor network traffic and hope to see anomalous behavior -- something that's unlikely to happen in the majority of home networks.

Meanwhile, the researchers gave Nest props for a well-designed product. To date, efforts to exploit the device are limited to physically plugging in USB cable, but the researchers are busy...


[ 投票数:? ] 收藏 ??? 打印版 ??? 推荐给同仁 ??? 发送查询 ??? ?订阅杂志

评论
免费订阅资讯速递
信息速递-请选择您感兴趣的技术领域:
  • 安防监控
  • 便携设备
  • 消费电子
  • 通信与网络
  • 分销与服务
  • 制造与测试
  • 工业与医疗
  • 汽车电子
  • 计算机与OA
  • 电源管理
  • 无源器件与模组
  • 新能源
  • 供应链管理
论坛速递
相关信息
  • 什么是黑客大会?
  • 国际电子商情提供相关黑客大会技术文章及相关黑客大会新闻趋势,及更新最新相关黑客大会电子产品技术

  • 什么是家电连网?
  • 国际电子商情提供相关家电连网技术文章及相关家电连网新闻趋势,及更新最新相关家电连网电子产品技术

  • 什么是物联网安全?
  • 国际电子商情提供相关物联网安全技术文章及相关物联网安全新闻趋势,及更新最新相关物联网安全电子产品技术

?新浪微博推荐
Global Sources


编辑推荐
?大家正在说


打开微信“扫一扫”,打开网页后点击屏幕右上角分享按钮

1.扫描左侧二维码
2.点击右上角的分享按钮
3.选择分享给朋友
电子元器件数据手册下载
数据手册搜索

Datasheets China.com

《汽车电子特刊》

汽车电子系统在现代的汽车中占有的比重越来越高,对产品设计的工程师来说,产品的设计和验证面临着很多的挑战。本期《汽车电子特刊》将会向您呈现ADI技术对于汽车电子行业的应用等,还有IIC汽车电子论坛的精彩回顾哦!

扫一扫,关注最新资讯

esmc