Securing the things you connect to the internet

AS HOME AUTOMATION ENTHUSIASTS RUSH to connect digital devices — a video doorbell, a wireless home security kit, a set of Wi-Fi lightbulbs — they are helping build a new ecosystem of convenience, safety and efficiency. That ecosystem is the Internet of Things (IoT), the burgeoning global network of connected “smart” devices. Within five years, the IoT may comprise more than 41 billion internet-connected objects.¹

For consumers, these devices already have elevated household conveniences and services to futuristic heights. Think sensor-based home-monitoring and communications systems, energy-efficient automated appliances, always-on virtual assistants and self-driving automobiles.

Each device connected to a network, however, is also an endpoint that criminals can exploit. And research shows they are doing just that: One study found that, in 2019, the number of businesses that experienced a data breach caused by an unsecured IoT device had doubled since 2017 to 29%.²

But the problems are not just a function of cyber criminals and insecure devices. Many consumers don’t prioritize device security due to a lack of understanding of how risky an insecure device can truly be, and unwittingly open themselves to compromise.

For instance, smartphone users often grant broad access to their device’s location services, camera, microphone, contacts and calendar — without knowing whether these permissions are legitimate and how the data they generate will be secured. By providing this access, users may unintentionally open access to additional data on the device, including sensitive information like system credentials, credit card numbers and contact information for colleagues, clients, friends and family.

Simple ways to protect your home and its devices

Smart security begins with an assessment of the devices that constitute your personal or family digital footprint. It’s a good idea to make a list of IoT devices in use, how they connect to the internet and what data they generate and share. All this will help you determine potential cyber security vulnerabilities.

Some devices, like Wi-Fi videocams and car navigation systems, have been subject to highly publicized hacks. But the full spectrum of potential vulnerabilities doesn’t always make the news.

Smart devices may collect data about your personal life, dwelling, habits or financial accounts, helping refine their performance and making them easier to use. But if the devices remain in public access mode, all this information may end up on the internet, where advertisers can harvest it to expand your consumer profile. This often results in an increase in unwanted pop-up ads as you browse the internet.

Cyber criminals also use personal information to launch social engineering campaigns, in which they use information gathered about individuals to craft communications that look legitimate but are actually scams.

The risks associated with revealing personal information online demonstrate why it’s important to review any device’s security capabilities. Find out what data is collected, how it is protected and what sharing lists are selected. Explore the product’s security and privacy settings to find out what data-generating features can — and should — be switched off. Also review the IoT device’s privacy settings to make sure you are not unintentionally sending device information to unintended locations, such as your social media accounts.

If you’re purchasing more robust equipment like wireless routers and tablets, find out if the latest security features are included. It is also important to know whether or not those standards can be updated as the technology evolves. The best security can provide powerful encryption and protection against attacks designed to compromise user credentials.

9 best practices to help secure your IoT devices

These tips may help you safeguard your IoT devices and data, while also limiting your digital footprint:

1. Purchase IoT devices that offer ongoing security patches and long-term manufacturer support.

2. Create and maintain an inventory of home IoT devices and applications.

3. Review and manage the data that will be shared by each active IoT device.

4. Consider maintaining IoT devices on a separate network from your computers, tablets and phones.

5. Regularly update all device software. If available, turn on automatic updates and notifications for configuration changes.

6. Use your router’s network configuration tool to see what devices are attached and disconnect unknown or suspicious devices or connections.

7. Create strong passwords for devices and customize user and object names. Do not use default passwords.

8. Create a Wi-Fi guest network.

9. Enable encryption on your router.