IoT Devices Are At Risk From Insecure Apps

Today’s average consumer lives in a connected world. In 2018, 23.14 billion devices were connected to the internet. Many of them already affect daily life without people even noticing. Front doors, light fittings and refrigerators are all becoming smarter. It was estimated that the average American would own 13 internet-connected devices by 2021, and the UK was not expected to be far behind. Technology now sits at the centre of daily life, so concern about IoT devices at risk is growing quickly.

The Growth of Connected Devices

New technology brings obvious benefits. However, it also brings new risks. The Internet of Things is still developing, which means companies building smart devices are often learning as they go. As a result, flaws and vulnerabilities in software are still emerging.

Why IoT Devices Are at Risk

Research from Brazil’s Federal University of Pernambuco and the University of Michigan suggested that the Internet of Things lacks the level of security needed to protect the billions of people who use smart devices each day. According to that research, as many as 50% of devices could be at risk from insecure apps.

This matters because every connected device stores or exchanges information through the networks and devices around it. In other words, any connection to your internet can become a route into your data. Through an insecure app, attackers could access usernames, passwords and even other devices connected to the same network.

Examples of Real-World Security Failures

Examples of insecure IoT devices leading to serious breaches continue to attract attention. In America, attackers reportedly accessed and removed data belonging to thousands of gamblers through a smart thermostat connected to a fish tank in a lobby. In another case, a hospital was sanctioned after smart devices used to monitor heart conditions were left open and exposed personal patient data.

What the Study Found

The study concluded that 50% of the tested devices were vulnerable to attack. The researchers tested 96 of the most popular Wi-Fi and Bluetooth-enabled devices on Amazon. Of those devices, 31% were completely unencrypted. As a result, they had no meaningful protection at all.

A further 19% of the devices used encryption that did not provide enough protection. Consequently, the researcher tests were still able to access them easily.

Why App Security Matters

Security on an internet-enabled device depends heavily on the app developer. Developers need to secure the app itself, the connections it makes during setup and use, and the data it stores in order to function properly.

Once the device reaches the home, updating and protecting it against new threats becomes harder. Moreover, multiple connections and multiple users can create even more opportunities for a breach. Security for smart devices therefore has to cover more areas and requires a wider mix of specialist knowledge than many traditional devices.

Why MobiCode Takes Mobile Security Seriously

Mobile phone security sits at the heart of what MobiCode does. We have created software designed to make the connected world safer by reducing the risk of data breaches and protecting device users from threats like these. The issues linked to the Internet of Things need the same level of care and attention if businesses want to prevent more serious breaches in the future.