affiliate sing up form

Personal Information
Additional Information

Ali DP plugin

AliDropship is the best solution for drop shipping

forex

AliDropship is the best solution for drop shipping

Search This Blog

AliDropship is the best solution for drop shipping

DIGITAL ADVERTISING & SERVICES

Choose your plans

Emerald Palace Kempinski Dubai

Car Hire

amazon

Subscribe for New Post Notifications

Newsletter

Insecure apps put half of IoT devices at risk

via TechRadar - All the latest technology news http://bit.ly/2SfBsHv As the Internet of Things ( IoT ) has grown in popularity with consume...


via TechRadar - All the latest technology news http://bit.ly/2SfBsHv

As the Internet of Things (IoT) has grown in popularity with consumers adding more devices to build out their smart homes, new research has revealed that vulnerable apps are putting users at risk.

To better gauge the security of IoT devices, researchers from Brazil's Federal University of Pernambuco and the University of Michigan examined 32 apps used to configure and control the 96 best selling Wi-Fi and Bluetooth-enabled devices from Amazon.

IoT app developers need to secure the apps themselves, their connection to cloud proxies which are used during their initial setup and the wireless connection and authentication to and from each IoT device. For this reason, the study's researchers started by inferring potential weaknesses using heuristic analysis of each app.

The researchers found that 31 percent of the apps (corresponding to 37 devices out of 96) had no encryption at all while another 19 percent had hard-coded encryption keys that could be reverse engineered by potential attackers.

Insecure apps

The researchers even developed proof-of-concept attacks for TP-Link's Kasa app, LIFX's smart light app, Belkin's WeMo for IoT and Broadlink's e-Control app to back up their findings further.

Three of the four apps used no encryption whatsoever and three communicated using broadcast messages that could provide an attacker with a way of monitoring the app-device communication to find vulnerabilites.

The researchers explained their findings in a report, saying:

“Based on our in-depth analysis of 4 of the apps, we found that leveraging these weaknesses to create actual exploits is not challenging. A remote attacker simply has to find a way of getting the exploit either on the user’s smartphone in the form of an unprivileged app or a script on the local network.”

While many IoT apps have a ways to go when it comes to securing their devices, the researchers highlighted Google's Nest thermostat app as an example of how IoT security should be done with its entire configuration process secured with SSL/TLS to the cloud or via Wi-Fi with WPA.

Via Naked Security

COMMENTS

EDUCATION$type=complex$count=4

Name

1988 Atlantic hurricane season,1,2017–18 Bergen County eruv controversy,1,All things,1,Amazon,89,Amazon.com: Best Sellers,14,Amazon.com: Best Sellers in Beauty & Personal Care,14,Amazon.com: Best Sellers in Clothing,61,Andrea Doria-class battleship,1,apple,51,Apple Newsroom,51,article of the day,198,Automated analytical tool for your forex trading account,48,Banded stilt,1,Battle of Verrières Ridge,1,bbc news,5128,BBC News - World,5128,beauty,14,Beta-Hydroxy beta-methylbutyric acid,1,Britomart Redeems Faire Amoret,1,Buckton Castle,1,BUISNESS,18,business,653,C. R. M. F. Cruttwell,1,car insurance,1,Cloud (video game),1,Cooperative pulling paradigm,1,DailyFX - Feeds all,50,DailyFX - Forex Market News,22,digital marketing,2,Dilophosaurus,1,Discovery Education,151,Education,359,education Learning In Wonderland,20,Education Week: English Language Learners,17,Emily Davison,1,Equestrian statue of Edward Horner,1,ESPN,73,Euryoryzomys emmonsae,1,Fantasy Book,1,fashion,30,Ford Piquette Avenue Plant,1,forex,2,Forex Calendar,48,Forex Market,22,Forex news,5,FOX NEWS,246,FX Analyst Articles,50,Gadgets360 RSS Feeds : RSS Feed - NDTV Gadgets360.com,4411,Grand Duchess Anastasia Nikolaevna of Russia,1,Happy Chandler,1,Harry R. Truman,1,Hilary of Chichester,1,Hogwarts Express (Universal Orlando Resort),1,Hurricane Daniel (2006),1,Ice drilling,1,IFTTT,508,internet marketing,1,Interstate 80 in Iowa,1,King Island emu,1,latest news,7786,Law,1,law.,1,M-35 (Michigan highway),1,market,623,Megalodon,1,Meteorological history of Hurricane Gordon,1,Moneycontrol Technology News,491,Monroe Doctrine Centennial half dollar,1,Monroe Edwards,1,More Hall Annex,1,Nat Geo Education Blog,67,National Geographic Education Blog,99,Nelson Mandela,1,Neville Chamberlain,1,news,5804,Nigel Williams (conservator),1,Nike-X,1,Norma (constellation),1,Norodom Ranariddh,1,Notizie Forex,5,Ontario Highway 61,1,Percy Grainger,1,Peter Jeffrey (RAAF officer),1,Pioneer Helmet,1,Ramesses VI,1,reviews TechRadar - Technology Reviews,2,Russulaceae,1,Science-Fiction Plus,1,SEO,1,Shoes & Jewelry,61,Shorwell helmet,1,Simone Russell,1,Small-toothed sportive lemur,1,Snoring rail,1,Social forex community,48,Social media marketing,1,Somerset Levels,1,South Carolina-class battleship,1,SPORT,61,Stefan Lochner,1,stock,1,Suillus spraguei,1,Teach123,5,tech,3834,tech reviews,3465,TECH TechRadar - All the latest technology news,23,Technical Analysis DailyFX - Technical Analysis,11,technology,198,techology,379,TechRadar - All the latest technology news,6015,TechRadar - Technology Reviews,1085,the new york times,2658,The Portage to San Cristobal of A.H.,1,vr,1,Wally Hammond,1,Waterloo Medal (Pistrucci),1,weight loss,2,Westminster Assembly,1,wikipedia,198,X-10 Graphite Reactor,1,
ltr
item
TECHNICAL MUKHTAR: Insecure apps put half of IoT devices at risk
Insecure apps put half of IoT devices at risk
https://ifttt.com/images/no_image_card.png
TECHNICAL MUKHTAR
https://technicalmukhtar.blogspot.com/2019/02/insecure-apps-put-half-of-iot-devices.html
https://technicalmukhtar.blogspot.com/
https://technicalmukhtar.blogspot.com/
https://technicalmukhtar.blogspot.com/2019/02/insecure-apps-put-half-of-iot-devices.html
true
709309995759877420
UTF-8
Loaded All Posts Not found any posts VIEW ALL Readmore Reply Cancel reply Delete By Home PAGES POSTS View All RECOMMENDED FOR YOU LABEL ARCHIVE SEARCH ALL POSTS Not found any post match with your request Back Home Sunday Monday Tuesday Wednesday Thursday Friday Saturday Sun Mon Tue Wed Thu Fri Sat January February March April May June July August September October November December Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec just now 1 minute ago $$1$$ minutes ago 1 hour ago $$1$$ hours ago Yesterday $$1$$ days ago $$1$$ weeks ago more than 5 weeks ago Followers Follow THIS CONTENT IS PREMIUM Please share to unlock Copy All Code Select All Code All codes were copied to your clipboard Can not copy the codes / texts, please press [CTRL]+[C] (or CMD+C with Mac) to copy