IoT — Time for Action is Now!
Chris Veltsos
Cyber Risk Advisor | CISSP, CISA, QTE | Educator, Mentor, Author, Speaker | Cybersecurity & Systemic Risk
Based on a prompt about IoT security by Justin Sherman, I composed a short reply for him to use, which I've also copied below:
In many ways, the current state of IoT security reminds me of the sad state of affairs with automobile safety and build quality. For decades, people bought poorly engineered and poorly tested vehicles and drove them around our neighborhoods.
While these vehicles **appeared** to be safe -- both for their occupants and for the surrounding public -- that was far from the case. Instead thousands of people lost their lives due to unsafe vehicles and unsafe driving (due to drivers incorrectly believing the vehicles to be safe to operate in those conditions).
Fast forward to the dawn of 2018 and we're exactly in the same situation. Poorly engineered and poorly tested IoT devices -- Internet vehicles of sorts -- are putting our health and our lives at risk.
We need a concerted effort -- no, it's not yet a panic or pandemic, but definitely a moment for the rude wake up call -- for government, regulators, educators to bring awareness and improvement actions -- perhaps even enforcement actions -- to improve the situation, FAST! Consumer groups, legal groups, safety groups, all need to come together to push and to pull us towards a better IoT environment.
Cybersecurity and Data Privacy | Cybersecurity Content Creation and Strategy
6 年I like the analogy Christophe Veltsos aka Dr. InfoSec.
Information and Cyber Security Advisor and Enterprise IT Director
6 年Thanks
PCI Guru, vCISO - Author - InfoSec Curmudgeon
6 年IoT vendors are so focused on beating each other to market with their latest and greatest attempts at automation that they do not have the time to mess around with security, privacy or other important issues. Those sorts of discussions introduce delays that mean they will miss their ability to capitalize on markets, i.e., make a quick buck. There is a great interview with Sully Sullenberger regarding autonomous vehicles (https://www.thedrive.com/tech/8300/can-sully-transform-the-world-of-self-driving-cars) that touches on some of the issues facing IoT as well.