Strengthening the network security supply chain. Issue 12 (December 2017)

• Record Type: Journal Article
• Authors: Kenny, Steven
• Is Part Of: Computer fraud & security. Issue 12(2017)
• Page Start: 11
• Page End: 14
• Publication Date: 2017-12
• Subjects: Computer crimes -- Periodicals; Computers -- Access control -- Periodicals; 364.168
• DOI: 10.1016/S1361-3723(17)30108-2
• Languages: English
• ISSNs: 1361-3723

Abstract

Abstract : You can't say that we weren't warned. Just a few days before the largest distributed denial of service (DDoS) attack the world had ever seen was launched in September last year, researchers from IoT Village published a list of 47 vulnerabilities in 23 Internet-connected devices that they'd been examining. Everything from smart thermostats, connected door locks and remote-controlled wheelchairs proved vulnerable to password sniffing, replay attacks and other design flaws that let the researchers take them over. 1 There have been plenty of warnings about vulnerabilities in devices such as CCTV cameras and digital recorders, most of which went ignored – until Mirai used them to launch attacks. High street stores, B2B resellers and integrators all carry responsibility for the ability of criminals to use tools such as Mirai. And vulnerabilities in products continue to emerge. Steven Kenny of Axis Communications argues that it's time to look at all stages of the production and selling of Internet-connected devices, with everyone involved shouldering some of the responsibility for making sure we stay safe.