ITCC500 ***** FINAL RESEARCH PAPER ***** 16 pages

THE INTERNET OF THINGS

THE INTERNET OF THINGS

Keywords: internet of things (IoT), security, privacy, hackers

TABLE OF CONTENTS

CHAPTER PAGE

I. INTRODUCTION…………………………………………………………….1

Problem Statement….........................................................................................1

Purpose……………………………………………………….………………..2

Significance of the Study……………………...………………………………2

II. LITERATURE REVIEW…………...………..……………………………….2

Internet of Things…...........................................................................................3

Security…..........................................................................................................3

Privacy...............................................................................................................4

III. METHODOLOGY……………………………………………..………….....5

Hypotheses……………………………………………………………………5

Research Design………………………………………………………………5

Variables………………………………………………………………………5

Sampling Plan…………………………………………………………………5

Data Collection..................................................................................................6

Analysis………………………………………………………………………..6

Limitations……………………………………………………………………..6

IV. RESULTS………………………………..…………………………………..6

Impact on Users……………………………………………………………...6

Impact of the Technology……………………………………………………7

Impact on the Private Sector…………………………………………………7

Impact on the Government…………………………………………………..8

V. DISCUSSION…….…………………………………………………………8

Cybersecurity Concerns……………………………………………………...8

Summary……………………………………………………………………..8

Recommendations……………………………………………………………9

LIST OF REFERENCES……………….……………………………………………….10

The Internet of Things: Privacy and Security

Introduction

The Internet of Things (IoT) is the connection of devices to the internet (Kobie, 2015). This type of devices include everyday devices for example home appliances, office desk accessories, gardening tools and many others that have a connection to the internet for a better user interaction and up to date information. These devices can create an automated environment depending on the triggers that the user sets up, for example a toaster can tell the user when the bread is ready sending the user a notification via internet. Technology continues to grow and user experiences become richer with less efforts. The main goal for this devices are to have an interaction with a user without the user making any hardware changes or movements.

Billions of devices connect each day to the vast network of the internet (Rouse, 2016). Many security concerns and privacy questions arise as the users understand more and more the information that is been shared with the IoT devices. Hackers are a growing community that is just looking for that vulnerability to be exploited and gather very personal information that users thought that it was safe with their devices.

Problem Statement

While the Internet of Things is a growing technology and is also growing security risk for the users. Many manufacturers of these devices are in a fast developing environment that put a side security and they just want to develop new devices. This study will be developed to focus on those security flaws or possible security exploits of the IoT devices and how they will affect the privacy of the users and even their personal lives.

Purpose

The goal of this study is to determine what devices are the most secure and that uses the least sensitive user information to perform their duties. Also it will allow the users to have a better perspective of the implications of the usage of these type of devices by knowing the how they could be exploited and giving the readers a concrete understanding of the privacy issues when working with unsecure devices. After completing the security and privacy concerns this study will have a basic instructional for the creation of a secure network when dealing with Internet connected devices at home.

Significance of the Study

This study intends to be the base for future development and is aimed to create a security concern over the developers of new technology to encourage the security of the users and the device management. As an emerging technology user understanding is essential since there are the first in line interacting with these type of devices.

Literature Review

The Internet of Things

The fast growing industries is a non-stoppable industries as we see on the article “Omega2 - $5 Linux Computer Made for Internet of Things” by Tom Spendlove on engineering.com they have develop a new device called the Omega. This small device is a modular Wi-Fi capable and ready to use Linux computer designed to be used on the IoT devices. Several applications are shown on the campaign page, from a pressure sensitive lamp, to a digital art installation, a media server, networking, robotics and streaming music directly to a boom box (Spendlove, 2016).

Security

The implementation of the IoT devices at home is generating a concern on the users that have install them since there is a fast growing community of hackers that are targeting the connected devices. Hackers are looking for this new challenge that have emerge and not only gaining control over some files, now they can physically affect their targets (Palmer, 2016). With the devices for example thermostat, lamps and fridge, a hacker who gains access and control over these devices can turn off the lamp, increase or decrease temperature or cause a malfunction on the fridge.

Security will have to be a priority on the development of the devices. Manufacturers without proper security protocols on their devices will soon or later be affected by exploits created to manipulate the behavior of this devices (Clemens 2016). The devices are capable of managing hardware that if not used properly can risk the user’s life. The personal security management will be something that should be stablish as a priority on the education system. Training and education can prevent live threatening scenarios to become real. A true concern is the lack of understanding of how to stay secure without having to compromise on the use of the IoT devices. By just adding a firewall or changing some settings on the home router most people use at home, they can create a safe environment where their data can flow flawless without interruptions and threats affecting the devices communication.

Privacy

The capabilities of the IoT are amazing. But how much are we willing to risk for our safety to be a priority on our lives. As we continue to develop new technology the focus is leading to a wireless fast paced environment where personal data is flowing everywhere (Chaouchi, 2010). By just taking a picture the user is exposing his location (GeoTag Pictures) including time and date, activity, physical aspect and many more information that can be on the metadata information of the single picture that was taken. All this information depending on the medium that is send it will determine the security that it will have. Mobile applications like Telegram and the new update of Whatsapp have encryption capabilities to address this situation.

As the creation of IoT devices continues to grow the implementation of new policies that are as dynamic as possible to address multiple situation will be essential for the safety of the users and resolve the privacy concerns.

Methodology

Hypotheses

The following are the hypotheses that this study intends to prove. Security breaches from mobile devices connected to other devices through the internet can be performed without user acknowledgement stealing/gaining control of the device and device information. With the evolving Internet of Things there will be soon the hackers target to exploit and gain easy access to user’s sensitive information. As they develop new exploits the Internet connected devices when exploited by external users/hackers can create live threatening scenarios that will directly affect the users.

Research Design

This research has been based on a mixture of qualitative and quantitative factors. The research is based on the understanding of past studies, news articles and books. The information gathered from these references worked in conjunction for me to develop this paper. Since the Internet of Things security have not been developed to the extent that users can feel safe while using this devices, this paper uses experiences from other users that have interacted with IoT devices.

Variables. The dependent variables for this studies will be IoT devices, security protocols and software applications. The independent variables user education and user awareness.

Sampling Plan. No sampling will be used for this study. Due to the fact that this paper is for an

8-week course no sampling will be performed for this research.

Data Collection. The only data collection for this study will be performed over the internet and books. All the data gathered for this paper is going to be from trusted sources and scholarly articles. It will attempt the gathering of as much information as needed.

Analysis of Data. All data recollected from the research performed for this paper will be manually analyze. The intent is to focus the research and analytic understanding of the different topics found and focus them to the importance of the security for the IoT devices. All the documents used will be references at the end of the paper.

Limitations. Since there is not going to be an actual direct research performed we are limited with the results of previous research, findings and personal experience. There might not be enough data to support the answer to all the hypotheses and since it is focus on home networks we are creating another specific research that will depend on the data provided by the data collection.

Results

Impact on Users

The IoT devices are here to stay and the most affected by them are the end users overall. The users are the ones who are buying these devices without the knowledge of the security vulnerabilities this may create. The lack of knowledge of the user is affecting directly the devices since their security vulnerabilities are not addressed. There are no policies or regulations that tell the users how their IoT devices can affect their lives and what they are putting at risk. These concerns are addressed by some manufacturers with security patches that will cease the current vulnerabilities but creating ones with the new implemented protocols. Education to the users will minimize the impact area for a hacker to exploit.

Impact of the Technology

The IoT technology is very simple when speaking about it in general. These common devices that we use to use manually and that the users use every day are being automated. For example, fridge can now send you a message to your phone when there is no milk, or control the lights of the house with an application from your mobile cellphone. The development of automation is being accepted by everyone since it helps maximize the capabilities of the devices. But the development of these type of technology without regulations is what is going to impact us in a near future. The problem that was found during the research is that the manufacturers are not prioritizing the security. Hackers are targeting vulnerable devices to access and gain control over the devices. These vulnerable devices on control by hackers they can cause direct harm to the users. Due to this impact the technology development should be regulated so security becomes a priority. Having in mind that limitations on the development may cause that the technology developers could not achieve their capability goals and delay the future technology achievements.

Impact on the Private Sector

The private sector as main developers of these devices are stablishing new records with their sales. Automation of everything and connecting everything they can to the internet and making these devices available to everyone. They have been shifting to the IoT device technology and maximizing their profits. The private sector and manufacturers of IoT devices still don’t have security as a priority and since most of the devices don’t have the computing power to manage those extra codes needed to add security, they just simply don’t include them on their devices. Having no regulations to control them on how to develop their devices is creating a direct impact on the end users that are been hack and exposed by the vulnerabilities they don’t address.

Impact on the Government

During the research a discovery was made that was that the government specifically the NSA is actually using the devices vulnerabilities to their favor. Having these vulnerable connections on their targets they can gain access to the devices and gather information that they couldn’t get before without wire ring their targets house. It’s no surprise that the U.S. National Security Agency and presumably other spy agencies around the world are investigating how they might take advantage of the new generation of Internet-connected devices in homes and offices for spying purposes (Hesseldahl, 2016).

Discussion

Cybersecurity Concerns

The security of the user is now part of the cybersecurity methodologies since with the IoT devices they interact with each other directly. The security can be achieved with the implementation of firewalls and network monitoring tools. The millions of devices connected every day to this vast network that the users are now responsible for the information the pass through it. Policies and regulations will not be able to control the vast amount of data traveling the internet at all times. Since the internet is out of our hands to control the regulations/policies and education should be focused on the end user so they are capable of securing their systems and devices.

Summary

The interaction with the IoT devices will continue to increase generating more vulnerable devices on the household of the users. Hackers are waiting for these types of devices to connect to the internet so they can exploit their tools and gain control over them. The research has demonstrated that the vulnerabilities for IoT and most electronic devices are not addressed by manufacturers, instead they will create a new version of the device and sometimes they will not even address the security vulnerabilities.

Recommendations

. What I have found during this research was that software’s like Comodo firewall combined with a malware detection tool will provide a couple of barriers between the hackers and the IoT devices. Also the change on the default configuration on the Wi-Fi adapter/modem is the most effective way to minimize the exposure of the user network.

After all the research a I have a common and final conclusion, education is essential and the users need cybersecurity awareness training. Cybersecurity should be part of the curriculum starting from elementary education. Creating a security awareness savvy user from the beginning will provide that well knowledgeable user aware of the common threat that affect us every day, hackers.

References