This is just a quote on Schneier's online article:
"On the Internet of Things, integrity and availability threats are much worse than confidentiality threats. It's one thing if your smart door lock can be eavesdropped upon to know who is home. It's another thing entirely if it can be hacked to allow a burglar to open the door -- or prevent you from opening your door. A hacker who can deny you control of your car, or take over control, is much more dangerous than one who can eavesdrop on your conversations or track your car's location"
the complete article can be found on: The real world security and the Internet of Things
This article makes it clear what we need to focus on in securing that great technology from a DOS or tampering. If you disagree, please share your thoughts.
An ex-Cyber security researcher. Hopeful Pen tester. Sharing thoughts and projects.
Showing posts with label Internet of Things. Show all posts
Showing posts with label Internet of Things. Show all posts
Thursday, 10 November 2016
Wednesday, 26 October 2016
IoT the "man" behind Friday hack
So as I initially suspected that this new buzz of Internet of Things with companies setting up DevOps and equipping their departments, there would soon be a security issue behind this.
Last Friday hack had this IoT behind its hack: Twitter, Spotify and Paypal were affected.
How it worked
The attack was targeted at Dyn a company for helping hi-traffic websites and this affected other companies. The attack came from an IoT device and caused a DDOS attack on Dyn's DNS. This was successfully done using botnets.
I remember studying this at University it was one interesting topic for me. Also heartbleed attack has a relationship with this.
How can this be solved
If you have an idea please share, I'll share mine when I fully understand the IoT environment.
For more information
https://www.washingtonpost.com/news/the-switch/wp/2016/10/21/someone-attacked-a-major-part-of-the-internets-infrastructure/
https://www.wired.com/2016/10/internet-outage-ddos-dns-dyn/
Last Friday hack had this IoT behind its hack: Twitter, Spotify and Paypal were affected.
How it worked
The attack was targeted at Dyn a company for helping hi-traffic websites and this affected other companies. The attack came from an IoT device and caused a DDOS attack on Dyn's DNS. This was successfully done using botnets.
I remember studying this at University it was one interesting topic for me. Also heartbleed attack has a relationship with this.
How can this be solved
If you have an idea please share, I'll share mine when I fully understand the IoT environment.
For more information
https://www.washingtonpost.com/news/the-switch/wp/2016/10/21/someone-attacked-a-major-part-of-the-internets-infrastructure/
https://www.wired.com/2016/10/internet-outage-ddos-dns-dyn/
Labels:
DDOS,
DNS attack,
Dyn,
Internet of Things,
Paypal,
Spotify,
Twitter
Subscribe to:
Posts (Atom)