1 of 18

SECURING IOT��ON THE��HOME NETWORK

VEDANT KHANDELWAL

2 of 18

WHAT IS IOT

Smart Lights

Webcam

Smart Lock

Printer

3 of 18

WHY IOT

  • Home Automation

​

  • Remote Access

​

  • Security and Safety

​

  • Energy Efficiency

​

4 of 18

Threats

  • Lack of Vendor Support
  • Compatibility and Integration Issues
  • Botnet
  • Unauthorized Access

Risks

  • Unaddressed Vulnerabilities, Outdated Software or hardware,

​

  • Inadequate interoperability between systems�Difficulty in implementing security measures, likelihood for misconfigurations

​

  • Exposure of sensitive data

​

5 of 18

BEST PRACTICES

6 of 18

7 of 18

KEEP YOUR DEVICES UP TO DATE

Frequent updates bring

​

  • Bug Fixes

​

  • Vulnerability Patches

​

  • Improvement in stability and performance

​

  • Peace Of Mind

8 of 18

UPNP IS VULNERABLE

  • Remote Exploitation
  • Port Forwarding
  • Lack of Authentication
  • Malware Exploitation

9 of 18

BUY A SECURE ROUTER

  • Enhanced Security Features
  • Regular Firmware Updates
  • Compatible with security devices
  • Configuration and customization options

10 of 18

IMPLEMENT NETWORK SEGMENTATION

Why?

​

  • Risk Mitigation
  • Improve Network Performance
  • Enhance Network Segmentation
  • Simplified Network Management
  • Flexibility and Scalability
  • Improved Incidence Response

11 of 18

REGULAR AUDITING AND MONITORING

Look for Indicators of Compromise (IOC’s)

  • Unusual Network Traffic Patterns
  • Unauthorized device Connections
  • Unusual device behavior
  • Suspicious DNS Queries
  • Security Alerts from IoT security solutions

12 of 18

ATTACKS FROM THE PAST

    • Verkada (2021)
    • Mirai (2016)
    • Jeep (2015)
    • Mutiny(2022)

13 of 18

THE VERKADA HACK

  • 1,50,000 Devices in over 60 countries were affected
  • The firewall was configured to allow access to the Verkada management interface from any IP address.
  • The passwords for the Verkada management interface were weak and easy to guess.
  • The Verkada management interface was not properly protected from cross-site scripting attacks

14 of 18

THE MIRAI BOTNET(2016)

  • Over 100,000 Compromised Devices
  • Has been the largest and most disrupted DDOS attacks
  • Expoited Vulnerabilities with open ports and Default Usernames/Passwords
  • Caused millions of Dollars in damage.
  • Disrupted Operations of Governments and businesses

15 of 18

THE JEEP HACK (2015)

  • Attackers could take control of the Steering, brakes and Transmission
  • Vulnerable Uconnect system allowed hackers to send commands to the CAN Bus
  • By sending specially crafted messages over the internet to the vehicle's IP address, the attacker could gain unauthorized access to the vehicle's internal systems.

​

16 of 18

MUTINY (2021)

  • Exploited a Vulnerability in the Tuya IoT Platform
  • 100,000 Devices Compromised
  • Devices were used to launch DDoS Attacks against the Ukrainian Govt Website
  • Was exploited by sending a specially crafted HTTP Request to the Tuya Platform

17 of 18

KNOW YOUR SPEAKER {KYS}

Student at BMS College Of Engineering [ISE]

Vedant Khandelwal

@TheVedantKhandelwal

18 of 18

THANK YOU!

SOMEONE@EXAMPLE.COM