Internet of Things (IoT)

Internet of Things (IoT) means “Internet of Things”. The term refers to the networking of objects or devices with the Internet. Such devices include, for example, smartwatches, smart TVs and surveillance cameras. They contain small, Internet-enabled computers. These computers are vulnerable through their connection to the Internet. Cybercriminals can manipulate them and use them to spy on you. Or to connect the devices to a criminal botnet .

What does that mean in detail?

Practically all “smart” devices that can send and receive data are connected to the Internet of Things (IoT): smartwatches, fitness trackers, surveillance cameras, baby monitors, smart home devices such as smart lighting systems, networked loudspeakers, Internet-enabled televisions, vacuum cleaner robots, digital assistants such as Alexa and Siri, toys such as robots that can be controlled by smartphone.

Over the internet connection, these devices – like all computers – can be hacked or spied on by cybercriminals. IoT devices are particularly easy targets for cybercriminals. Because:

• These devices are often used with their preset passwords, which are comparatively easy to guess
• Software updates for these devices usually only appear at long intervals. Security vulnerabilities can be exploited for a long time.
• Not all users are aware of these software updates and their importance. As a result, the software of many devices is never updated. Known security vulnerabilities remain.
• Not all devices send their data encrypted. Many are therefore easy to spy on.
• Many devices can connect to the Internet on their own. Cybercriminals can exploit this with appropriate programs.

IoT devices have become an important factor for botnets.

• Botnets are criminal networks that are automatically set up between malware-infected devices. Without the knowledge of their owners, resources of these devices are misused for illegal purposes, for example for DDOS attacks.
• Due to their large number and easy vulnerability, IoT devices allow for the creation of huge bot networks.
• At the same time, these malware-infected devices open a gateway for cybercriminals into the network they’re on—your home or business. Companies also use the Internet of Things. The term “Industry 4.0” is often used for this.

Where do I come across this problem in my day-to-day work?

At first, it seems to be nowhere. But private IoT devices such as smartwatches and fitness trackers are also used in everyday work. When they connect to the corporate network, they can become a security risk. However, as so-called shadow IT, they are often overlooked. Feel free to talk to your administrator about this topic.

What can I do to improve my security?

• Check if software updates are available for your IoT devices and install them.
• Change the default passwords of your IoT devices. Make sure you have a high level of password security.
• Use encrypted communication on all IoT devices that offer it.
• Activate your router’s firewall .

Somewhat more complex security measures:

• Disable the Universal Plug and Play (UPnP) feature of your router. This makes it difficult for IoT devices to connect to the internet on their own.
• Set up a separate Wi-Fi network for your IoT devices. At least for those for whom this does not affect their function.

Learn more

• Information and safety instructions from the Lower Saxony police on the subject of Smart Home/Internet of Things.
• Information brochure of the German Federal Office for Information Security (BSI) on the subject of the Internet of Things.
• Information from the LKA Lower Saxony on the misuse of IoT devices in the context of criminal botnets, including basic security measures.