[OPLIN 4cast] OPLIN 4cast #436: IoT security

Wed May 6 10:30:16 EDT 2015

    Email not displaying correctly? View it in your browser.
<http://www.oplin.org/4cast/>  [image: OPLIN 4Cast]

OPLIN 4cast #436: IoT security
May 6th, 2015

[image: graph]As more and more specialized electronic devices automatically
connect to Wi-Fi wherever they can find a node, comprising the so-called
Internet of Things (IoT), the people who install and maintain wireless
access points in libraries will encounter more and more concerns. For one
thing, designing a wireless network for the IoT requires a shift in
thinking, from providing big bandwidth for a few devices that patrons are
using to “read” the Internet, to providing small bandwidth for a multitude
of devices that they happen to be wearing in the library. But an even
larger concern may be network security, since many of these devices have
been designed with little or no thought given to protections against
hacking and viruses.

   - Internet of Crappy Things
   <http://blog.kaspersky.com/internet-of-crappy-things/> (Kaspersky blog |
   Alex Drozhzin) “In general, the problem is that those who develop home
   appliances and make them connected face realities of a brand new world they
   know nothing about. They ultimately find themselves in a situation similar
   to that of an experienced basketball player sitting through a chess match
   with a real grand master. Things get even worse when it comes to the users
   of connected devices. They don’t bother with security at all. For an
   average user, a connected microwave is still just a microwave. A user would
   never imagine it is a fully-equipped connected computer which has means of
   influencing the physical world.”
   - Prepping WLANs for the Internet Of Things
   <http://www.networkcomputing.com/wireless-infrastructure/prepping-wlans-for-the-internet-of-things/d/d-id/1320221>
   (Network Computing | Marcia Savage) “IoT security is a top concern,
   [director of product marketing at Aerohive Networks Abby] Strong said.
   Oftentimes the devices have custom operating systems, so antivirus can’t
   simply be installed on them. ‘There are few best practices for how to
   handle IoT systems,’ she said. ‘And absolutely no standardization. The
   industry doesn’t even know what the risks are yet.’”
   - Are we creating an insecure Internet of Things (IoT)? Security
   challenges and concerns
   <http://www.toptal.com/it/are-we-creating-an-insecure-internet-of-things>
   (Toptal | Nermin Hajdarbegovic) “[Federal Trade Commission chairwoman
   Edith] Ramirez went on to say that developers of IoT devices have not spent
   time thinking about how to secure their devices and services from
   cyberattacks. ‘The small size and limited processing power of many
   connected devices could inhibit encryption and other robust security
   measures,’ said Ramirez. ‘Moreover, some connected devices are low-cost and
   essentially disposable. If a vulnerability is discovered on that type of
   device, it may be difficult to update the software or apply a patch – or
   even to get news of a fix to consumers.’”
   - ‘Internet of Things’ gets watchdog: Report calls for extra security to
   prevent hacking of smart gadgets in homes
   <http://www.dailymail.co.uk/sciencetech/article-2928946/US-watchdog-urges-safeguards-Internet-Things.html>
   (Daily Mail | Victoria Woollaston) “Last year, the FTC studied 12 mobile
   fitness apps and found they shared data with 76 separate entities. Ms
   Ramirez continued: ‘If I’m wearing a fitness band that tracks how many
   calories I consume I wouldn’t want to share that data with an insurance
   company.’ The FTC report made no specific legislative recommendation for
   IoT but said ‘there appeared to be widespread agreement that companies
   developing IoT products should implement reasonable security.’”

 *Articles from Ohio Web Library <http://ohioweblibrary.org>:*

   - Regulating the Internet of Things: First steps toward managing
   discrimination, privacy, security, and consent.
   <http://web.a.ebscohost.com.proxy.oplin.org/ehost/detail/detail?sid=ed5315fa-1582-4910-b91a-cd81db965c2c%40sessionmgr4002&vid=0&hid=4207&bdata=JnNpdGU9ZWhvc3QtbGl2ZQ%3d%3d#db=buh&AN=99746242>
   (*Texas Law Review*, Nov. 2014, p.85-178 | Scott R. Peppet)
   - Ensuring security in the connected home.
   <http://web.a.ebscohost.com.proxy.oplin.org/ehost/detail/detail?sid=a4015e44-7f04-46df-a3cd-3f9d8b81ee01%40sessionmgr4002&vid=0&hid=4207&bdata=JnNpdGU9ZWhvc3QtbGl2ZQ%3d%3d#db=buh&AN=102264663>
   (*ECN: Electronic Component News*, May 2015, p.16-19 | Ogi Brkic)
   - In the privacy of your own home.
   <http://web.a.ebscohost.com.proxy.oplin.org/ehost/detail/detail?sid=d45b7a7b-2cb8-408c-933d-9d09af5ed06b%40sessionmgr4002&vid=0&hid=4207&bdata=JnNpdGU9ZWhvc3QtbGl2ZQ%3d%3d#db=f5h&AN=102130059>
   (*Consumer Reports*, June 2015, p.24-30)

    ------------------------------
The *OPLIN 4cast* is a weekly compilation of recent headlines, topics, and
trends that could impact public libraries. You can subscribe to it in a
variety of ways, such as:

   - *RSS feed.* You can receive the OPLIN 4cast via RSS feed by
   subscribing to the following URL:
   http://www.oplin.org/4cast/index.php/?feed=rss2.
   - *Live Bookmark.* If you're using the Firefox web browser, you can go
   to the 4cast website (http://www.oplin.org/4cast/) and click on the
   orange "radio wave" icon on the right side of the address bar. In Internet
   Explorer 7, click on the same icon to view or subscribe to the 4cast RSS
   feed.
   - *E-mail.* You can have the OPLIN 4cast delivered via e-mail (a'la
   OPLINlist and OPLINtech) by subscribing to the 4cast mailing list at
   http://mail.oplin.org/mailman/listinfo/OPLIN4cast.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.oplin.org/pipermail/oplin4cast/attachments/20150506/c41b38db/attachment.html>