6.1.2. Vulnerabilities

IoT systems face a range of threats due to their interconnected nature and deployment in diverse environments.

1. Common Threats:

• Device Hijacking: Attackers gain control of devices to misuse them (e.g., botnets).
• Eavesdropping: Unauthorized interception of communication between devices.
• Man-in-the-Middle (MitM) Attacks: Attackers intercept and alter communication between two parties.
• Denial of Service (DoS): Overloading the system to make it unavailable to users.
• Firmware Exploits: Exploiting outdated or insecure firmware to gain unauthorized access.

IoT devices are often at risk due to their connection to the internet. The common threats listed here describe various cyber-attacks:

• Device Hijacking happens when an attacker takes over a device, like smart cameras or home assistants, often to create botnets that can launch other attacks.
• Eavesdropping refers to when someone listens in on communications, such as data sent between smart home devices.
• In Man-in-the-Middle (MitM) Attacks, the attacker secretly relays and possibly alters the communication between two parties without them knowing, which can lead to serious data breaches.
• A Denial of Service (DoS) attack floods a device or network, causing it to crash and become unusable for legitimate users.
• Firmware Exploits occur when attackers take advantage of outdated or poorly designed software that runs on the devices to gain unauthorized access.

Imagine you have a smart doorbell that sends video to your phone. If an attacker pulls off a Device Hijacking, they could view your live camera feed or even disable your doorbell. This is akin to someone breaking into your home while you’re away and starting to use your belongings without permission. Just like you would lock up your house to prevent break-ins, securing your smart device is crucial.

2. Vulnerabilities:

• Weak or default passwords
• Lack of firmware updates
• Unencrypted data transmission
• Poor physical security of devices

Vulnerabilities in IoT devices make them susceptible to attacks. Here are the key points:

• Weak or default passwords can be easily guessed or hacked. Many devices come with factory-set credentials that users do not change, leaving them open to attack.
• Lack of firmware updates refers to devices not receiving necessary software updates that fix bugs or security holes, leaving them vulnerable over time.
• Unencrypted data transmission means information sent from the device to the cloud (like health metrics from a wearable) is not protected and could be intercepted by attackers.
• Poor physical security can refer to devices that are easily accessible in public spaces, allowing anyone to tamper with them.

Think of a bicycle parked outside. If it has a weak lock (like a weak password), anyone can steal it easily. If you never check on it or replace the lock when it's rusty (like not updating firmware), it becomes even more vulnerable. Similarly, if you leave the data transmitted from your smart lock unencrypted, it’s like leaving your bike unlocked in a busy area; anyone can hop on and ride away.

Example: In 2016, the Mirai botnet used hijacked IoT devices with default credentials to launch large-scale DDoS attacks.

The Mirai botnet incident highlights how vulnerabilities can be exploited using default passwords. In 2016, this malware identified unsecured IoT devices that used default usernames and passwords. Once it compromised these devices, it created a network (botnet) that overwhelmed the target websites with traffic, leading to service failures. The incident underscored the importance of securing IoT devices by changing default settings and implementing better security measures.

Imagine leaving your front door open, which lets anyone walk in. If someone enters and starts a party in your living room, it creates chaos. The Mirai botnet did the same online, using vulnerable devices to create havoc for websites. Changing the default passcode of an IoT device is like simply locking your door to ensure you only allow in friends.

--