{"id":16945,"date":"2017-09-22T11:19:24","date_gmt":"2017-09-22T07:19:24","guid":{"rendered":"http:\/\/www.intelligentcio.com\/eu\/?p=16945"},"modified":"2017-09-22T11:19:24","modified_gmt":"2017-09-22T07:19:24","slug":"lack-of-security-control-of-internet-of-things-devices-doubled-number-of-cyberattacks","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/eu\/2017\/09\/22\/lack-of-security-control-of-internet-of-things-devices-doubled-number-of-cyberattacks\/","title":{"rendered":"Lack of security control of Internet of Things devices doubled number of Cyberattacks"},"content":{"rendered":"<p>The number of denial-of-service (DoS) or distributed-denial-of-service (DDoS) cyberattacks doubled from 3 percent to 6 percent in 2016, due to the lack of sufficient security controls of Internet-connected \u00b9Internet of Things (IoT) devices. And of all IoT attacks, 60 percent originated from Asia, 21 percent from EMEA and another 19 percent from the Americas. The most likely reason for the high volume of attacks from Asia is that technology sourced from the region has historically been susceptible, and compromised infrastructure tends to be reused to perpetrate additional nefarious activities.<\/p>\n<p>These are some of the highlights in Dimension Data\u2019s Executive\u2019s Guide to the NTT Security 2017 Global Threat Intelligence Report which was published earlier this month. The report was compiled from data collected by NTT Security and other NTT operating companies including Dimension Data, from the networks of 10,000 clients across five continents, 3.5 trillion security logs, 6.2 billion attempted attacks, and global \u00b9honeypots and \u00b2sandboxes located in over 100 different countries.<\/p>\n<p>Global honeypot sensors monitored IoT cyberattacks and their targets over a six-month period. Based on the credentials used by threat actors, it was determined that 66 percent of attacks targeted specific IoT devices such as a particular model of video camera. These attacks appeared to be from compromised IoT devices attempting to find and compromise even more such devices. This would be consistent with an attacker acquiring a large number of devices to use in DDoS and other forms of attack. Of the balance of 34 percent of the analysed attacks, it\u2019s likely these were also attempting to grow the attacker\u2019s arsenal by targeting other types of devices.<\/p>\n<p><strong>DDoS attacks using IoT devices can impact an organisation in multiple ways. They can:<\/strong><\/p>\n<ul>\n<li>Prevent customers, partners, and other stakeholders from accessing their organisations\u2019 Internet-facing resources, thereby impacting sales and other daily operations<\/li>\n<li>Prevent employees and internal systems from accessing the Internet, disrupting many facets of operations<\/li>\n<li>Affect organisations providing services from the Internet, which can cause supply chains to be broken<\/li>\n<\/ul>\n<p>\u201cThere\u2019s nothing about a DDoS attack which requires use of IoT devices only, so attackers may look for as many devices as possible regardless of type,\u201d explained Mark Thomas, Dimension Data\u2019s Cybersecurity Strategist. He points out that while DDoS attacks are the most recognised threat, they\u2019re not the only potential outcome of an organisation\u2019s IoT and \u00b2operational technology (OT) devices being compromised.\u201d<\/p>\n<p><strong>There are a number of actions that organisations can take to protect their businesses including:<\/strong><\/p>\n<ul>\n<li>Make security a primary consideration for all Internet of Things and operational technology device purchases<\/li>\n<li>Authorise funding as needed to replace older Internet of Things and operations technology devise purchases<\/li>\n<li>Conduct threat and vulnerability assessments<\/li>\n<li>Ensure devices are discovered and profiled within an organisation<\/li>\n<\/ul>\n<p>According to a February 2017 press release by research firm, Gartner Inc, 8.4 billion connected things will be in use worldwide in 2017- up 31 percent on 2016. This number will reach 20.4 billion by 2020. And total spend on endpoints and services will reach almost $2 trillion in 2017.<\/p>\n<p>Anton Jooste, Dimension Data\u2019s Senior VP, Internet of Things added: \u201cThe number of ways that IoT devices can help people and organisations is boundless. However, there\u2019s also much evidence that the expansion of the Internet enabled through mobility, cloud adoption, and the proliferation of the Internet of Things, has exposed new attack surfaces. Vulnerabilities are rife, data is exponentially increasing, privacy is being eroded, and the cost of breaches is becoming debilitating.\u201d<\/p>\n<p>\u00b9The Internet of Things refers to the billions of devices (things) other than standard computers, smartphones, and tablets that can use computer networks (the internet). Many people already have IoT devices in their homes, such as routers, DVRs, thermostats, video cameras, security systems, coffeemakers, refrigerators, and voice-activated assistants (e.g., Amazon Echo). IoT devices also include wearables such as smartwatches, fitness bands, and medical devices. Even many cars have become IoT devices.<\/p>\n<p>*Gartner Press Release, Gartner Says 8.4 Billion Connected &#8220;Things&#8221; Will Be in Use in 2017, Up 31 percent From 2016, February 7, 2017.    \t<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The number of denial-of-service (DoS) or distributed-denial-of-service (DDoS) cyberattacks doubled from 3 percent to 6 percent in 2016, due to the lack of sufficient security controls of Internet-connected \u00b9Internet of Things (IoT) devices. And of all IoT attacks, 60 percent originated from Asia, 21 percent from EMEA and another 19 percent from the Americas. The [&hellip;]<\/p>\n","protected":false},"author":21,"featured_media":16946,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[55,57,14,29],"tags":[183,184,180,139,28,185,54,186],"class_list":["post-16945","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-data-centres","category-enterprise-security","category-more-news","category-software","tag-cyberattacks","tag-ddos","tag-dimension-data","tag-internet-of-things","tag-iot","tag-operational-technology","tag-security","tag-threat"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/16945","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/comments?post=16945"}],"version-history":[{"count":0,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/posts\/16945\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media\/16946"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/media?parent=16945"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/categories?post=16945"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/eu\/wp-json\/wp\/v2\/tags?post=16945"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}