Date Published: October 2019
Comments Due:
Email Questions to:
Author(s)
Michael Fagan (NIST), Mary Yang (MITRE), Allen Tan (MITRE), Lora Randolph (MITRE), Karen Scarfone (Scarfone Cybersecurity)
Announcement
In 2017, more than eight billion IoT devices were in use worldwide and the current estimate is that more than 20 billion IoT devices will be in use by 2020, according to various market research organizations. Since many IoT devices are accessible via the internet, malicious actors can exploit vulnerabilities to gain access to IoT devices.
Draft NIST Interagency or Internal Report (NISTIR) 8267, Security Assessment of Consumer Home IoT Products, presents the results of technical assessments on security features of smart light bulbs, security lights, security cameras, doorbells, plugs, thermostats, and televisions. This report provides recommendations, along with information on the observations of the devices' security features, to indicate current practices and how these current practices could be improved. These technical assessments will help the NCCoE better address consumer home IoT security in a holistic manner in future projects. In addition, the technical assessments inform the security tenets for IoT devices outlined in Draft NISTIR 8259, Core Cybersecurity Feature Baseline for Securable IoT Devices.
NOTE: A call for patent claims is included on page iv of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy--Inclusion of Patents in ITL Publications.
This report presents the results of a project that conducted a technical review of security features in different categories of consumer home Internet-of-Things (IoT) devices. The categories of IoT devices included smart light bulbs, security lights, security cameras, doorbells, plugs, thermostats, and televisions. The purpose of the project was to better understand security capabilities of these IoT devices and to inform general recommendations for manufacturers for improving the security of consumer home IoT devices. This report provides those recommendations, along with observations of IoT devices’ security features, to indicate current practices and how these current practices could be improved.
This report presents the results of a project that conducted a technical review of security features in different categories of consumer home Internet-of-Things (IoT) devices. The categories of IoT devices included smart light bulbs, security lights, security cameras, doorbells, plugs, thermostats,...
See full abstract
This report presents the results of a project that conducted a technical review of security features in different categories of consumer home Internet-of-Things (IoT) devices. The categories of IoT devices included smart light bulbs, security lights, security cameras, doorbells, plugs, thermostats, and televisions. The purpose of the project was to better understand security capabilities of these IoT devices and to inform general recommendations for manufacturers for improving the security of consumer home IoT devices. This report provides those recommendations, along with observations of IoT devices’ security features, to indicate current practices and how these current practices could be improved.
Hide full abstract
Keywords
consumer home Internet of Things; cybersecurity; Internet of Things; IoT devices; smart home
Control Families
None selected
) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)
