The UK Announces Regulations to Beef Up IoT Security—The U.S. Should Follow Suit

#News(Security) [ via IoTGroup ]

Today, the UK has announced new legislation aimed at protecting consumers who buy connected devices from hacking and other types of security risks.
The law would require makers of Internet of Things devices to adhere to three security requirements, which frankly should be no-brainers but somehow aren’t.
IoT manufacturers would have to ensure that all device passwords are unique and cannot be reset to a generic, universal factory setting.
The law also notes that any reported vulnerability will have to be “acted on in a timely manner.” C ompanies will have to explicitly state a minimum length of time that devices will receive security updates when the device is sold, regardless of whether it’s bought online or in an actual store.
In its release, the UK government noted that it expects 75 billion IoT devices to find their way into homes globally by the end of 2025.
It also notes the three proposed security requirements are the results of consulting with businesses and the National Cyber Security Centre to develop best standard practices in May of last year.
Right now, IoT devices are sort of like the wild west.
Eliminating the fuzziness around IoT device passwords would go a long way in reducing that sort of security risk.
Likewise, the requirement forcing manufacturers to disclose how long they plan to support devices with security updates is crucial.
A fter a public outcry, i t backtracked just a few days later to note that security updates would, in fact, continue for ‘as long as possible.’ Sonos is particularly notable, as speakers are devices that many consumers expect to last decades, compared to gadgets that become outdated more quickly like laptops or smartphones.
The company has stated it plans to support devices for a minimum of five years after they’re discontinued, but in general, IoT device-makers aren’t the most forthcoming with that information.
It’s also not clear what happens to IoT devices when their manufacturers go out of business.
In the U.S.

Read More..
AutoTextExtraction by Working BoT using SmartNews 1.02976805238 Build 26 Aug 2019