2018 Survey on Policy in Asia-Pacific: We Need to Do Something About IoT Security Thumbnail
Internet of Things (IoT) 27 November 2018

2018 Survey on Policy in Asia-Pacific: We Need to Do Something About IoT Security

By Noelle Francesca De GuzmanDirector, Policy and External Engagement

Earlier this year, we asked Internet users across Asia-Pacific just how secure they thought their smart gadgets were. The findings, gathered from 950 respondents in 22 economies, yielded some interesting insights. Over half of those polled lack confidence that IoT devices are sufficiently secure. A similar percentage feel that they do not have enough information on the security of their device.

As connected devices move into our personal spaces – homes, offices and our bodies – amassing more and more data about us and our activities at a dizzying pace, our report, published last week, highlights how much work still needs to be done to build trust in the Internet of Things (IoT) ecosystem.

Asia-Pacific is undoubtedly a major area of growth for the IoT industry, with countries like China and India rapidly becoming some of the biggest markets for consumer IoT devices. We are also a formidable producer, with established brands like Xiaomi and Samsung churning out wearables, smart appliances, and virtual assistants, and numerous startups joining the fray.

Indeed, the report found that a substantial number of respondents already own IoT devices, with a further 73% planning to purchase an IoT device in the next 12 months. But this enthusiasm can’t conceal the fact that most IoT devices land on our shelves without adequate security and privacy safeguards, making them vulnerable to information leaks and attacks by cybercriminals. Incidents like the Mirai botnet in 2016, which essentially exploited unsecure CCTVs whose default passwords hadn’t been changed, gave us a preview of things to come. Connected toys listening in on conversations at home, or smart speakers that can make online purchases without the owner’s knowledge, were just some of the security flaws exposed by researchers this year.

And consumers are waking up to these risks: More than two-thirds of survey participants worry about hackers gaining access or taking control of their devices and personal information. A similar percentage are concerned about personal data leaks and being monitored without their knowledge or consent.

Security certainly is a shared responsibility – users also need to take steps to keep their devices secure. But as we found in the survey, there are currently not enough tools available for them to do this. For instance, over 70% of respondents would like the option to delete the data collected by the device, and to know more about how it is used and who it is shared with, overall demanding more control over their personal information.

This task falls primarily on device manufacturers and IoT service providers. Significantly, nine in ten respondents would like for security and privacy protections to come as standard across all IoT devices, with two-in-three respondents citing this as a key factor that would influence their purchasing decision.

For governments, one of the ways to steer industry in the right direction is to promote the use of trustmarks – visible indicators to signal that a product abides by a set of security standards. This is already a widespread practice in the food sector (e.g., fair trade) and among electronics and equipment suppliers (e.g., energy star). Tellingly, more than 90% of respondents stated that they are likely to purchase IoT devices that have a security guarantee (through a trustmark or certification label).

The connected environment promises convenience, efficiency, and unimaginable insight, and we are only just skimming the surface of its potential. Unsurprisingly, IoT is set to reach an important milestone next year, with consumer IoT devices exceeding the global population for the first time. It is a remarkable growth – one that is surpassed only by the threats that are increasingly tailored to exploit its weaknesses.

The connected future is here. Let’s make sure it’s secure. #GetIoTSmart

Disclaimer: Viewpoints expressed in this post are those of the author and may or may not reflect official Internet Society positions.

Related articles

Building Trust 5 December 2019

Rural Development Special Interest Group Organizes Internet Connectivity Tag 2019

In November, the Internet Society Rural Development Special Interest Group (RD SIG) organized an event called the Internet Connectivity Tag 2019 in Bangalore,...

Building Trust 14 November 2019

IoT Security Policy Platform Wants to Raise the Bar On Global IoT Security

By next year, five Internet of Things (IoT) devices are projected to be in use for every person on...

Building Trust 2 October 2019

Celebrating National Cybersecurity Awareness Month

Every October, we mark National Cybersecurity Awareness Month. From the U.S. Department of Homeland Security website, “Held every October,...