An official website of the United States government
A .mil website belongs to an official U.S. Department of Defense organization in the United States.
A lock (lock ) or https:// means you’ve safely connected to the .mil website. Share sensitive information only on official, secure websites.

Your Daily Cyber Life

  • Published
  • By SMSgt Douglas Brock
  • 379th Expeditionary Communications Squadron

The notion of a device smaller than a deck of cards capable of storing four times as much data as the main U.S. control computers on the International Space Station would have seemed unthinkable 20 years ago. However, we live in an age where the electronics we use in our daily lives can do just that, and more. In this article we’ll define the Internet of Things (IoT) and focus on the hottest wearable device at the moment, the Smart Watch, and how you can protect yourself from the potential threats they pose to your privacy.

The IoT is defined as an environment in which objects, animals or people are provided with unique identifiers and the ability to transfer data over a network without requiring human-to-human or human-to- computer interaction” [1]. About six years ago the number of IoT devices connected to the Internet surpassed the number of people on the planet at around seven billion, and some estimate that number will grow to 25 billion in 2020 [2]. So the question remains; how can you stay connected and still stay protected? Let’s look at one device in particular, the Smart Watch, a wearable device that mimics the functionality of most modern day smartphones. On the surface Smart Watches seem harmless; however individuals with the right amount of time and the right tools to access your personal device may prove these devices too big a risk to your personal information.

A recent article on networkworld.com cites several potential vulnerabilities in many of the most popular Smart Watch models. Of particular concern are their findings that two of the ten devices allowed a thief to pair the device with their smartphone, unbeknownst to the user, via the Bluetooth wireless protocol [3]. Unfortunately, lax authentication techniques are just the tip of the iceberg. The team also discovered all of the ten devices they studied collected personal information that could be easily accessed via other security vulnerabilities [3]. Even more troublesome was the fact that hackers have created a homegrown app with the ability to identify what you’re typing just by looking at the motion sensors on the device; going as far as being able to differentiate between an “f” and a “t” as you type [4]. So how can you protect yourself? First, don’t store anything on your Smart Watch you wouldn’t want anyone within Bluetooth wireless range, about 100 meters, to access. Second, do research before you purchase your device and be wary of storing sensitive information such as bank passwords. Just because a product is from a seemingly reputable company doesn’t mean they didn’t rush it to market without taking into consideration the safety of your personal information.

It seems as if I’ve painted a dire landscape depicting an army of Smart Watch hackers, and billions of other devices, waiting in the shadows to exfiltrate your most valuable information. The truth is it’s really not that bad at the moment. With plans to bundle antivirus programs and advanced encryption algorithms into their future models, manufacturers are keenly aware security is no longer an afterthought to functionality. As you navigate the sea of available products, your best bet is to stay vigilant and never take for granted the power of that network-aware refrigerator or tiny computer you wear on your wrist to expose your personal information.  

 

 

 [1] STAFF, F. T. C. (2015). Internet of Things: Privacy & Security in a Connected World. https://www.ftc.gov/system/files/documents/reports/federal-trade-commission-staff-report-november-2013-workshop-entitled-internet-things- privacy/150127iotrpt.pdf. Accessed 2015

 

[2] Gartner, J. (2014, November). Gartner Says 4.9 Billion Connected. "Things" Will Be in Use in 2015. http://www.gartner.com/newsroom/id/2905717. Accessed 2015

 

[3] Paul, F. (2015). Do smartwatches really pose a security threat in the enterprise? Network World. http://www.networkworld.com/article/2953480/mobile-wireless/smartwatch-security-report-apple-watch.html. Accessed 2015

 

[4] ND, N. D. (2015). Smartwatch Vulnerabilities •. The hack times Breaking Hacker news. https://thehacktimes.com/smartwatch-vulnerabilities/. Accessed 2015