Just one in 10 IoT devices offer adequate security, warns research

Just one in 10 Internet of Things (IoT) devices has adequate security, underlining the risks posed by the rise in connected devices, according to security experts.

The IOActive IoT Security Survey warned that many IoT devices, especially those with a consumer focus, lack the security needed to ensure they are not at risk of being hacked using simple tactics.

The figure comes from a panel of senior security professionals interviewed by IOActive about the rise of the IoT.

They raised concerns that security is lacking in everything from wearables to household appliances, echoing concerns V3 has covered before.

Half of respondents believe that under 10 per cent of IoT products offer adequate support, while a staggering 85 per cent believe that less than half of products are secure.

Around two thirds felt that the security is probably better than you get on other products.

"Consensus is that more needs to be done to improve the security of all products, but the exponential rate at which IoT products are coming to market, compounded by the expansive risk network created by their often open connectivity, makes IoT security a particular concern and priority," said Jennifer Steffens, chief executive of IOActive.

"According to Gartner, 21 billion connected things will be in use by 2020. It's important for the companies that develop these products to ensure security is built in. Otherwise hackers are provided with opportunities to break into not only the products, but potentially other systems and devices they're connected to."

The problem is that security is not considered early enough in the design process so it has to be dealt with later, or presumably not at all.

"Companies often rush development to get products to market in order to gain competitive edge, and then try to engineer security in after the fact," she said.

"This ultimately drives up costs and creates more risk than including security at the start of the development lifecycle."

The rise in risks posed by IoT devices means that security spending on the IoT will reach a hefty $348m in 2016, according to Gartner, an increase of 23.7 per cent on the $281.5m in 2015.