Security review on the Internet of Things

This paper looks at Internet of Things devices from a security perspective to help provide an understanding on the impact Plug and Play Internet of Things devices have on organizations and Home networks. Such devices which are common within IoT are Internet connected devices such as mobile phones, routers or fridges. The papers key areas are to focus on the attack surface such as Malware within the Internet of Things domain, poor web interfaces which are exposed to the Internet, improper network connectivity and default credentials being used after purchase. In addition to discussing the attack surface, the paper looks at security best practices and outlines how to properly administer and manage IoT devices within controlled networks such as private organizations, government and home networks. This focuses on reasons for allowing such devices as well as guidance for best practices through the developing, manufacturing and consumer life cycle.