- [Instructor] Let's briefly talk about
the Internet of Things.
The Internet of Things, or IOT,
can pertain to any device that can connect
and communicate over the internet.
More specifically, most people
and technology companies use the term Things,
to refer to home automation devices
and smart kitchen appliances
and voice activated digital assistance,
and similar things.
We consider them to be Things that go beyond
the standard devices such as desktop PCs,
laptops, smartphones, and tablets.
We use the extremely weak term, Things,
because it's a loose definition
and it fits perfectly in this scenario
because there are so many different gadgets
within the category.
IOT devices include thermostats, light switches,
security cameras, door locks, refrigerators,
and other appliances and smart speakers.
Configuration of these is usually intuitive.
Let's take a look at a basic IP based camera now.
And I've got the camera here.
So this is just a basic camera that can be mounted,
can be mounted upside down, or what have you from here.
And if we look, it is powered via USB.
It's got a little uh, SD slot.
If you want to save any of the images or recordings
and it has a reset button here as well
just in case you need to reset
to the original factory defaults
in case you can't get in.
Let's say, if you can't remember your pin or password, okay.
So, a pretty basic device.
And over here on the smartphone, I have the software,
the app that's used to control it.
So we can control this and view what's on the camera,
you know, from anywhere in the world, basically
as long as you have an internet connection.
So it's cloud based.
This is cloud based.
So you have to be careful with cloud based technologies.
You wanna make sure
that you're using a reputable manufacturer
that you're watching your connection,
watching the information that you put in.
Be careful with what the camera's actually looking at,
what you're displaying on the camera.
And try to use a passcode or some type of pin.
Here we have the phone and the device, so we can show this.
And this particular camera is called Office.
And if we tap on that,
we'll have to actually enter a pin in there.
So I'm gonna do that now.
And that'll start connecting.
So what this is doing is,
it's going through the smartphone
and the smartphone's wifi connection
out to the internet and back, and to the internet here,
and the wifi and connecting to this device
and then looking out and you can see some gear here.
Right? I was thinking of using this device right here
to program it, but just wasn't compatible.
Anyways, we've got our device here and it's working.
We can use the controls here to move the camera
but what we're interested in is the settings.
So if we tap on settings here,
you'll see that you can turn the device on or off.
And that's one of the things that you want to do.
If it's not necessary,
turn the device off whenever it's not needed.
Then if we go to camera settings here
You'll see the firmware version at the bottom.
And that firmware version, you wanna make sure
that is up to date.
This one is, but you know, some of the devices will not
tell you when a new firmware version is available.
Some of them will let you know, but maybe not
in a very strong manner.
Uh, this particular device lets you know,
and it's, it's showing in red
and you actually can't do certain things within the settings
until you update the firmware.
So it kind of locks you into updating the firmware
on this device to try to keep them more secure.
And if we go back,
you'll see down here you can set the pin as well.
So you can enter in a pin number.
So at least it's something.
All right. So that's basic configuration of this device
And pretty straightforward, you know,
with a device like this
and I have other cameras set up as well,
you wanna make sure
that you're setting this device up in a secure manner.
So let's talk about that a little bit.
The, the whole important part of IOT
is how devices are connected to the SOHO network
and how they are secured.
That's because they all connect out to the internet
and the apps that control them may or may not have
the most brilliant programming.
And then you have security vulnerabilities.
So I have a nine step list here of what you can do
to try to protect your IO2, your IOT devices
and your wireless network and your network in general.
And so those are,
one, update the firmware on the SOHO router.
Make sure that you've updated that firmware.
Very important because the SOHO router could be used
as an attacking device as well.
If it's not up to date.
There's always vulnerabilities being found on routers.
Then, create a separate network.
One good method is to use the guest network.
I do that a lot. But some wireless access points
have multiple networks that you can set up.
You could use one of those networks
for these types of devices.
But the guest network works as well.
That works well in the small office or in the home.
So you set up that separate network
and you place the IOT devices on that network,
configure strong encryption.
For example, WPA2 with AES.
And use a separate passcode from the main wireless networks.
Consider disabling universal plug and play, UPnP.
That can make a user's life easier as far as
discovery of devices and so on,
but it can create security vulnerabilities if it is running.
Four, update the firmware on the IOT devices, right?
Update the firmware on the IOT devices, I showed that.
Showed where to go, it's generally right in the settings.
And a lot of these devices will prompt you to do it
and make sure you get it done
before you take any further action.
Five, use strong passwords.
I think I say this every hour or so of every day.
But different passwords as well.
Different passwords should be used
for the main login to the SOHO router.
Also a different password for the guest wireless network.
And a different password for the IOT devices themselves.
If the IOT device only has the option for a pin,
you're only gonna have 10,000 possible combinations,
but it's better than nothing with a four digit pin.
So use it.
Number six, update the operating system.
Update the operating system on the mobile device.
You know, if you're running Android or iOS
or the other computer that's used to configure
and control the IOT devices.
Update the app that's used to control the IOT devices.
You know, that may not even show up.
You know, you might update the firmware here
and that's great, but the app itself
on the mobile device might need some separate updating.
So you have to watch for that.
Next, use only what you need.
Use only the devices that are absolutely necessary
and disconnect or turn them off when they're not needed.
And nine,
carefully select and monitor cloud-based connections.
If your device relies on the cloud for control
then be very careful with the manufacturer you select.
You know, you might have a device
that connects to your wireless network
and you are connecting directly to it via the IP address
or through DNS to your router.
But if it's cloud based
you have to be very careful,
careful with the manufacturer you select,
the information you give.
You know, you wanna watch out
for personally identifiable information, PII,
as well as the actual connectivity
that's made to the device.
Every connection into your network
increases the attack surface
and it creates new vulnerabilities.
So there's a little bit about IOT.
There are so many types of devices
within the Internet of Things, and it's growing every day.
These devices are used in homes, vehicles,
the medical industry, transportation,
manufacturing, you name it.
They include devices that have embedded electronics
like sensors and so on.
We don't even know all the devices that are out there,
it's growing so quickly.
And because of the inherent security vulnerabilities
found in many IOT devices,
many companies will frown upon their use.
So you have to be ready to check
for an approved list of devices that you can use at work.
And that's it for this video.