Segurança e Privacidade na massificação da Internet dos Objectos

Abstract

The term "Internet of Things"refers to the idea of a global network that interconnects a vast group of equipments, that goes far beyond from the traditional personal computers and servers, to the Internet. This concept is here to stay and is the basis of the recent wave of devices that recently reached the market and many of them are already part of our daily lives. From the smartmeters, used to improve the energy management of residences, to the wearables that follow us through the day and that, for example, monitor our health. All of them have an aspect in common, the fact that directly or indirectly they communicate with a global network. In this new reality, an important question that must be asked is how much do we trust these devices. Given their ubiquity and depending on their utility, a simple defect that could be exploited by an external entity or some negligence in the treatment of the collected information, can a ect the privacy and security of its users. This work analyses some security aspects of a group of these devices that already are in the market and the guarantees they o er in the eventuality of being targeted by an attacker trying to violate the security and privacy of the device's users. From the tests made to this small sample of the devices, some security issues were found and mitigation strategies provided for them. Also, a setup mechanism with focus on security is proposed to devices that need Wi-Fi access to the local network, where the process the executed by the user.