80% smart home sampling camera security risks

On December 5th, the Fourth World Internet Conference released the annual achievement document “Wuzhen Outlook”, pointing out that emerging issues such as the development, application of the next generation Internet, and the transformation of the digital economy have become new governance hot spots.

More than 100 smart cameras, more than 300 smart rice cookers, and more than 1,000 yuan sweeping robots are not expensive and convenient experience, allowing more and more people to take a taste of smart living convenience.

However, along with the integration of smart devices represented by everyday life, leakage of personal privacy, threats to life and property, and other security alarms are frequently heard, causing consumers to suffer losses and plaguing the long-term development of the industry.

Smart home hidden risk 80% sampling camera security risks

Fingers tap, "click" sound, smart door locks have been opened; smart air conditioning to make the room temperature suitable; sweeping robots to clean the house as tidy as new; smart rice cookers and smart oven, a meal is hot and ready to go out Pots; smart TVs and smart speakers only wait for “send orders” and they will deliver wonderful programs... The scenes that once appeared in sci-fi movies are becoming more and more people’s daily routine.

With the large-scale application of 5G communication technologies and the Internet of Things, everything is about to become a reality. Market institutions expect that by 2020, there will be 50 billion IoT devices worldwide; the overall size of global smart homes will increase from the current 10 billion U.S. dollars to 50 billion U.S. dollars, and China may become the largest in Asia before 2020.

Although smart home devices can bring a convenient and comfortable life experience, the security risks behind them cannot be ignored either.

In June, the Department of Product Quality Supervision of the General Administration of Quality Supervision, Inspection and Quarantine of the People's Republic of China (AQSIQ) collected 40 samples of 38 brands from the market for monitoring against possible information security hazards of smart cameras. The results show that 80% of batches have potential safety hazards. Some sample back-end information systems have an ultra vires vulnerability, and videos of any user's camera can be viewed in the same platform; some samples allow users to arbitrarily view or download user registration information and monitoring videos stored in the back-end information system.

In September, during the 2017 China Internet Security Conference, the decoding security team demonstrated how to implement remote control for specific smart home devices: the smart light is turned on and off in the room, and the smart camera's shooting angle is no longer controlled by the owner. The smart door lock password is also Can be accessed remotely.

The "China Internet Security Report 2016" released by the National Computer Network Emergency Response Center shows that in recent years, with the rapid development and popularization of terminal devices and network devices such as smart wearable devices, smart homes and smart routers, the Internet of Things has been used for intelligence. The proportion of cyber attacks on equipment is on the rise.

Black industry emerges as smart devices for "thief" and "spy"

"I can see you at all times and I have no thoughts. You can see what you want to see."

On an e-commerce platform, a smart camera with monthly sales of nearly 10,000 units uses this phrase as a slogan. Keeping an eye on the dynamics of the elderly, children, and pets at home and everywhere on the mobile phone, or realizing remote home viewing, shop watching, and car watching, is the original intention of many people buying smart cameras.

At the beginning of August, Ms. Huang of Chongqing took a look at her pet dog and set up a smart camera in the living room. Through the mobile phone, she could easily see the real-time picture of the living room. One day, Ms. Huang suddenly found her home camera is moving, immediately open the computer background view, found that in addition to his own account, there is a strange user monitoring the camera information.

According to previous media reports, only by paying 188 yuan, you can get software that can play home camera shooting content, enter the appropriate IP address, login name, and password, you can successfully login to the camera, remote viewing real-time monitoring screen, and even the screen can be enlarged Zoom out. In some QQ groups, the cracked IP address will even be used as a popular gift by the group owner and distributed to the group members free of charge.

In July, the Beijing police cracked down on the nation’s first online video camera software to crack the family, destroyed a chain of crimes, and arrested 24 people involved. The party involved in the case and Zhao illegally purchased the camera to crack the software, cracked the IP address of the webcam, and watched the content saved or sold by the camera.

For hacked camera information, hackers do not follow suit. In July, police in Lishui, Zhejiang Province, seized nearly 10,000 IP addresses of intruded family cameras, involving Yunnan, Jiangxi, and Zhejiang. According to the suspicion of the suspect Wang, if the camera's monitoring screen is facing the living room, it is not necessary; if it is in front of the bedroom, bathroom and other private places, the price is 10 yuan; if it is "premium" of the so-called "boutique", you can sell it. 20 yuan, but also sold in the cloud disk many times.

"From a legal point of view, smart home devices have been cracked, resulting in users' information being shared and sold, mainly in violation of the user's right to privacy." General Principles of Civil Law "Criminal Law Amendment (9) "Tort Liability Act" "Network Security Law "And so on, have made specific provisions on the protection of citizens' privacy rights and personal information," said Zhu Xi, deputy director of the Communication Law Research Center of China University of Political Science and Law.

In addition to acting as a “spy” for prying privacy, a malicious home that is maliciously controlled may also become a “thief” or even “robber” at home. Han Weili, deputy dean of Fudan University's School of Software, introduced that the security problems in smart homes are all-round: in addition to the disclosure of personal information, smart home devices may lose their functions or functions, causing loss of family property; Maliciously controlled smart home devices that carry out personal attacks and cyber attacks.

For example, a malicious toy that is maliciously controlled may induce children to open doors, climb out of the balcony, and other dangerous actions; the cracked smart locks and smart safes become a thief “inside”, stealing family property such as scrounging; The temperature can be increased arbitrarily, eventually causing fire; smart homes may also be controlled to form large-scale "botnets" that attack web servers, causing widespread paralysis of Internet services.

Safe fences need to be replaced to increase technical input technology

On November 22nd, the China Light Industry Federation and the China Household Electrical Appliances Research Institute jointly announced the launch of the standard development work for the smart home community. People in the industry believe that it is not possible to re-emphasize function and light security. The safety standards for smart home products should be introduced as soon as possible, and the credit mechanism for corporate privacy protection should be explored.

"To solve the security problem of IoT smart home applications, we must first increase investment in system security technologies and use technology confrontation technologies." Han Weili said, "Analyzing the possible security problems of smart homes and clarifying their essence is a very complicated matter. Serious scientific issues require researchers to combine the technology itself with the actual application and invest a lot of manpower and material resources to carry out extensive and in-depth work, which is often ignored by industrialists in the smart home and internet of things field.”

Zhang Yanlu, R&D director of the Xiaomi IoT platform, frankly stated that there are many categories of smart home devices, and the usage scenarios are complex and have certain technical thresholds. The safety design of products must be comprehensive. Enterprises need not only sufficient technical strength, but also experience and cost. At present, products on the “Platinum” platform use built-in unique keys, and customize security hardware for smart devices such as smart locks to ensure security. These technologies are also open to the public.

The National Computer Network Emergency Response Center recommends that smart device manufacturers should ensure the safety of the equipment throughout its life cycle, formulate a sound network security emergency preparedness plan, and provide on-line upgrade capabilities when it finds loopholes in a device or is implanted with malicious programs. Or promptly notify the user to manually repair.

The problem of smart home security is a system problem that requires coordination of technology, management, and laws and regulations to ensure the healthy development of the entire industry. The "Network Security Law" implemented on June 1st, and the Supreme People's Court and the Supreme People's Procuratorate's "Interpretation of Issues Concerning the Application of Law in Handling Criminal Cases of Infringement of Citizens' Personal Information" further woven into the "safety net" for smart homes.

"The "Network Security Law" has both preventive precautions and remedy, and regulations have been made in terms of system, technology, supervision, and evaluation." Zhu Xi said that when users use smart homes, they are infringed; The difficulty is to find the real infringer. "It is recommended that adjustments be made in the burden of proof. If individual users have difficulty in submitting evidence, the corresponding platforms and vendors shall bear the burden of proof." (People's Daily)

KNB1-100 Miniature Circuit Breaker

KNB1-100 Mini Circuit breakers, also named as the air switch which have a short for arc extinguishing device. It is a switch role, and also is a automatic protection of low-voltage electrical distribution. Its role is equivalent to the combination of switch. Fuse. Thermal Relay and other electrical components. It mainly used for short circuit and overload protection. Generally, According to the poles, mini Circuit breaker can be divided into 1P , 1P+N , 2P, 3P and 4P.


KNB1-100 Miniature Circuit Breaker,Electronics Miniature Circuits Breaker,Automatic Miniature Circuit Breaker,Mini Circuit Breaker

Wenzhou Korlen Electric Appliances Co., Ltd. , https://www.zjmoldedcasecircuitbreaker.com

Posted on