Senate bill demands tougher security for the Internet of Things

Security among Internet of Things devices is bad enough at home, but it’s downright scary in government, where a vulnerable security camera could lead to hackers stealing vital secrets. A bipartisan team of US senators wants to reduce the chances of ever happening. They’re introducing a bill, the Internet of Things Cybersecurity Improvement Act, that mandates a base level of security standards for any IoT gadgets used in government. The would-be law is there mostly to ensure that vendors don’t get away with rookie mistakes that leave their devices wide open to attack.

The legislation would require that devices support patches and password changes, and are free of known exploits. To that end, security researchers would have greater legal protection when they’re hacking devices to find those exploits. The government would be allowed to ask for permission to buy devices that don’t meet all the requirements, but only if they’re fenced in through network isolation, operating system containers or other tricks that prevent attackers from doing much damage.

There’s no guarantee that the measure will become law. There’s a corresponding House bill already in the works, however, and Senator Mark Warner stresses that they’re aiming for the “lightest touch” possible. This is more about raising the bar for IoT gear than a narrow set of expectations. If it does take effect, though, it could have an effect well beyond government. Some companies are likely to sell their connected devices to both home and government users, and scoring a lucrative government contract could require that they improve the baseline security for everyone.

Via: Reuters

Source: Senator Mark Warner

Source: Engadget - Read the full article here

Author: Daily Tech Whip

This article is part of our 'News Tiles' service. The site is currently in Beta. When it is fully operational you will be able to search through and arrange the 'Tiles' to display a keyword, product or technology over your chosen time period. For example you would be able to display all of the leading tech articles on the new Kindle Fire, in one spot in real time. You will also have access to our own original reporting and analysis as well as a polished place to post your own thoughts & reviews here, amongst the Daily Tech Whip Community. Please let us know if you have any feedback via the contact form or via Twitter. Don't forget to come back next week and see our full site and claim your name and your own free tech blog.

Share This Post On