With the rapid development of technologies such as 5G, AI, big data, cloud storage, and the advent of the Internet of Things, consumers have put forward increasingly high requirements for quality life, and various connected consumer appliances are constantly emerging (such as smart refrigerator , smart cameras, smart door locks, smart TVs, wearable health trackers, etc.). However, since the Internet-connected consumer appliances are connected to the Internet, once the information security vulnerabilities in these devices are exploited, they can lead to security risks such as device registration, user privacy leakage, data theft, etc., and may even have serious impacts on the basic communication network. Taking home smart cameras as an example, various media have reported that the privacy of surveillance videos of smart cameras has been exposed and family personal information has been leaked; some smart camera cracking methods, accounts, and passwords are openly sold online, seriously threatening people's privacy and the safety of life and property. As a consumer, how should we choose a secure smart camera?
For this reason, the China Consumer Product Quality and Safety Promotion Association purchased more than ten smart cameras that consumers are most concerned about from the market. According to technical standards such as "Network Consumer Electrical Appliance Information Security Evaluation Requirements Smart Camera", it conducted comprehensive testing, analysis and risk assessment from the perspective of information security protection. By establishing a standard system and certification mark, consumers can choose Internet-connected consumer electrical products that suit them, protecting their families while protecting themselves.
After systematic detection and analysis, the smart camera under test generally has certain information security protection capabilities, but among the 12 products under test, there are still 7 products with more than 10 security problems. These issues are mainly concentrated in seven security levels that consumers care about (hardware security, firmware security, application security, system security, network security, data security, and personal information protection). Among them, multiple security issues such as application security, data security and system security are very likely to cause harmful events and cause different degrees of personal and property losses to consumers. The specific details are as follows:
1) Hardware interface exposure
Most manufacturers have reserved debugging interfaces for products on sale. Criminals can easily obtain the highest authority of the device through this interface and implant malicious programs (malicious deduction of Trojans, viruses, etc.). Once the smart camera is lost or stolen and falls into the hands of criminals, it will cause mental and property damage to equipment manufacturers and consumers.
2) Weak password
Some smart cameras lack the management mechanism of account passwords, and the complexity of accounts and passwords is low. People with ulterior motives can easily obtain the management permissions of smart cameras through guessing or tool testing, and then perform voyeurism and infringement. What's more, criminals also marked the stolen account passwords and sold them online publicly to seek improper benefits, resulting in user privacy leakage and manufacturer's assets losses.
3) Information leakage
Some of the smart cameras exposed security vulnerabilities may cause the camera to be maliciously manipulated by criminals. Smart cameras will become "privacy snoop" for criminals, and users' daily home life scenes may become "online live broadcast scenes" for criminals, seriously infringing on users' home and personal privacy and seriously endangering the healthy development of society.
Information security is related to people's livelihood and well-being. As a social organization directly managed by the State Administration for Market Regulation, the China Consumer Products Quality and Safety Promotion Association will earnestly fulfill its responsibilities in promoting the improvement of consumer products in my country's consumer products. In response to the problems that have been found in the research and testing of smart cameras, we will carry out smart camera product information security vulnerabilities reporting, certification implementation and defect recall management, and coordinate with multiple parties, jointly prevent and control, improve the full-process management mechanism of product information security, help consumers reduce the information security risks during product use, and create a real home security guard.
Source: Zhongxiaohui
