Keywords:  Security Engineering and Design, IoT,


rIoT: Quantifying IoT Costs and Harms

Kimberly Fong, Head of Legal and Policy, ipvive, inc.
Kurt Hepler, Cybersecurity Intelligence Analyst, Lockheed Martin Computer Incident Response Team
Rohit Raghavan?, DevOps Engineer, Cisco Webex
Peter Rowland, Strategist, 18F

As the proliferation of consumer Internet of Things (IoT) devices continues, so too do security problems that impact users, companies, and the Internet as a whole. But who is responsible when attacks from IoT-based threats like the Mirai Botnet cripple the Internet? This project examines the costs that insecure IoT devices pose to average consumers, and we consider how these costs should factor into how liability is assigned for damages caused by IoT botnet attacks. By quantifying real and perceived costs and risks of insecure devices, the researchers hope to help consumers make more informed decisions about the devices they purchase and encourage manufacturers to design more secure devices.