As the proliferation of consumer Internet of Things (IoT) devices continues, so too do security problems that impact users, companies, and the Internet as a whole. But who is responsible when attacks from IoT-based threats like the Mirai Botnet cripple the Internet? This project examines the costs that insecure IoT devices pose to average consumers, and we consider how these costs should factor into how liability is assigned for damages caused by IoT botnet attacks. By quantifying real and perceived costs and risks of insecure devices, the researchers hope to help consumers make more informed decisions about the devices they purchase and encourage manufacturers to design more secure devices.
