Are IoT Devices the New Trojan Horse in Tech?
April 17, 2019

Dirk Paessler
Paessler AG

Share this

The Trojan Horse is one of literature's most famous "Gotcha!" moments. Following 10 years of war, the Greeks constructed an enormous wooden horse and delivered it to the gate of their long-standing enemy as a sign of surrender.


The horse appeared as a trophy to acknowledge Troy's victory over Greece. Enamored by the great horse, and proud of their successful siege, Troy accepted the large structure through their gates. In the night, Greek soldiers snuck out from inside the horse and sacked Troy from within its own city walls.

People and businesses today make similar mistakes to Troy's army when they get too enamored by the latest, flashiest technology. These modern Trojan Horses work through their ability to "wow" us.

Trojans in the form of malware are still widespread, but most Internet users know how to identify them as well as how to avoid their threats. The same can't be said about IoT devices. According to TechRepublic, IoT attacks were up 600% from 2016 to 2017. They are the Trojan horses of our time.

Cybercriminals find IoT devices an easy target because they are the cool new technology on the block. Often, business owners purchase cheap IoT devices without understanding — or, for that matter, caring — if the device is secure against attacks.

Why Some IoT Devices Aren't Secure to Begin With

1. The basic design process isn't secure

Most of us don't buy smart lights because they're inherently more useful than standard lamps. We buy them because we think they're cool. We're like fish staring at any glittery object.

IoT perpetuates feelings of futuristic innovation. Who doesn't love feeling like they're from Jetsons?

That's why IoT devices are built and that's why we, as consumers, continue to buy them.

Industry IoT is better, but even we are still suckers for novelty. Paying for a better, safer IoT solution doesn't always register to us as a priority. In other words, we're in it for the novelty more than security, so that's what retailers are selling us.

2. Money, money, money

Novelty is cheaper to manufacture than security.

When shiny new technology hits the market, more people want it than can actually afford it. As time goes on, said technology becomes cheaper through competition and learned shortcuts in the manufacturing process. As the price drops, more people begin to buy.

One of those price-dropping shortcuts in IoT is minimal security.

IoT sensor prices have been dropping. According to The Atlas, they may cost as little as $.38 by next year (2020). Even industrial IoT (IIoT) manufacturers are in a fierce race to lower prices and gain market share.

This trend probably won't change until purchasing slows and consumers demand better security from IoT manufacturers. Until then, we'll pay less but we'll also be less secure.

3. Consumer don't care … yet

By the time Troy's army stopped to realize they'd let the enemy through their gate, the fight was over. Fortunately, it's not all doom and gloom for IoT users. Consumers will come around eventually and the market will change.

In the same way that we no longer stand for those internet pop-ups from the mid-2000s, we'll eventually put more care in the level of security that goes into our IoT devices as well. Our buying power will force the industry to become more secure.

Staying Secure

IoT devices can't yet be fully monitored. There's still an underlying uncertainty that remains. Traditional corporate security measure — like firewalls — don't work for protecting IoT.

A localized IT team has limited control because they cannot operate beyond their closed systems. But there are still options. Here are some ways to enjoy more comfort and peace of mind about your current IoT devices:

1. Prioritize specific data

The devices themselves don't need protection. It's the data inside them you want secure. So, back them up. Protect your most important data — the data used in apps and stored on your device — by creating a separate container.

Many companies first turn to storing this important data in the cloud. Be aware: cloud storage through a mobile IoT device may make the device ID accessible to hackers. If the cloud-based device gets deactivated, it can no longer report attacks.

2. Limit user access

The fact that IoT devices are predominantly mobile poses a challenge for averting hackers and dangerous applications. A common solution is to find a secure place to store the device ID.

From the selected secure location, managers can use login credentials (like a PIN) to determine who has access to communicate with the device. By requiring special credentials to access data from your IoT device, you can increase security by limiting who does and does not have access.

3. Be aware of radiation effects from traffic

Even the most sophisticated monitoring systems won't always directly detect whether or not a device is under attack by hackers or dangerous apps.  

However, because an IoT device tends to become part of a network, it can identify hacks and viruses through radiation effects. The network distributor enables a monitoring tool to recognize unusually high amounts of data traffic on a specific port, as well as unusual traffic patterns within the network. These situations should send a warning to the sysadmin, protecting your device from trusting hackers — in the form of a modern Trojan Horse — as they try to sneak through your digital gate.

IoT security is still a new field. The level of care in the market will hopefully grow quickly, which will lead to demand for a higher standard of security in IoT devices. Until then, take extra precautions to ensure your data is secure.

Share this

The Latest

January 26, 2023

As enterprises work to implement or improve their observability practices, tool sprawl is a very real phenomenon ... Tool sprawl can and does happen all across the organization. In this post, though, we'll focus specifically on how and why observability efforts often result in tool sprawl, some of the possible negative consequences of that sprawl, and we'll offer some advice on how to reduce or even avoid sprawl ...

January 25, 2023

As companies generate more data across their network footprints, they need network observability tools to help find meaning in that data for better decision-making and problem solving. It seems many companies believe that adding more tools leads to better and faster insights ... And yet, observability tools aren't meeting many companies' needs. In fact, adding more tools introduces new challenges ...

January 24, 2023

Driven by the need to create scalable, faster, and more agile systems, businesses are adopting cloud native approaches. But cloud native environments also come with an explosion of data and complexity that makes it harder for businesses to detect and remediate issues before everything comes to a screeching halt. Observability, if done right, can make it easier to mitigate these challenges and remediate incidents before they become major customer-impacting problems ...

January 23, 2023

The spiraling cost of energy is forcing public cloud providers to raise their prices significantly. A recent report by Canalys predicted that public cloud prices will jump by around 20% in the US and more than 30% in Europe in 2023. These steep price increases will test the conventional wisdom that moving to the cloud is a cheap computing alternative ...

January 19, 2023

Despite strong interest over the past decade, the actual investment in DX has been recent. While 100% of enterprises are now engaged with DX in some way, most (77%) have begun their DX journey within the past two years. And most are early stage, with a fourth (24%) at the discussion stage and half (49%) currently transforming. Only 27% say they have finished their DX efforts ...