| Abstrakt: |
Starting with an examination of the Mirai botnet, this article discusses the ongoing proliferation of "crime-as-a-service" and its facilitation by insecure and/or defectively coded Internet of Things (IoT) or "smart" devices. Owing to their monoclonal nature and near ubiquity, IoT device life expectancy will likely diverge from the expected viability of embedded device code. The risk of widespread product liability arising from this divergence offers manufacturers three choices: upgrade device code (at substantial recurring cost), let such devices become orphaned, or disable them altogether. Current recommendations for addressing this issue, all of which provide sub-optimal resolution, range from the impractical and expensive (notification of defects and/or vulnerabilities) through and including firmware updates and device/object sunsetting or disabling. [ABSTRACT FROM AUTHOR] |
