In World of Internet-Enabled Things, US Says Security Needed

The Obama administration urged companies on Tuesday to make millions of devices safe from hacking, underscoring the risks posed by an increasingly bewildering array of internet connected products permeating daily life, covering everything from fitness trackers to computers in automobiles.

In a report obtained by The Associated Press, the Homeland Security Department described runaway security problems with devices that have been made internet-capable in recent years, a group that includes medical implants, surveillance cameras, home appliances, digital video recorders, thermostats and baby monitors.

It said they posed “substantial safety and economic risks,” recommending immediate action by software and hardware developers, service providers, manufacturers and commercial and government buyers. No specific penalties were proposed for manufacturers failing to comply. No blame was placed on consumers buying and operating such products.

“The growing dependency on network connected technologies is outpacing the means to secure them,” Homeland Secretary Jeh Johnson said.

The department’s strategy represents an attempt to organize the so-far scattered cyber security efforts for the category of devices known as the “internet of things.” It comes less than a month after hackers harnessed an army of 100,000 internet-connected devices around the world, such as DVR's and security cameras, to attack Dyn Co., which helps route internet traffic to its destination. It caused temporary internet outages to sites that included Twitter, PayPal, Pinterest, Reddit and Spotify.

Such threats are likely to increase, U.S. officials warn.