Make ‘smart’ devices hack-proof, says Govt

Manufacturers of ‘smart home’ devices have been given Government advice on how to make their gadgets safe from attack by hackers, as fears grow about how vulnerable they are.

Ministers working with experts at the National Cyber Security Centre (NCSC) have drawn up a voluntary code of practice to cover gadgets that aren’t computing devices, but still require an internet connection.

Often called the ‘Internet of Things’, such devices include smart TVS, doorbells, smartwatches, security cameras, toys and burglar alarms. There are expected to be 420 million in use in the UK by 2021.

The guidance encourages companies to “embed security in the design process of new technology rather than bolt it on as an afterthought”. It contains 13 steps to boost protection, including securely storing customer data, and requiring users to choose stronger passwords.

Two companies have so far agreed to follow the code - computer and printer manufacturer HP, and Hive Centrica, which makes smart thermostats and security cameras Dr Ian Levy, the NCSC’S Technical Director, said retailers should stock only devices that meet these standards so consumers “can trust that the technology they bring into their homes will be properly supported throughout its lifetime”.

Malware attacking smart devices tripled in the first half of 2018, according to Kaspersky. David Emm, the company’s principal security researcher, warned that “even if vendors improve the security of devices currently on the market, it will be a while before old, vulnerable devices have been phased out of our homes”.