{"id":3408,"date":"2022-12-16T11:24:01","date_gmt":"2022-12-16T11:24:01","guid":{"rendered":"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/?p=3408"},"modified":"2022-12-16T11:24:01","modified_gmt":"2022-12-16T11:24:01","slug":"top-tips-to-stop-cyber-crime-ruining-your-christmas-cheer","status":"publish","type":"post","link":"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/2022\/12\/16\/top-tips-to-stop-cyber-crime-ruining-your-christmas-cheer\/","title":{"rendered":"Top tips to stop cyber-crime ruining your Christmas cheer"},"content":{"rendered":"<p class=\"lead\">With Christmas just around the corner many parents are still looking for the perfect gifts for their children. In a season that can see them spend up to \u00a31,000 on tech goods, many of us forget the risks that come with bringing new devices into the home.<\/p>\n<p class=\"s3\">As people start waking up to the risks involved with smart technology \u2013 including Parliament, which has recently approved the <a href=\"https:\/\/bills.parliament.uk\/bills\/3069\"><span class=\"s4\">Product Security and Telecommunications Infrastructure Bill<\/span><\/a> <span class=\"s5\">\u2013<\/span><span class=\"s5\"> the University of Kent\u2019s <\/span>Sarah Turner has responded to some of the main questions and concerns about staying cyber-safe this Christmas when buying new technology. Sarah is a computing expert who specialises in how UK families engage with cyber-security when using home Internet of Things (IoT) devices.<\/p>\n<p class=\"s3\"><span class=\"s6\">What is the internet of things in terms <\/span><span class=\"s6\">in relation to<\/span><span class=\"s6\"> devices and tech in the home? <\/span><\/p>\n<p class=\"s3\"><span class=\"s7\">The Internet of Things<\/span> <span class=\"s7\">is a catch-all term for any everyday object that <\/span><span class=\"s7\">can be<\/span><span class=\"s7\"> Internet-connected. <\/span><span class=\"s7\">You\u2019ll<\/span><span class=\"s7\"> often <\/span><span class=\"s7\">see them <\/span><span class=\"s7\">called <\/span><span class=\"s7\">\u2018<\/span><span class=\"s7\">smart<\/span><span class=\"s7\">\u2019<\/span><span class=\"s7\"> devices. \u00a0So, a <\/span><span class=\"s7\">smart TV, <\/span><span class=\"s7\">smart speaker,<\/span><span class=\"s7\"> smart toy,<\/span> <span class=\"s7\">or smart thermostat, for instance<\/span><span class=\"s7\">. <\/span><\/p>\n<p class=\"s3\"><span class=\"s7\">The<\/span><span class=\"s7\">se devices<\/span><span class=\"s7\"> typically <\/span><span class=\"s7\">act to make our lives more convenient but <\/span><span class=\"s7\">are especially good <\/span><span class=\"s7\">at giving<\/span><span class=\"s7\"> you a more personalised <\/span><span class=\"s7\">experience<\/span><span class=\"s7\">;<\/span> <span class=\"s7\">for <\/span><span class=\"s7\">example<\/span><span class=\"s7\">,<\/span> <span class=\"s7\">y<\/span><span class=\"s7\">our TV <\/span><span class=\"s7\">viewing<\/span> <span class=\"s7\">or heating in the ho<\/span><span class=\"s7\">me.<\/span><span class=\"s7\"> They do this by collecting<\/span><span class=\"s7\">, and then processing, <\/span><span class=\"s7\">lots of <\/span><span class=\"s7\">data about how y<\/span><span class=\"s7\">ou \u2013 and anyone else around the devices<\/span><span class=\"s7\"> \u2013 use and interact with them.<\/span><span class=\"s7\"> From our <\/span><a href=\"https:\/\/dl.acm.org\/doi\/abs\/10.1145\/3555159\"><span class=\"s8\">research<\/span><\/a><span class=\"s7\">, we found that a lot of parent<\/span><span class=\"s7\">s<\/span><span class=\"s7\"> do not understand<\/span> <span class=\"s7\">the risks of IoT devices, and they don\u2019t consider them to be a threat. <\/span><\/p>\n<p class=\"s3\"><strong><span class=\"s6\">How are families at risk because of this tech? <\/span><\/strong><\/p>\n<p class=\"s3\"><span class=\"s7\">There are three things <\/span><span class=\"s7\">that anyone planning to buy a <\/span><span class=\"s7\">smart <\/span><span class=\"s7\">device to have in t<\/span><span class=\"s7\">he home needs to consider beforehand<\/span><span class=\"s7\">:<\/span><\/p>\n<p class=\"s3\"><span class=\"s7\">1) Is everyone<\/span><span class=\"s7\"> in and around the home \u2013 adults, children, people who babysit, friends, wider family members &#8211;<\/span><span class=\"s7\"> happy with having their data collected? <\/span><span class=\"s7\">This might be their voice or videos <\/span><span class=\"s7\">of them<\/span><span class=\"s7\">.<\/span><span class=\"s7\"> It might allow for other users of the device \u2013 or people who have your <\/span><span class=\"s7\">WiFi <\/span><span class=\"s7\">password &#8211; to track their movements, see what they are watching or buying, for <\/span><span class=\"s7\">example<\/span><span class=\"s7\">.<\/span><span class=\"s7\"> You may also need to <\/span><a href=\"https:\/\/www.theguardian.com\/uk-news\/2021\/oct\/14\/amazon-asks-ring-owners-to-respect-privacy-after-court-rules-usage-broke-law\"><span class=\"s8\">ensure that your devices do not encroach on the privacy<\/span><\/a><span class=\"s7\"> of people outside of your home, like neighbours.<\/span><\/p>\n<p class=\"s3\"><span class=\"s7\">2) Are you <\/span><span class=\"s7\">confident that<\/span><span class=\"s7\"> you have bought a reputable device? Although there <\/span><span class=\"s7\">will soon be UK legislation<\/span><span class=\"s7\"> requiring some basic security measures for these devices, at present, this does not exist. This can mean that devices can be sold without having to give any thought to how to make them secure<\/span><span class=\"s7\">, and therefore how to keep you and your family safe<\/span><span class=\"s7\">.<\/span><\/p>\n<p class=\"s3\"><span class=\"s7\">3) Do you know<\/span><span class=\"s7\"> for<\/span><span class=\"s7\"> how long the device\u2019s software will be updated?<\/span><span class=\"s7\"> Devices can often<\/span><span class=\"s7\"> be sold<\/span><span class=\"s7\"> with<\/span><span class=\"s7\"> very short periods of <\/span><span class=\"s7\">supported <\/span><span class=\"s7\">software updates. <\/span><span class=\"s7\">When this stops, it means the device will not receive important s<\/span><span class=\"s7\">oftware updates <\/span><span class=\"s7\">that will<\/span> <span class=\"s7\">fix<\/span><span class=\"s7\"> software vulnerabilities<\/span><span class=\"s7\"> that can<\/span><span class=\"s7\"> leave you at risk of being the victim of a <\/span><span class=\"s7\">cyber-attack<\/span><span class=\"s7\">.<\/span><\/p>\n<p class=\"s3\"><strong><span class=\"s6\">Any specific risks to children? <\/span><\/strong><\/p>\n<p class=\"s3\"><span class=\"s7\">The major risk to children is that they, too often, get no say in devices being set up, and will not have access to apps that can control the devices, but will all too often have their data taken \u2013 with all the potential risks that that can bring. \u00a0A <\/span><span class=\"s7\">concerning<\/span> <span class=\"s7\">example from 2019 is that of an <\/span><a href=\"https:\/\/metro.co.uk\/2019\/12\/13\/santa-best-friend-hacker-breaks-ring-camera-talks-8-year-old-bedroom-11835442\/\"><span class=\"s8\">8 year old girl who was spoken to by a stranger pretending to be Santa because of a poorly configured Ring camera in her bedroom<\/span><\/a><span class=\"s7\">.<\/span><\/p>\n<p class=\"s3\"><span class=\"s7\">More generally, these devices are particularly tricky in the home. <\/span><span class=\"s7\">Often, smart speakers, <\/span><span class=\"s7\">TVs <\/span><span class=\"s7\">or games consoles, for example, exist in part to get their users to buy more products \u2013 from shopping websites, or<\/span><span class=\"s7\"> to<\/span><span class=\"s7\"> movies or games. \u00a0This can happen because the person who has the device has provided account information<\/span><span class=\"s7\"> as part of the <\/span><span class=\"s7\">set-up<\/span><span class=\"s7\"> process<\/span><span class=\"s7\"> \u2013 usually including credit card information \u2013<\/span> <span class=\"s7\">and do not realise that purchase features often <\/span><a name=\"_Int_1REmvOkE\"><\/a><span class=\"s7\">must<\/span><span class=\"s7\"> be switched <\/span><span class=\"s6\">off <\/span><span class=\"s7\">rather than <\/span><span class=\"s6\">on<\/span><span class=\"s7\">, which can be quite the expensive learning experience!<\/span><\/p>\n<p class=\"s3\"><span class=\"s6\"><strong>What are the top ways in which families can protect themselves?<\/strong> <\/span><\/p>\n<ul>\n<li class=\"s10\">Buy a reputable brand and a new device \u2013 a lack of regulation and short guaranteed software updates can mean that devices are not necessarily as secure as you might think<\/li>\n<li class=\"s10\">Make sure any passwords provided with the device, or associated technology (such as an app) are changed to a strong and unique password (see<span class=\"s4\"> the National Cyber Security Centre\u2019s guidance on using <\/span><a href=\"https:\/\/www.ncsc.gov.uk\/collection\/top-tips-for-staying-secure-online\/three-random-words\"><span class=\"s11\">three random words<\/span><\/a>).<\/li>\n<li class=\"s10\">Discuss how you are going to use the device as a family (or as people in the house)\n<ul>\n<li class=\"s10\">Are you worried about people spending money through the device?<\/li>\n<li class=\"s10\">Are you worried about people accessing inappropriate content through the device?<\/li>\n<li class=\"s10\">Does everyone feel happy about where the device is in the house?<\/li>\n<li class=\"s10\">Is everyone happy about how to turn off the device if needed?<\/li>\n<li class=\"s10\">Does the account holder know how to delete data collected by the device?<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p class=\"s3\">Once you\u2019ve had that discussion, spend some time going through the device\u2019s settings and see how you can adjust them to fit everyone\u2019s requirements.<\/p>\n<p class=\"s3\">And finally \u2013 <span class=\"s15\">consider what <\/span><span class=\"s15\">buying and<\/span> <span class=\"s15\">IoT device as a gift <\/span><span class=\"s15\">means for the <\/span><span class=\"s15\">person<\/span><span class=\"s15\"> you\u2019re buying it for, and their household<\/span><span class=\"s15\">.<\/span><\/p>\n<p class=\"s3\">Smart speakers in particular are often heavily discounted, making them seem like exciting and fun gifts<a name=\"_Int_RZJRxLaM\"><\/a>. But remember: to give the fun they promise, they take a lot from the people using them\u2026<\/p>\n<p class=\"s3\"><a href=\"https:\/\/www.kent.ac.uk\/computing\/people\/3158\/turner-sarah\"><span class=\"s4\">Sarah Turner<\/span><\/a> is a Research Student for the <a href=\"https:\/\/www.kent.ac.uk\/computing\/people\/3158\/turner-sarah\"><span class=\"s4\">School of Computing<\/span><\/a> at the University of Kent. Her research focuses on the way in which UK families engage with cyber security when using home Internet of Things (IoT) devices.<\/p>\n<p class=\"s3\"><a href=\"https:\/\/eur01.safelinks.protection.outlook.com\/?url=https%3A%2F%2Fwww.kent.ac.uk%2Fcomputing%2Fpeople%2F3103%2Fwww.kent.ac.uk%2Fcomputing%2Fpeople%2F3103%2Fnurse-jason&amp;data=05%7C01%7CH.Pullig%40kent.ac.uk%7C61bcdfaaca924c91d50908dadc24c6ec%7C51a9fa563f32449aa7213e3f49aa5e9a%7C0%7C0%7C638064347760729886%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=%2B5M1xkYvwqKe8r9oxlGmwQCpvNlfOQUY9tdL1EKCUc0%3D&amp;reserved=0\"><span class=\"s4\">Dr Jason Nurse<\/span><\/a><span class=\"s16\"> is a Senior Lecturer (Associate Professor) in Cyber Security in the\u00a0<\/span><a href=\"https:\/\/eur01.safelinks.protection.outlook.com\/?url=https%3A%2F%2Fwww.kent.ac.uk%2Fcomputing&amp;data=05%7C01%7CH.Pullig%40kent.ac.uk%7C61bcdfaaca924c91d50908dadc24c6ec%7C51a9fa563f32449aa7213e3f49aa5e9a%7C0%7C0%7C638064347760729886%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=vml2YKTvhjgZ3DmEVi4msVFIWapEjNSg3dWOiZ9wOsA%3D&amp;reserved=0\"><span class=\"s4\">School of Computing<\/span><\/a><span class=\"s16\"> and the <\/span><a href=\"https:\/\/eur01.safelinks.protection.outlook.com\/?url=https%3A%2F%2Fresearch.kent.ac.uk%2Fcyber%2F&amp;data=05%7C01%7CH.Pullig%40kent.ac.uk%7C61bcdfaaca924c91d50908dadc24c6ec%7C51a9fa563f32449aa7213e3f49aa5e9a%7C0%7C0%7C638064347760886120%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&amp;sdata=JSMg3Blueng4%2BT7Yylqw7ZJ7MbQX8Tm2zz%2FNmG%2FX3vA%3D&amp;reserved=0\"><span class=\"s17\">Institute of Cyber Security for Society (<\/span><span class=\"s17\">iCSS<\/span><span class=\"s17\">)<\/span><\/a><span class=\"s16\"> at the University of Kent. His research interests span smart home technologies, security and privacy awareness, and ways to keep people safe online.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>With Christmas just around the corner many parents are still looking for the perfect gifts for their children. In a season that can see them &hellip; <a href=\"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/2022\/12\/16\/top-tips-to-stop-cyber-crime-ruining-your-christmas-cheer\/\">Read&nbsp;more<\/a><\/p>\n","protected":false},"author":74034,"featured_media":3409,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/wp-json\/wp\/v2\/posts\/3408"}],"collection":[{"href":"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/wp-json\/wp\/v2\/users\/74034"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/wp-json\/wp\/v2\/comments?post=3408"}],"version-history":[{"count":2,"href":"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/wp-json\/wp\/v2\/posts\/3408\/revisions"}],"predecessor-version":[{"id":3411,"href":"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/wp-json\/wp\/v2\/posts\/3408\/revisions\/3411"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/wp-json\/wp\/v2\/media\/3409"}],"wp:attachment":[{"href":"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/wp-json\/wp\/v2\/media?parent=3408"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/wp-json\/wp\/v2\/categories?post=3408"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.kent.ac.uk\/unikentcomp-news\/wp-json\/wp\/v2\/tags?post=3408"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}