Implications of The Internet of Things Connectivity Binge - Pew Research Center

6/8/2017 ImplicationsofTheInternetofThingsConnectivityBinge|PewResearchCenter
TheInternetofThings
ConnectivityBinge:
WhatArethe
Implications?
Despitewideconcernaboutcyberattacks,
outagesandprivacyviolations,most
expertsbelievetheInternetofThingswill
continuetoexpandsuccessfullythenext
fewyears,tyingmachinestomachines
andlinkingpeopletovaluableresources,
servicesandopportunities
BYLEERAINIEANDJANNAANDERSON
Connectionbegetsconnection.In1999,18yearsago,whenjust4%oftheworldspopulationwas
http://www.pewinternet.org/2017/06/06/theinternetofthingsconnectivitybingewhataretheimplications/ 1/46
Connectionbegetsconnection.In1999,18yearsago,whenjust4%oftheworldspopulationwas
online,KevinAshtoncoinedthetermInternetofThings,NeilGershenfeldofMITMediaLabwrote
thebookWhenThingsStarttoThink,andNeilGrosswroteinBusinessWeek:Inthenextcentury,
planetEarthwilldonanelectronicskin.Itwillusetheinternetasascaffoldtosupportandtransmit
itssensations.Thisskinisalreadybeingstitchedtogether.Itconsistsofmillionsofembedded
electronicmeasuringdevices:thermostats,pressuregauges,pollutiondetectors,cameras,
microphones,glucosesensors,EKGs,electroencephalographs.Thesewillprobeandmonitorcitiesand
endangeredspecies,theatmosphere,ourships,highwaysandfleetsoftrucks,ourconversations,our
bodiesevenourdreams.
Hewasright.Today,49%oftheworldspopulationisconnectedonlineandanestimated8.4billion
connectedthingsareinuseworldwide.
TheInternetofThings(IoT)isinfullflower.Theexpandingcollectionofconnectedthingsgoesmostly
unnoticedbythepublicsensors,actuatorsandotheritemscompletingtasksbehindthescenesin
daytodayoperationsofbusinessesandgovernment,mostof
themabettedbymachinetomachinecomputictionthat Thestickinessandvalue
is,artificialintelligenceenhancedcommunication.Themost
ofaconnectedlifewillbe
publicitemsintheburgeoningIoTarecars,voice
activatedassistants,appliancesandotherhomesystems, fartoostrongfora
physicianprescribedorrecommendedhealthmonitoring significantnumberof
devices,roadsensors,publicsafetyandsecurity
devices,smartmetersandpersonalfitnessand peopletohavethewillor
healthtrackersforpeopleandanimalsdogs, meanstodisconnect.
cats,horses,cowsandmore.AndthenthereareemergingIoT
productsthatshowhowtheurgetocreateconnectivity AN ON YMOU S RESP ON DEN T
extendstosuchprosaicitemsastoothbrushes,dentalfloss,
hairbrushes,pillows,eggtrays,winebottlesleeves,baby
monitorsandchangingtables,silverware,umbrellas,allmanneroftoysandsportinggoodsand
remotecontrolledpetfooddispensers,tonameafew.
TheveryconnectednessoftheIoTleavesitopentosecurityandsafetyvulnerabilities.Every
connectedthingissusceptibletoattackormisuse.InSeptember2016atDEFCON,oneoftheworlds
largestsecurityconferences,47vulnerabilitiesaffecting23IoTenableditems(doorlocks,
wheelchairs,thermostatsandmore)from21manufacturersweredisclosed.Soonafter,therewasa
massivedistributeddenialofservice(DDoS)attackonOct.21,2016,againstDyn,aninternet
performancemanagementcompany.TheattackwasaccomplishedwhentensofmillionsofIoT
connecteddeviceslikeprinters,DVRs,cablesettopboxes,webcamsandbabymonitorswereusedto
launchtheDDoSandblockDynsabilitytoconnectinternetuserstothewebaddressestheyhopedto
access,suchasTwitter,Amazon,PayPal,Spotify,Netflix,HBO,TheWallStreetJournalandTheNew 2/46
http://www.pewinternet.org/2017/06/06/theinternetofthingsconnectivitybingewhataretheimplications/
access,suchasTwitter,Amazon,PayPal,Spotify,Netflix,HBO,TheWallStreetJournalandTheNew
YorkTimes.AsimplesoftwareprogramcalledMiraiwasusedtocreatethebotnetthatinitiatedthe
attack.
AftertheDynattack,areportinTheNewYorkTimescalledtheIoTaweaponofmassdisruption.
Whilethatassaultamountedtonothingmorethanashortlivedslowdownofalargeportionofthe
internet,itshowedhowvulnerableconnecteddevicesaretohackingandexploitation.Inrecentweeks,
aransomwareattacknamedWannaCryaffectedcomputersin150countries,anditscreators
demandedpaymentsfromthosewhosecomputerswerecompromisedbeforereleasingtheirfiles.
ExpertspointedouthowdramaticallythisattackhighlightedthevulnerabilitiesoftheIoT.
Researchershavebeenshowinghoweasyitistohackcars,votingmachinesandpowerplants.They
havedemonstratedransomwareexploitsagainsthomethermostatsandexposedvulnerabilitiesin
implantedheartpacemakers.Inonepaper,IoTGoesNuclear,analystsshowedhowaflawinthe
designofsmartlightbulbscouldbeusedforabrickingattackthatkillsallofacitystrafficlights.
WithinthepastyearBryanJohnson(Kernal),ElonMusk(Neuralink)andMark
Zuckerberg(FacebooksBuilding8)haveannouncedinitiativestocreateaneffectiveconsumer
gradebraincomputerinterfacethus,ofcourse,hackingapersonsbraincouldalsobeafuturesecurity
issue.
Allofthishaspromptedconcernamonginternetsecurityexperts,includingBruceSchneier,who
deliveredafieryspeechattheOrganizationforEconomicCooperationandDevelopmentsDigital
EconomyMinisterialMeetinginCancun,Mexico,inJune2016.Hepredictedthatunlesstechnology
basedbusinessesandgovernmentsaddresstheseproblems,theremightbeaflightfromconnectivity
thatis,peoplecouldstartretreatingofflineasrisksmount.Myguessiswearereachingthehigh
watermarkofcomputerizationandconnectivity,hesaid,andinafewyearswearegoingtobe
decidingwhattoconnectandwhattodisconnectandbecomemorerealisticaboutwhatcanwork.We
arecreatingasocietybywhichatotalitariangovernmentcancontroleverything.Rightnowitsmore
powertothepowerful.Andwearelivinginacomputerizedworldwhereattacksareeasiertocreate
thandefensesagainstthem.Thisiscomingfasterthanwethink.Weneedtoaddressitnow.Peopleup
tonowhavebeenabletocodetheworldastheyseefit.Thathastochange.Wehavetomakemoral,
ethicalandpoliticaldecisionsabouthowthesethingsshouldworkandthenputthatintoourcode.
Politiciansandtechnologistsstilltalkpasteachother.Thishastochange.
Thus,thequestion:CouldsecurityvulnerabilitiesthatbecomeevidentastheIoTrollsoutprompt
people,businessesandgovernmenttoavoidorwithdrawfromcertainonlineconnectivityoptions?In
summer2016,PewResearchCenterandElonUniversitysImaginingtheInternetCenterconducteda
largecanvassingoftechnologists,scholars,practitioners,strategicthinkersandotherleaders,asking
themtoreacttothisframingoftheissue:
AsbillionsmoreeverydayobjectsareconnectedintheInternetof
Things,theyaresendingandreceivingdatathatenhanceslocal,
nationalandglobalsystemsaswellasindividualslives.Butsuch
connectednessalsocreatesexploitablevulnerabilities.Asautomobiles,
medicaldevices,smartTVs,manufacturingequipmentandothertools
andinfrastructurearenetworked,isitlikelythatattacks,hacksor
ransomwareconcernsinthenextdecadewillcausesignificantnumbers
ofpeopletodecidetodisconnect,orwillthetrendtowardgreater
connectivityofobjectsandpeoplecontinueunabated?
Some1,201respondedtothisnonscientificcanvassing:15%oftheseparticularrespondentssaid
significantnumberswoulddisconnectand85%chosetheoptionthatmostpeoplewillmovemore
deeplyintoconnectedlife.(SeeAboutthiscanvassingofexpertsforfurtherdetailsaboutthelimits
ofthissample.)
Participantswereaskedtoexplaintheiranswersandwereofferedthefollowingpromptstoconsider:
Whatisthemostlikelykindofphysicalorhumandamagethatwilloccurwhenthingsare
networked?
Howmightgovernmentsandtechnologistsrespondtomakethingsmoresecureandsafe?
Isitpossibletonetworkphysicalobjectsinsuchawaythattheywillgenerallyremainsafeforthe
vastmajoritymostofthetime?
Severalbroadassertionsandassumptionsunderpinnedmanyrespondentsanswers:
Connectionisinevitable:Mostoftheseexpertsarguedthathumanscraveconnectivity,andtheywill
seekmoreofitduetoitsconvenienceandoutofnecessitybecauseitwillsimplybeembeddedinmore
andmorethings.OnethoughtfulframingofthisideacamefromDanMcGarry,mediadirectorat
theVanuatuDailyPost.Connectionisinevitable,hewrote.Itswhat[Terry]Pratchett,[Ian]
Stewartand[Jack]Cohencallextelligence.Somuchofhumanexperienceisbasedoutsideofthe
humanbeingthesedays,youcantbeafunctioningadultandremainunconnected.
Ananonymousrespondentputitthisway:Thestickinessandvalueofaconnectedlifewill
befartoostrongforasignificantnumberofpeopletohavethewillormeanstodisconnect.
Further,theseexpertsnotethereiscommercialincentivetoaddthisfeaturetoasmanygadgetsand
aspectsoflifeaspossible.AsharpdescriptionofthisdynamiccamefromIanOByrne,assistant
professorofliteracyeducationattheCollegeofCharleston,whosaid,Morepeoplewillbecome
connectedbecausedevicemanufacturerswillmakeitfareasierandacceptabletopurchaseanduse
thesedevices.Inthesamefashionthatweaddedelectricitytoeverydevicepossiblewithadvancesin 4/46
thesedevices.Inthesamefashionthatweaddedelectricitytoeverydevicepossiblewithadvancesin
technology,manufacturerswilladdtheinternettoalldevicesintheattempttomakethembetter
butalsopossiblysellmoreproduct.Inshort,morepeopleanddeviceswillbeconnected.
Connectivityhasmanyexploitableflaws:Manyrespondents,includingthosearguingthecasethat
moreconnectivitywillunfold,outlineddownsidestohyperconnectivity.Theymaintainedthatdefects
andvulnerabilitiesareanaturalpartofquicklyevolvingnetworks,andsoftwareandhardwareand
securityresponsesarealwaysastepbehind.Manybelievethatongoingattacksareinevitableinall
networkeddigitalsystems,andtherewillbelargescaleproblemsincoordinatingvariouselementsof
theIoTtogetthemtoworktogether.WhiletheseexpertsexpectthatlivinganIoTdependentlifewill
bescaryattimesandoftenfrustrating,mostdonotexpectthiswillbeenoughtodetermostpeople
fromdivingdeeperintoconnectivity.
Forinstance,ananonymousprofessorofinformationandhistoryatastate
universityexplained,Peoplecangetusedtoanything,andjustaswithterrorismthe
inevitableoccasionaldamagefromdeliberateorinadvertentfailuresinhighlynetworkedsystemswill
becomeroutine.OccasionalterrorismusingInternetofThingsconnectionsisverylikely,shutting
downinfrastructure,hospitals,businesses,etc.Hackerswillalwaysfindvulnerabilitiesinhighly
networkedsystems,andtechnicalfixeswillnotchangethat.Ananonymousprofessorat
MITobserved,Wewillliveinaworldofambivalentparticipation.
Thisnewconnectivityjeopardizeshumansandphysicalinfrastructure,notjustcommunication:A
recurringrefrainintheseexpertsanswersisthattheIoTposessignificantnewproblemsbecause
messingwithIoTlinkeddevicescancauserealworlddamage.Schneierhasdescribeditthisway:
WiththeadventoftheInternetofThingsandcyberphysicalsystemsingeneral,wevegiventhe
internethandsandfeet:theabilitytodirectlyaffectthephysicalworld.Whatusedtobeattacks
againstdataandinformationhavebecomeattacksagainstflesh,steelandconcrete.
BarryChudakov,founderandprincipalatSertainResearchandStreamFuzionCorp.,wrote,
WearewitnessingtheadventofwhatthebrilliantscholarandmediatheoristDerrickde
Kerckhove(yearsago)calledconnectedintelligencebutonascaleunimaginablebeforethe21st
century.DeKerckhovecalleditachangeofbeing,whichcapturesthebreadthanddepthofwhatis
happeningdailyasourphysicalanddigitalobjectsintertwine.Sonotonlywillthetrendtoward
greaterconnectivityofpeopleandobjectscontinue,itwillcontinuetochangeboundariesand
dynamicsofallsortspersonal,social,moral,political.TheIoTrealityrepresentsbothhuge
opportunityandhugevulnerability.Theygohandinhand.Wecannotbeproactiveuntilweeducate
ourselvesandcontinuetoeducateothersaboutwhatisrequiredtosecureIoTandwhatsecureIoT
practicesentail.
Manyparticipantsinthiscanvassingwrotedetailedelaborationsexplainingtheirpositions.Some
Manyparticipantsinthiscanvassingwrotedetailedelaborationsexplainingtheirpositions.Some
chosetohavetheirnamesconnectedtotheiranswersothersoptedtorespondanonymously.These
findingsdonotrepresentallpossiblepointsofview,buttheydorevealawiderangeofstriking
observations.Respondentscollectivelyarticulatedsevenmajorthemesthatareintroducedand
explainedbelowandexpandeduponinsectionsthatbeginlaterinthisreport.
Thefollowingsectionpresentsabriefoverviewofthemostevidentthemesextractedfromthewritten
responses,includingasmallselectionofrepresentativequotessupportingeachpoint.Someresponses
arelightlyeditedforstyleorduetolength.
Theme1:Peoplecraveconnectionandconvenience,andatechlinked
worldservesbothgoalswell
Thevastmajorityofexpertrespondentstothisresearch
study,aswellastoapreviousstudyonattitudesaboutthe Wehaveadeepneedand
futureoftheInternetofThingsbyPewResearchCenterand
desiretoconnect.Isee
ImaginingtheInternet,agreethattheIoTwillcontinue
apace,expandingvastlyinsizeandinfluenceoverthenext noevidenceforareversal
decade.Theysaybusinessesexpecttoreaplargedividends
fromtheadvancementoftheIoTandthatpeopleare ofthattrend.
naturallydriventoconnecttootherpeople,informationand
P ETER MORVI LLE
services.Further,theyarguethatsocietyreapsbenefitsfrom
connectedinfrastructureandobjectsfromtransportation,
communicationsandbusinessandindustrialsystemstoindividualproductsandservices.
Additionally,asmodernlifebecomesmorecomplicated,theserespondentsarguethatpeoplecounton
conveniencetoconquerchaosandtheyenjoyexperimentingwithmagicalnewtools.Theirdesirefor
newgadgetryoftenoutweighsanyperceivedrisks.
Itsonlyhumantoconnect,andtherearemanyadvantages.Its
magical,evenaddictive
RobertBell,cofounderoftheIntelligentCommunityForum,wrote,Becauseconnectedlife
offerssomanyopportunitiesintermsofcostsavings,entertainment,newsandpublicparticipation,
peoplewillkeepmovingintoit.
DavidClark,seniorresearchscientistatMITandInternet
HallofFamemember,replied,Unlesswehaveadisaster Themagicalbehaviors
thattriggersamajorshiftinusage,theconvenienceand
thatthenewdeviceswill
benefitsofconnectivitywillcontinuetoattractusers.
Evidencesuggeststhatpeoplevalueconveniencetodayover providewillbetoostrong
possiblefuturenegativeoutcomes. forpeopletoresist.
JimWarren,longtimetechnologyentrepreneurand DAVI D WU ERTELE

activist,replied,Fromthebeginningofanykindof
connectivitybetweenhumans(bothbiologicalandcorporate
fromprimitiveMantothepresentwehavealmostalwaysfavoredandpursuedincreased
connectivity.Itistheessenceofsociety,culture,productivity,improvedlivingandlifestyle
alternatives(etal.)andwillcontinue.Probablythelargestdeterrentstothespeedandpervasiveness
ofitsdevelopmentwillbelargely,perhapsmostly,howmuchitcostsitsusers,bothfinanciallyand
functionally.
MarkLemley,aprofessoratStanfordLawSchool,commented,Therewilldefinitelybehacksand
otherproblems,justastherearewithcreditcardsandfinancialinformationonlinetoday.Butthe
advantagesofconnectivityarejusttoogreatforpeopletoforgoit.Wemayseegreaterlocalcontrol
overwhenconnecteddevicesareenabled,allowingpeopletoturnconnectivityoffatwill.
PeterMorville,presidentofSemanticStudios,said,Wehaveadeepneedanddesiretoconnect.
Everythinginthehistoryofcommunicationtechnologysuggestswewilltakeadvantageofevery
opportunitytoconnectmorerichlyanddeeply.Iseenoevidenceforareversalofthattrend.
BartKnijnenburg,anassistantprofessorinhumancenteredcomputingatClemsonUniversity,
responded,Theimmediateandconcretebenefitsofconnectivity,howeversmall,willoutweighthe
uncertainfuturethreats,sopeoplewillchooseconnectivityoversecurity.Insurancefirmsmay
capitalizeoninsuringagainstdigitalthreatstophysicaldevices.Theonlythingthatmaycausepeople
todisconnectisawidespreadterroristattackagainstthedigitalinfrastructure.Evenifsuchanattack
isinconsequentialforpeoplesTVsandfridges,itmaychangethenarrativeenoughthatpeoplewill
disconnect.
Somerespondentspointedoutthatpeopleareattractedtoshinynewtechtools,services,platforms
andsystemsevenattimeswhenthiscouldbecomefatalattraction.Therearepeopleofallageswho
findthatconnectivityisaddictive,oneanonymousrespondentandothers
argued.RichardJ.Perry,arespondentwhodidnotshareadditionalidentifyingdetails,
commented,Greatdamageispossibleandgovernmentsandvendorswillstrivetoimprovesecurity
butwillfail.Internetinsecuritywillbetherule,nottheexception.Butweareaddictedandwillnot
surrenderthis.
DavidWuertele,asoftwareengineeratTeslaMotors,replied,Themagicalbehaviorsthatthe
newdeviceswillprovidewillbetoostrongforpeopletoresist.EventhoughmanyoftheseIoTdevices
havenorealneedtobeconnectedtothecloud,andeventhoughconnectingthemtothecloud
presentsarealrisktopeople,thereisnotenoughofaforcetocleanuptheimplementations.The
desirebypeopleforthesemagicdevicesissostrongthattheywillsignawaytheirownpersonaldata
desirebypeopleforthesemagicdevicesissostrongthattheywillsignawaytheirownpersonaldata
aswellastheirfamilies(andsometimestheirfriends)datatogetthegoodies.
Ananonymousrespondentobserved,Peopleareinfluencedbygeewhizgizmos,frequently
attheexpenseofsafety.
Aslifeincreasesincomplexity,convenienceisthedefaultsettingfor
mostpeople
Manyrespondentspointedoutthatpeoplegenerallyoptforwhatappearstobethebestrouteto
efficiencyandexpediencyastheyadopttechnology.PaulJones,clinicalprofessoranddirectorat
theUniversityofNorthCarolina,optimisticallypredicted,TheLawofLeastEffortappliestothe
InternetofThings.Shortofmassivesocialandpoliticalchanges,wewillbecomemoreconnected,
morenetworkedandhappierthatweare.
Ananonymousrespondentwhoisconcernedabout
thedownsidesofconnectivityresponded,Peoplewilltrade Therearefewexamples
theirsafetyforconvenience.Theyalwayshave.Theyalways
inhumanhistoryof
will.AndNathanielBorenstein,chiefscientistat
Mimecast,said,Therearefewexamplesinhumanhistoryof peoplemakingrational
peoplemakingrationaldecisionsaboutprivacyorsecurity. decisionsaboutprivacy
MattBates,aprogrammerandconceptartistat orsecurity.
JambeenoLtd.,commented,Iexpectthefollowingareand
N ATH AN I EL BOREN STEI N
willalwaysbetruewithregardtointernet
connectivity:Convenience>privacy.Convenience>
statisticallyinfrequenthealthconsequences.Convenience>statisticallyinfrequentfinancial
problems.Foraminority,oneormoreoftheabovewillbereversedandtheywillstandoutasoddities
inanincreasinglyconnectedworld(note,e.g.,codeandsecurityexpertDanGeer,partoftheCIA
apparatus,whodoesntuseacellphone).Ithinkmostnetworkedphysicalobjectsaresafeforthe
vastmajoritymostofthetime.Itswhathappenswiththeaggregationofnetworkedobjectsthatis
mostconcerning,andthenitwillusuallybemostdeleterioustoaminorityofthepopulation.Theres
probablynowaytogetaroundthisshortofnotnetworkingthings.Conveniencewillout.Sadly.
SunilPaul,entrepreneur,investorandactivistatSpringVentures,observed,Convenienceand
magicwilloverwhelmconcerns.ThehistoryoftechnologyisclearonthisfrontATMs,ecommerce,
creditcards,thelistisendless.
JulieGomoll,CEOofJulieGomollInc.,wrote,Hacksandransomwarewontmatter.Wehave
thosenow,andveryfewpeopledisconnectasaresult.TherewillbelotsofjunkthingsWeneeda
thosenow,andveryfewpeopledisconnectasaresult.TherewillbelotsofjunkthingsWeneeda
networkedthing!willbethenewWeneedanapp!Therewillbenewkindsofhacksandattacks,and
wellfigureouthowtostopthem.Welldiscoverunintendedconsequences,attributethemtogrowing
pains.Andwewillnever,everdisconnect.
Thealwaysonyoungergenerationcantimaginebeinganythingbut
connected
Anumberofrespondentssaidtheyexpecttheyoungergeneration,accustomedfromthestarttotrust
intechnologywithfewdoubts,islikelytoadopttheIoT,wartsandall.JanSchaffer,executive
directorofJLab:TheInstituteforInteractiveJournalism,saidyouthwillstayconnectedbecausethey
aretooinvestedintheIoTtoleaveit.Youngpeoplewillcontinuetodeeplyconnectuntiltheyhave
assetsandidentitiesthattheycareaboutanddontwanttoputatrisk,shewrote.
LisaHeinz,doctoralstudentatOhioUniversity,observed,Youngpeopleareperpetually
connectedtoeachother,somuchsotheymightnotknowhowtoexistwithouttheinternetthat
enablesthatconnection.Asourhomesbecomeapartofthat
connectionineventhetiniestofautomatedways,wewillno Totodays10yearold
longercarehowitworks,justthatitworksasexpected.Thus,
theideaofawatchthat
amassmigrationawayfromaconnectedsocietyisunlikely.
canttakebasichealth
Somerespondentssaidmostyoungerpeopledontknowhow
informationislikea20
toliveanyotherway.
Ananonymousrespondentcommented,The yearoldtryingto
individualswhowillbeusingthistechnologyaretheteensof understandwhatthehell
today.Itwillbesecondnatureforthemtouseandinteract
dailyacrossmanydevicesandmodalities.
acassettetapeis.
Anotheranonymousrespondentreplied, AN ON YMOU S RESP ON DEN T
Generationsnowtaketheinternetforgranted.Theycant
copewithoutit.
Anotheranonymousrespondentwrote,Iftodaysadultsdontgetmoreconnected,thenext
generationwill.Totodays10yearoldtheideaofawatchthatcanttakebasichealthinformationis
likea20yearoldtryingtounderstandwhatthehellacassettetapeis.
Theme2:Unpluggingisnteasynow,andby2026itwillbeeven
tougher
Manyrespondentsmadetheargumentthatdisconnectingresignspeopletorelativeisolationand
somelevelofdeprivation.Theysayitisnotarealisticoptionformostpeopletolivethislife.
Ananonymousrespondentreplied,Itisbecomingincreasinglydifficulttodisconnect,even
Ananonymousrespondentreplied,Itisbecomingincreasinglydifficulttodisconnect,even
inthemidstofthreatsanddistrust.Tobeanactive,engagedmemberofsociety,itisnowvirtually
impossibletobecompletelyunplugged.Anotheranonymousrespondentsaid,Therewillbe
anincreasingattempttoremainunconnectedordisconnect,butitwillbeincreasinglyimpossibleto
livethatway.AndananonymouschairmanandCEOatanonprofit
organizationobserved,Wewillcontinuetobecomemoreconnectedwithoutrealizingourcritical
growingdependence.
Theyalsomadethecasethatthemarketplacefornonconnecteddeviceswillshrinkinthefuture,
oftenleavingconsumerswithlittlechoicebuttoacceptanIoTpresenceintheirlives.Andthey
pointedoutthatevennowpeopleareoftenusingconnecteddevices,toolsorserviceswithoutknowing
theyareconnected.Ananonymousparticipantobserved,Itwillbeincreasinglydifficultto
unplug,asmoreandmoreaspectsofordinarydailylifearepluggedin.Unpluggingwillrequirea
religiouslevelofcommitment.
Resistanceisfutile:Businesseswillpenalizethosewhodisconnect
socialprocessesrewardthosewhoconnect.Fullywithdrawingis
extremelydifficult,maybeimpossible
AnumberofrespondentsobservedthattheusefulnessandstickinessofIoTplatformsandservices
plusthecorporateimperativetostriveforconstantlyrisingprofitswilldriveIoTdecisionmaking,
causingbusinessestooperateinsuchafashionastomakeitincreasinglydifficultifnotimpossiblefor
peopletochoosetooptoutandstillaccessservicesandfunctions.
AndrewWalls,managingvicepresidentatGartner,
replied,ThebenefitsofIoTtothevendorsofproductsand Thereisnochoicebutto
serviceswilloverwhelmtheobjectionsofthefewconsumers
becomeevermore
whofearsecurityissues.Pricingmodelswillpenalizethose
whoattempttodisconnectandrewardthosewhoconnect. networkedand
IfIoTenhancesperformanceagainstconsumervariablesfor connected:Capitalwill
selection/purchase,IoTintegrationwillexpandmassively.
demandit.
AdamNelson,chieftechnologyofficeratFactr,
AN ON YMOU S LAW P ROF ESSOR
commented,Peoplewontbeabletodisconnect.
Manufacturerswontbuildinthefunctionalitytodoit.
MaryK.Pratt,afreelancetechnologyjournalist,commented,Evenifindividualsareconcerned
abouttherisks,theyllfinditdifficultorimpossibletooptoutoftheseconnectionsiftheywantto
continuewiththeproductsorservicestheywantand/orneed.Ananonymouslawprofessor
atastateuniversityobserved,Thereisnochoicebuttobecomeevermorenetworkedand
atastateuniversityobserved,Thereisnochoicebuttobecomeevermorenetworkedand
connected:Capitalwilldemandit.
SeveralrespondentslikenedthoseadoptingIoTproductsandservicestolivestock.
Ananonymousrespondentobserved,Moo,saythecattle.Andananonymous
professoratastateuniversitysaid,Thosewhowanttofleecethesheepwillgetthesheep
tocomeonin.Ananonymouschiefscientistemeritusforoneofthetoptechnology
innovationcompaniesintheU.S.said,Thinksheep.
AnanonymouseconomistatYaleUniversityobserved,Acenturyagotheluddites
tried[todisconnect].Theyfailed.
JosephTurow,acommunicationsprofessorattheUniversityofPennsylvania,said,Despite
hacksandprivacyissues,peoplewillfeelaneedtokeepconnected,partlybecausecompanieswill
rewardthemfordoingso(ormakelifedifficultiftheydont).Peoplewillfeelresignedtonavigatingan
environmentwheredataarekeycoinsofexchange.
Respondentsresoundinglyagreedthatpeoplearealreadydependentuponthisvastlygrowing
network,asitenablessomanysystemsandhelpssomanypeopleinsuccessfullygettingthrougheach
day.TheIoTbecomesmorecomplex,moreimportantandmoredifficulttodisconnectfromeveryday.
Ananonymousrespondentsaid,Peoplewillhavetobenetworked,becausetobeotherwise
willmeandifficultiesgettingemployment,healthcareandotherservicesthatarenecessary.Randy
Albelda,aneconomicsprofessorattheUniversityofMassachusetts,Boston,agreed:AtthispointI
seenowayout.IfIdisconnect,Iineffectlosemyjoband/orpayalotmoremoneyand/orspendan
enormousamountoftimelivingmydailylife.Thetoothpasteisoutofthetube.
ErikJohnston,associateprofessoranddirectoroftheCenterforPolicyInformaticsatArizona
StateUniversity,observed,Tryingtodisconnectinthefuturewillbeincreasinglydifficult.Onlythose
whoareeitherveryprivilegedorunprivilegedwillfindthemselvesinasituationwherethemajorityof
theirlivesarenotconnectedinameaningfulway.Asthedefaultbecomestooptin(unlessthereisa
seachangeinregulation)itwillbeverycostlyandtimeconsumingtodisconnectfromeachphaseof
life.Andthatisfortheplaceswheretheyknowtheyareconnected.Itwouldbeimpossibletooptout
ofpublicsurveillance,theTSA[TransportationSecurityAdministration]andmanyotheressentialsof
navigatinganormallife.
MichaelWhitaker,vicepresidentofemergingsolutionsatICFInternational,replied,The
inevitablemarchtoamoreconnectedlifewillcontinueunabatedfortworeasons.1)Anincreasing
amountoftechnologywillemergethatisconnectedbydefaultandtheonuswillbeonusersto
disconnect(ratherthanconnect).Mostusers,evenifconcernedaboutvulnerabilities,willnot
proactivelydisconnectacrossalloftheirdevices.2)Thegeneralunderstandingofthepublicrelatedto
thevulnerabilityofconnecteddeviceswillremainlow.Theywillbesoldonthebenefits(ofwhich
thevulnerabilityofconnecteddeviceswillremainlow.Theywillbesoldonthebenefits(ofwhich
therearemany)withfewvoicesechoingtherisks.Barringanawarenessalteringevent,peoplewill
generallythinklessandlessabouttheirconnectivityoverthenextdecadeandwillcometoexpect
connectivityasthedefaultstate.
NaomiBaron,alinguisticsprofessoratAmericanUniversity,commented,Theissueislessabout
whatchoicesindividualswishtomakethanaboutthechoicesthatinstitutionsorotherindividuals
makeforthem.Ifmybankonlyletsmeaccessmyaccountonline,ifmytelecommunicationscompany
onlyletsmedobusinessonline,ifmydoctoronlymakesmylabresultsavailableonline,thento
disconnectfromtheinternetwouldmeandisconnectingfromtheindividuals,institutionsandservices
Ineedforeverydaylife.
Someareconcernedwithpeopleincertainsegmentsofsocietybeingunabletochoosetofullyor
partlyoptoutastheywish.AnanonymousseniorresearchscholarataU.S.
universitysdigitalsocietylabsaid,Bothstatementsarelikelytobecorrect.Mostpeople
thepoor,vulnerable,dependentwonthavethemeanstodisconnect.Socialandpoliticalsystems
education,employment,governmentserviceswillrequirethemtostayconnected.Thoseeducated,
independentandprivilegedenoughtoprioritizetheirrightsandlibertiesoverpublicsystemswill
increasinglydisconnectormanagetheirconnectedness.Privacyandlibertywillbecomeevermorethe
provinceofthosewitheconomicmeans.
Youcantavoidusingsomethingyoucantdiscern.Somuchofthe
InternetofThingsoperatesoutofsightthatpeoplewillnotbeableto
unplugcompletely
Anumberoftheseexpertsraisedthepointthatasconnectivityisbecomingbuiltintoeverything,
peopleoftendonotknowwhatisconnected,whatiscollectingdata,whoseesthedatathatare
collectedandwhy,andhowallofthesethingsarelinkingtootherthings.AndrewWallsof
Gartnersaid,Peoplewillremainlargelyunawareofthedegreeofconnectednesspresentinthe
productstheyselectandwillmerelypickproductsandservicesbasedonpersonalpreferencesfor
comfort,convenience,valueformoney,etc.
JamaisCascio,distinguishedfellowattheInstitutefor
theFuture,wrote,Morepeoplewillbemoredeeply Asignificantnumberwill
connected,butwilllikelybelessawareofit.Thinkofitasthe
havetheillusionofbeing
electricityeffect.Itsraretodaytoseesomethingcalledout
asbeingrunonelectricity(vehiclesarethemainexception) disconnected[whenthey
wejustassumethatadeviceorbuildingorsystemis actuallyarenot].
electricityenabled.Thedefaultguitariselectric,and
acousticguitarsmustbelabeled.Similarly,inthisdecade BOB F RAN KSTON
acousticguitarsmustbelabeled.Similarly,inthisdecade BOB F RAN KSTON
wellbemovingquicklyintoaworldwhere
networked/smart/internetenabledwillbethedefault
assumption,enoughsothatmanypeoplewillstopthinkingofitasnewordifferent.Youllhavepeople
extollingthevirtuesofbeingunpluggedbecausetheydonthaveanycomputersinthehouseand
keeptheirmobiledevicesshutoff,but[theyll]forgetthatthehouseholdappliancesandcarpetingand
homesolarpowerarrayarealldeeplynetworked,becausetheydonthavetothinkaboutorworry
aboutthosesystems.
BobFrankston,internetpioneerandsoftwareinnovator,replied,Asignificantnumberwillhave
theillusionofbeingdisconnected[whentheyactuallyarenot].
Theme3:Riskispartoflife.TheInternetofThingswillbeaccepted,
despitedangers,becausemostpeoplebelievetheworstcasescenario
couldneverhappentothem
Manyoftheserespondentspointoutthatoptimismbiasgenerallymovespeopletoperceivea
potentialriskashighlyunlikelytoharmthem.Whenpeopleaskthemselves,oftensubconsciously,Do
thebenefitsoutweightherisks?theanswerisgenerally,Yesgoforit!especiallywhen
connectionandconveniencearetheresult.Themajorityinthiscanvassingpredictsthatthegeneral
publicexpectsthatanyproblemstiedtotheirconnectednesswillfallprimarilyuponothers,not
themselves.
Ananonymouscomputersoftwaresales
engineerreplied,Mostpeoplearentawareofthe Onlinesecurityis,byand
complexitiesofonlinesecurityandassumeitwillhappento
large,anillusion.AndI
someoneelse.
thinkweallagreetothe
DanielBerleant,authorofTheHumanRacetothe
illusiontogether.
Future,said,Allchangecomeswithrisks.Youdontsee
peoplemovingawayfromcars(withoccasionalindividual MARI A P RAN ZO
exceptions)becausecarsaredangerous.Thedangersofusing
digitaltechnologiesarelowerthanforcarsandwhilethese
dangerswillbeacontinuingconcern,theywontstoptheoveralldigitizationtrend.
Ananonymousrespondentsaid,Peopleuncriticallyacceptnewthings:Drones,selfdriving
cars,corporateexploitation,terroristincursionsareroutedthroughtheinternet,controlovernuclear
reactors.TheTVshowMr.Robotisextremeandentertaining,butitispointingtoissuesthatare
real.
Ananonymouswebdevelopercommented,Pickpocketinghasntmadepeoplestop
Ananonymouswebdevelopercommented,Pickpocketinghasntmadepeoplestop
carryingwallets,hasit?Unlessthereisamajorattack,affectingliterallybillionsofpeopleinthe
nearfuture,morepeoplewillbeconnected.Asthenumberofconnectedpeoplegrows,individual
cyberattacksandfraudwillprobablygrowaswell.Increasedattacksprobablywillnotcausemassive
disconnect,becausethepositivesgreatlyoutweightherisks.
MariaPranzo,directorofdevelopmentattheAlphaWorkshops,replied,Wow.Imtryingto
rememberhowitwasbeforewewereallconnected.Beforetheworldknewwhatwasgoingon
everywhereatonce.Itsafrighteningthought,allofthisgoingaway.AndyetitsonethatIcouldbe
completelycomfortablewith.Butthatsmyprivilegeshowing.Onlinesecurityis,byandlarge,an
illusion.AndIthinkweallagreetotheillusiontogether.Wecountongoodpeopleonthefrontlines:
themakersofourhardwareandsoftware.Wecountontheircontinuingtoadvanceslightlyfasterthan
thebadguys.Mostofusdosoblindly.Whywouldthatchange?Icertainlydontchecktheplane
enginebeforeIgetonaflight.
StephenDownes,researcheratNationalResearchCouncilCanada,said,Itistruethatattacks,
hacksorransomwareconcernsimpactourenjoymentofmoderntechnology.Butitsimportanttonote
thatwhattheyimpactisalmostexclusivelyourenjoymentofmoderntechnology.Apersonchoosing
todisconnectfrommoderntechnologysuffersthesamefateasthepersonwhohasbeenhacked.They
losetheenjoymentofmoderntechnology.Sodisconnectingfromtechnologyisntaviableresponseto
attacks,hacksandtherest.Peoplewontbelookingtowithdrawfrommoderntechnology,theywillbe
lookingforbetterandmoresecuremoderntechnology(toapointaspeopleschoicesofpasswords
suchas123456show,theyarewillingtosacrificeacertainamountofsecurityforacertainamountof
convenience.Indeed,ifanythingforcespeopleoffnewtechnology,itwillbethesecuritymeasures,not
thecrimes).
Theme4:Morepeoplewillbeconnectedandmorewillwithdrawor
refusetoparticipate
Ashareoftheexpertsinthiscanvassingthinkthatthefuturewillbringfargreaterconnectivityfor
mostusersandthatatthesametimeanotablenumberofpeoplewillcutbacktheirtiesto
connectedthingsorwithdrawfromthatworld.Theyalsoimaginescenarioswherepeopletryto
modulatetheirlevelofconnectivity,beingembeddedtosomedegreeintheconnectedworldand,to
somedegree,alsowithdrawingfromit.
Somewillembraceitandsomewilloptoutbeforeithappens
JeffJohnson,consultantatUIWizardsandWiserUsability,replied,Myactualanswerisboth.
Mostpeoplewillmovemoredeeplyintoconnectedlife,butsignificantnumberswilldisconnect(or
remaindisconnected).
remaindisconnected).
AdrianSchofield,anappliedresearchmanager,
observed,Bothanswersapply.Millionswillconnectbecause Manywilldisconnect,
theyareatlowriskandtheconveniencefactorishigh.
butequallyasmanywill
Thousandswilldisconnectbecausetheybecometargetsor
theyfearbecomingtargets.However,fearoflosingwealthhas doubledown.
neverstoppedtherelentlesspursuitofwealth.
AN ON YMOU S RESP ON DEN T
WendyM.Grossman,anindependentwritingand
editingprofessionalbasedinLondon,said,Aswebecome
moresophisticatedaboutandusedtothesetechnologies,wewill(Ihope)makebetterinformed
decisionsaboutwhichonesweuseandhow.AsIwatchthewayITisdeveloping,Imincreasingly
dubiousabouthowfarIwanttoletitandtheconcomitantexposuretopotentialsurveillance
penetrateintomyhomelife.SomeofthisisbecauseIvebeenonlinefor25yearsandIwriteabout
securityImdistrustfulenoughthatIdoalmostnoonlinebankinganddontusemysmartphonefor
anythingthatwouldexposeanyofmyfinancialaccounts.Iminthefortunatepositionofnotneeding
todothesethings,soIdont.Ithinkintheshorttomediumtermwereinforalotofgriefaslegacy
manufacturerswhoknownothingaboutsecurityaddwirelessconnectionsandcomputationalpower
toeverydayobjectstheresgoingtobeabigmessonedaysoonwhengovernmentsstartdemanding
thatthedatacollectedbysmartTVs,robots,etc.,beretainedforusebylawenforcementandsecurity
services.Itssimpler(tome)tooptoutofthatbeforeithappens.
AnanonymousemployeeoftheU.S.NationalScienceFoundationwrote,
Bothanswersaretrue,since5%to10%disconnectingisasignificantnumber.
Ananonymousrespondentsaid,Alldeviceswillbecomeconnectedbydefault.Itwilltakean
efforttodisconnect.ButmorepeoplewillbecomedistrustfuloftheIoT.Itwillcausealargeculture
clash.Andananonymousnetworkarchitectobserved,Iactuallythinkbotharetrue,
possiblyresultinginabifurcationinoursocialstructure.
JohnPaine,abusinessanalyst,commented,Therewillbeastatisticallysignificantnumberof
peoplewhowilldeliberatelydisconnecttotheextentpossible,butoverallconnectionswillincrease.I
expectthatapremiumwillbegintocomeintoplayforpurchasingdisconnectionasafeaturefor
goods/servicesinthefuture.
Ananonymousrespondentreplied,Theanswerisboth/neither/itwillbalanceout.Many
willdisconnect,butequallyasmanywilldoubledown.ForeverytinfoilhattedneoLudditemoving
toanislandwithatelegraph,sotospeak,therewillbesomeonegleefullyenjoyingtheirnetworked
toasterandtoilet.Theonlythingthatmighttipthebalancemoretowarddisconnectionwouldbean
IoTrelatedinfrastructuraldisaster.
IoTrelatedinfrastructuraldisaster.
RightnowtheIoTisntthatgrand,sowhyworryeitherway?
AshareofrespondentsexpressedalowlevelofconfidencethattheIoTorthesecurityofthenetworks
willadvancemuchinthenextdecade.Thosewhoseresponsesgenerallyreferredtoconsumeroriented
applicationssuchassmarthomeitemstendedtofindthemtobelessthanworthyofsacrificeof
onesprivacyorsafety.TheydontthinkIoTuptakewillliveuptoexpectations,buttheygenerallyare
notconsideringlargersystemsintheIoTsuchastransportation,environmentalservicesandfinance.
GrantBlank,asociologistandsurveyresearchfellowfortheOxfordInternetInstitute,said,The
questionseemstoassumethatmostpeopleowndevicesthatarepartoftheInternetofThings.Thisis
currentlyfalse.Peoplewillgenerallystayaway.Therearetworeasons:1)Securityisbeingdonebadly
ontheInternetofThings.Thisseemsunlikelytochangequickly.2)Companiesarebehavinginways
thatdiscourageparticipation.MajorcaseinpointisthatNestrecentlydecidedtoturnofftheservers
supportingawholelineofdevices,makingdevicescosting$100+intouselessbricks.Thebottomline
isthattheInternetofThingsismoreusefulforcompaniesthanforconsumers.Consumerswill
generallystayaway.
Ananonymousrespondentcommented,IdontbelievetheInternetofThingswillreallybecome
reality.Theinfrastructureisnotgoodenoughandthehighnumberofmanufacturerswillcreatelock
ins.Thethresholdforcitizenswillbetoohighunlesstheycommittoonemanufacturerand
buyeverythingfromit.
Ananonymousscientificeditorreplied,Itshardtoknow/guesswhichwaythingswillgo.
Formepersonally,IbackawayfromthisstuffasfarandasfastasIcan,butImnotsurehowmany
otherpeoplewillbeinclinedtodothesame.Itsentirelypossiblethatmostpeoplewillfindthese
ridiculousanddangerousnewtoysirresistiblycompelling.Reallythough,itsbeyondparody.Smart
TV?Cmon,yourehavingalaugh.Howmightgovernmentsandtechnologistsrespondtomakethings
moresecureandsafe?Well,airgapthem,obviously.Verylittleofthisstuffeverneededtobe
networkedinthefirstplace.Cellphones:Good.Highwaytrafficflowcontrol:Good.Anappthat
controlsthelightswitchesinyourhome:Notsomuch.Asforanautomobilecontrolledbyacomputer:
IfitsanautonomousselfdrivingcaralaElonMusk,thensure,recentfatalitynotwithstandingifits
aregularcar,thenOK,thereareprosandconsfordigitalvs.analogifitsaregularcarwitha
networkedcomputer,hellno!Theresabsolutelynoupsidetothatwhatsoever.
Ananonymousseniorfellowatanorganizationthatexaminesthefuture
ofprivacyissuesreplied,Peoplemayadopt,thendisconnectbasedonexperiences.Forexample,I
dontseethepointinarefrigeratorwitha21inchdisplayinthedoor,andalotoftheotherIoT
featuresseemlikeoverkill.Forsensors,horrorstoriesaboutsurveillancemaydeteruse.Connected
anddriverlesscarspresentchallengeswiththefirstfatalcrash.Itwillbeinterestingtoseewhat
anddriverlesscarspresentchallengeswiththefirstfatalcrash.Itwillbeinterestingtoseewhat
happens.
Theme5:Humaningenuityandriskmitigationstrategieswillmake
theInternetofThingssafer
Manyrespondentsexpressedconfidenceintheevolutionofmethodsbywhichoutsideregulators,as
wellasdevelopersofthesoftware,hardwareandnetworksundergirdingtheIoT,willbuildinsome
methodofdealingwithconstantlyemergingsecurity,safetyandcivillibertiesissues.
Indeed,regulatorshavejuststartedtoconsider
recommendationsinthisfastevolvingsetting,movingslowly Itsanarmsrace,for
andnotforcefully.TheFoodandDrugAdministrations
sure,butImconfident
(FDA)guidanceformanagementofcybersecurityinmedical
deviceswasissuedasadraftinJanuary2016butnotofficially
releaseduntilayearlater.Therecommendationsare
nonbindingmorelikesuggestions.AndwhentheFederal thatwewillevolvebetter
TradeCommission(FTC)announcedinJanuary2017anIoT
ChallengetoCombatSecurityVulnerabilitiesinHome security.
Devicessomeexpertsworriedthatthetopprizeforwinning
JON LEBKOWSKY
submissionswasamodest$25,000.
Ananonymousfuturistwrote,Thevulnerabilityofnetworkeddevicesisatechnicalissue.The
originalinventorsoftheinternetarebasicallygoodpeople,sotheydidnotrecognizeallthewaysthat
theirdevicescanbeexploited.Asthebadactorsexposemoreproblems,theywillbefixed.Iexpect
thatnetworkeddeviceswillbecomeasreliableasourelectricpowergridtoday.Itwilloccasionallygo
outanditwillbeacatastrophe.Butwewillsurvive.
Effectiveregulatoryandtechnologybasedremedieswillemergeto
reducethreats
PamelaRutledge,directoroftheMediaPsychologyResearchCenter,commented,The
advancesintechnologywillbeaccompaniedbyimprovedsecurity.Thatistheonlywaycompaniesand
organizationscanprotecttheeconomicinvestmentinconnectedproductsandservicesitistheonly
wayconnectedservicescancontinuetodelivervalue.Therewillalwaysbesomewhochoosetoself
regulatebywithdrawal,butmostwilllearnnewskillsofselfmanagementandbewillingtoexchange
thecurrencyofpersonaldataandprivacytogetthemostvaluefromtheproductsavailable.
PatrickTucker,technologyeditoratDefenseOneandauthorofTheNakedFuture,wrote,
BiometricauthenticationandIoTmilitaryresearchprogramssuchastheHACMS[HighAssurance
CyberMilitarySystems]programwillmaketheInternetofThingsmoresecure.Thatplusnewservices
CyberMilitarySystems]programwillmaketheInternetofThingsmoresecure.Thatplusnewservices
thatspringupoutoftheInternetofThingsecosystemwillshiftthecostbenefitanalysisofstaying
engagedanddeepeningengagementtowarddeepening.
JonLebkowsky,CEOofPolycotAssociates,said,Itsanarmsrace,forsure,butImconfident
thatwewillevolvebettersecurity.AndImprettysurethenegativesalongthewaywillnotdiminish
trusttothepointthatpeopledisconnectinabigway.
MichaelWollowski,associateprofessorofcomputerscienceattheRoseHulmanInstituteof
Technology,explainedhowadvanceswillallowsystemstobeselfmonitoredandselfprotected.Iam
notconcernedaboutvulnerabilitiesoftheInternetofThings,hesaid.Inadditiontoimprovements
ofsecuritytools[thanks]toadvancedanalyticsdevices[usedin]factorieswillbecomewhatmightbe
calledselfaware,i.e.,theywillknowwhensomethingisnotright.Inthosecases,thedeviceswill
enterdifferentlevelsofselfprotectionbasedontheperceivedthreat.Bettercommunicationamong
securityexpertsandsystemswillalsoprovideforquickerresponsestothreats,isolatingoreliminating
them.
Ananonymousrespondentcommented,Itfeelslikeaninevitabilitythatsomeseriesofhigh
profileransomwareattacks,e.g.,turningoffanIoTpacemakertotakeoutaU.S.senatororCEO,will
happen,becausehumangreedisnotaforcewerelikelytoeliminateinthenearterm.Thatsaid,I
doubtthebacklashagainstthatkindofattackwillbedisconnection,itllbethesolidificationof
securitystandardsandtrustedbrandsofdevices.Therewillalwaysbebothgreedybastardsandthe
tinfoilhatbrigade,butmyhunchisthatbothsetswillremainonthefringes,withthemiddle90%
optingtomakesmarterdecisionsaboutwho/whathasaccesstocertaininformation/devices.
Governmentsshouldbedoingmoretoregulatenegligentcompanies,
punishbadactors
Ananonymoustechopsleadreplied,Weveseen
thismoviebefore.Donteverputyourcreditcardonthe Ascitizensbecomemore
internet.Theinternetisntsecureenoughforbanking.Etc.
educatedaboutthe
Ifenoughpeopletrustit,itbecomesimperativetofixit,andit
getsfixed.Butsomeoftheearlypioneersrandomlyget networkandhowthings
arrowsintheirbacks.Peoplealreadysharetheirentirelives areconnected,more
with(fairlyinsecure)laptopsandtablets.Thereisanentire
antivirusindustryfocusedonthewrongpartofsecurity.
pressurewillriseto
Therewillbemanymassiveproblemswherehouses,toasters, providesafeandsecure
videofeedsgettakenoverbecausenobodyknowswhatis
spaces.
secureandwhatisnot.But,overtime,bestpracticeswill
emerge(justlikemostsitesencrypttheirpasswordswitha AN ON YMOU S STAF F MEMBER
salt[randomdatausedasanadditionalinput],butsoonthey
AT
willusetwofactorauthentication).Governmentscanhelpby
willusetwofactorauthentication).Governmentscanhelpby
makingsurecustomerswhoareharmedcansueandget A STATE U N I VERSI TY
moneyfromnegligentcompanies.Toyotadidntcareabout
softwarebestpractices,butwasforcedtopayabilliondollars
andgivenawakeupcall:Theyareasoftwarecompanynow.Itsbestforconsumersifproductsare
selfupdating.Butthatrequires1)trustand2)laws.Withoutlaws,companieswouldratherfocuson
sellinganewproductratherthanfixinganoldone.Hopefullythelawwillsay,Eitherfixthebugsor
opensourcesoanyonecanfixthebugs.
Ananonymousstaffmemberatastateuniversitysaid,Wehavehadgreat
momentsofmistrust,whichhavestemmedlargelyfromanunderestimationofthreatsanda
misunderstandingofthenetworkandhowtheywork.Ascitizensbecomemoreeducatedaboutthe
networkandhowthingsareconnected,morepressurewillrisetoprovidesafeandsecurespaces.
However,organizationsthatexploitthedataandthenetworkshouldbefoundandswiftlypunished
insteadofbeingtacitlyignoredasweseesooften.
DemianPerry,directorofmobileatNPR,observed,TheproblemwithIoTdevicesisnotthat
thesedevicesareinherentlylesssecure,butthatthespaceistoonewtohaveamaturesecurity
infrastructure.Themarketislikelytoweedoutinsecureproductsoverthelongterm,butitmightalso
behelpfultohaveregulatoryreviewovercertainproductcategories,similartothewaytheFDA
managesfoodsafety,ortheroletheNationalTransportationSafetyBoardisnowplayingin
autonomousvehicles.
JasonHong,associateprofessoratCarnegieMellonUniversity,commented,Intheshortterm,
wewillseealotmoreIoTbasedattacks,especiallyransomwareattacks.However,organizationsare
alreadytakingstepstowardimprovingthesituation.Forexample,theFTChasissuedreportsonIoT
securityandisaskingthetopmanufacturersabouttheircybersecuritypractices.Overtime,Iexpect
theretobemorecentersofexcellencetohelpdisseminatebestpracticesforcodingandmanagingIoT
systems.Researcherswillalsocomeupwithbetterwaysformanagingcollectionsofdevicesaswellas
protectinglowenddevices.Itsalsolikelythatinsurancecompanieswillhelpimprovethestateofthe
artbyhavinghigherpremiumsforIoTcompaniesthatdonthavegoodcybersecuritypractices.Most
importantly,cybersecurityisaknownissue,andbothIoTmanufacturersandconsumersarebecoming
savvierabouttherisks.Sowhiletherewillbealotofgrowingpains,Imoptimisticaboutthefutureof
IoT.
RichardForno,seniorlecturerofcomputerscienceandelectricalengineeringattheUniversityof
Maryland,BaltimoreCounty,said,Asacareerinternetsecurityprofessional,Icontinuewitnessing
peoplerushingtoembracethelatestandgreatestthingorgadgetorservicewithoutthinkingaboutthe
possibleramificationstotheirsecurity,privacyorresiliency.Anditsnotjustaboutsecurityorprivacy
whatiftheproductvendorsforyourIoTenabledthingsgooutofbusinessordecidetomaketheir
productincompatiblewithothersinthesamespace?(Whichishappeningalready.)Whatwillusers
productincompatiblewithothersinthesamespace?(Whichishappeningalready.)Whatwillusers
dothen?Accordingly,securitypractitionersandeducatorsatalllevelswillconstantlystruggleto
informthepublicabouttheserisksinwaysitcanunderstandeasilyandpotentiallyaddressintheir
respectivelives.
Theme6:Notablenumberswilldisconnect
Some15%oftherespondentsinthiscanvassingexpectthatperceivedandrealvulnerabilitiesofthe
IoTwillmovepeopletodisconnect.Theynotedtheescalatingsecurityandprivacyrisksposedby
connecteddevicesandthecomplicationsthatoccurwhenfastchanging,fastgrowingcomplex
systemsarebuiltandnetworked.Manyamongthisshareofrespondentsseemtohavelittletono
confidencethatthebuildersoftheIoTwillmakesecurity,safetyandindividualscivillibertiestheir
firstprioritybecauseprofit,powerandefficienciesalwayscomefirst,leavingfarlessinvestmentinthe
crucial,difficult,expensiveandperpetualworkofminimizingthreats.
Lackoftrust,safetyandprivacyissuesandmoremaymovethosewith
fearstowithdraw
Expressionsofconcern,disappointmentandresignationareevidentintheresponsesfromthosewho
sayitislikelytherewillbesomewhochoosetodisconnectinsomemannerfromtheIoT.Mistrustis
thebigfactorintheseanswers,especiallywhenitcomestootherhumans.Theirworriesaregenerally
tiedto1)theirexpectationofharmfromcriminalsandotherbadactors2)theirsuspicionsaboutthe
primarymotivationsbehindtheactsofthecorporateandgovernmentalbodiestheymustdepend
upontooperatethesenetworksand3)theirlackoffaiththatpeoplecangetitalltogethertoplan,
regulate,build,monitor,updateandmaintainsuchcomplexsystems.
Ananonymousseniorresearcherat
Microsoftwrote,Mostpeoplewillmovemoredeeplyinto More,andmoreserious,
connectedlife.Thentherewillbesomecatastrophesome
databreachesarelikely
enormoushackthatcoststhousandsand[takes]livesand
thenpeoplewilltrytodisconnect.Forexample,selfdriving topushpeopleaway
carstakeoffandthensomeonefiguresouthowtohackthem, fromtheInternetof
causinganenormouslossoflifeinonefellswoop.
Things.
Ananonymousrespondentreplied,Iexpectthat
AN ON YMOU S RESP ON DEN T
within20yearsitwillbeverydifficultorimpossibletobuy
nonIoTversionsofmanycommonitems(thisisalready
rapidlybecomingthecasewithtelevisions).Thecurrentnormofpoorlyengineered,nonupdatable,
easilyexploitedIoTsecuritywillcontinue,furtheropeningthesurveillancewindowforgovernments
andcorporationsandcreatinganevenvaster,botnetarmedcybercriminalunderground.
andcorporationsandcreatinganevenvaster,botnetarmedcybercriminalunderground.
Ananonymousrespondentsaid,More,andmoreserious,databreachesarelikelytopush
peopleawayfromtheInternetofThings.Stalkersusinghomewebcamstocollectinformation,
breachesofmedicalrecordsthatareusedtoblackmailthousandsandsubvertedautomobileswill
driveeducatedconsumersawayfrominsecuresystems.
JoelBarker,futuristandauthoratInfinityLimited,said,Disconnectionistheonlysolutionto
thesizeoftherisk.
Ananonymousrespondentsaid,Shortterm[therewillbedisconnection].Thisstuffhas
happened,andishappening.Anelectroniccoldwar.Itmightberevealed.Longterm,electricitywill
beamemoryformostpeople.HaveyoureadTheRoad?Weareonthatroad.
Corporateintransigence,shortsightednessandmisguidedthinking
createvulnerabilities
JenniferZickerman,anentrepreneur,replied,Sadly,peoplewillcontinuetoconnectdevices
withoutdemandingbettersecuritydesign.Shinynewtechnologywilltrumpbig,dumbsecurity
vulnerabilities.Institutionsareparticularlyvulnerable,astheystandtoreapthegreatestbenefitfrom
smartdevices.Wewillseesituationswherehospitalequipment,utilitysystems,evenentirebuildings
areheldforransom.Itismostdefinitelypossibletoimprovesecurityhowever,thatwouldinvolve
settlingonacommon,opensourcesecuritystandard,whichtechcorporationsareloathtodo.
(Witnessthefragmentationofsinglesignonsystems.)Aslongastechcompaniescontinuetolookat
securityasafeatureratherthanasafundamentaloperatingcharacteristic,theywillbeunableto
cooperatetobuildpropersecurityinfrastructure.Aslongassocietycontinuestoallowtechcompanies
toreapvastprofitsinspiteofthedamagetheydotousersthroughalackofeffectivesecurity,tech
companieswillhavelittleincentivetoimprove.
Ananonymoussystemsengineerreplied,
Corporategreedpreventsthingsfrombeingdonewell,thus Thereisalimittothe
theInternetofThingsisahorrificallystupidideathatwill
trustpeopleputinto
drivepeoplebacktousingtechnologythatcantbecorrupted
bycorporategreed. theirmachines.
JESSE DREW
JesseDrew,cinemaanddigitalmediaprofessoratthe
UniversityofCalifornia,Davis,replied,Thereisalimittothe
trustpeopleputintotheirmachines.
Ananonymousadvocateforinternationalfreedomofexpressionwrote,I
dontfeelconfidentaboutthestateofdatasecurityatthemoment,andIfearthatputtingmoredatain
thehandsofrecklesscorporationswillendangerus.Considertheimpactofaleakofhealthrelated
thehandsofrecklesscorporationswillendangerus.Considertheimpactofaleakofhealthrelated
informationwhatstostoppredatoryinsurancecompaniesfromdenyingcoverage?
Ananonymouschieftechnologyofficercommented,Untilsecurityimproves,a
significantnumberofsophisticateduserswilldisconnect.ImnotgoingtoinstallaNest,mynextTV
willnotrunapps,evenifitcostsmemore,andImnotgoingtogetaSamsunginternetconnected
refrigerator.Iwillwillinglygiveupconvenienceuntilthedevelopersgetitright.Iftheyevermanage
to.
AcallforopensourceprocessesandstandardscamefromAlexanderHalavais,directorofthe
mastersdegreeprograminsocialtechnologiesatArizonaStateUniversity.Wewillseethesame
battleswealreadyhavebetweenclosedinfrastructuresandopen,interoperableones,hewrote.We
arealreadyseeingtheearlydaysofthiswithwearables.YourWithingsdevicesalltalktooneanother,
buttalkingacrossmakersbecomesmoredifficult.Serviceslikeifttt[IfThisThenThat]arefighting
againstthesenewwalledgardens.Thefutureofthesesystemsrequiresopenstandards.Ittookalong
timeforwebbrowsersandoperatingsystemstolearnthislesson,andgovernmentregulationhas
playedaroleinmakingsuchexchangeevenmoredifficult,butitislikelyaquestionofwhen,notif
eventuallymakerswillcometounderstandthatopenstandardsimproveuserexperiencesandleadto
greateradoption.
TMIandlessthanstellarperformancefromcomplexIoTsystemswill
drivedropouts
Somerespondentswrotethatpeoplemightsimplywithdrawfromconnectivitybecausetheyare
overwhelmed.Amongthecontributingfactorswouldbeinformationoverloadpoorlymadeoroverly
complexIoTtoolsandsystemsproductsthatdonotperformwell,lacksupportand/orareinconstant
needofupdatesandpatchesandIoTproductsthataregiventonewownerswithoutthemanufacturer
knowingoftheswitch.Asaresult,someoftheserespondentssay,peoplewilldisconnecttoacertain
degreeorneverconsciouslyconnect.
TimothyC.Mack,managingprincipalatAAIForesight,wrote,Atpresent,theInternetof
Thingsismoreaseriesofmisstepsthanagranddesign,iffornootherreasonthanmanyofthelarge
playersarecompetitorsversuscooperatorsandacceptedprotocolsarestillnotagreedupon.Aswell,
thegoldrushqualityofsuchareasassmarthomeshasledtoshoddydesignandpoorconstruction
ofthephysicalandthedigitalaspectsofthisbravenewworld.Asforthelossofcriticalsafetyand
securitythroughnetworkstryingtointerconnectandprotectandthesametime(withlargelythesame
tools),weshouldexpectmanymoredisappointmentsintheIoTdevelopmentsaga.
RyanSweeney,directorofanalyticsatIgniteSocialMedia,commented,Weregoingtoseetwo
groupsstarttoemergewithinthenextdecade:thoseconnectedandthoseunplugged.Beingconnected
groupsstarttoemergewithinthenextdecade:thoseconnectedandthoseunplugged.Beingconnected
canbeburdensometousersastheyfaceinformationfatigue.BretEastonElliswroteabooktitled
LunarParkthatprovidedafascinatingtakeontheconcept.(Spoileralert!)Ellisdepictsaworld
wherekidsaresosaturatedwithinformationtheybecomeboredwithandnumbtotechnologysothey
runawayandstartacommunityoftheirown.InDaveEggersbookTheCircle,(spoileralert)a
characterstrivestoescapetheoppressivenatureofanomniconnecteddystopianfutureandfinds
deathtobetheonlywayout.Exaggerated?Yes.Conceptualplausibility?Definitely.Meanwhile,as
algorithmsbecomemoreefficientandtechnologymoreomnipresentandaccepted,therewillbe
continuedgrowthofpluggedinusers.Governmentswillneedtofocusonprotectingtheconnected
user,asactsofterrorismwilllikelyshifttothedigitalwhenthedamagepotentialisgreatenough.
Wheneverythingisconnectedandreliesonsaidconnectivityofothersources,disconnectingone
systemcouldresultinasignificantfreezeofefficiency.If,forinstance,withinthisdecadeautomated
carsbecomestandardthatsystemcouldbecomecompromisedresultinginanythingfroman
economicshocktomassivelossoflifebycollision.Thescifinerdinmewondersif,inseveraldecades,
thiswillresultinanewtypeofclasssystem.
PeteCranstonofEuforicServices.comsaidthemachineswillmanagethecomplexity,observing,
Therewillbescares,genuinedisasters,butthepotentialgainsfrominterconnectivityaresogreatthat
wewillcontinuetolurchintoafuturewherewewillhavetoconfrontissuesofindependentmachine
machinedecisionmaking(akamachineintelligence,butactuallymoretodowithinterlocking
algorithmsexponentiallyincreasingthecomplexityofmachineresponsepatterns)muchmore
actively.
Theme7:Whetherornotpeopledisconnect,thedangersarereal.
Securityandcivillibertiesissueswillbemagnifiedbytherapidriseof
theInternetofThings
ManyrespondentstothiscanvassingsaidthedangersoftheIoTarerealandpresentadaunting
challenge.Theyarecertainthatinthefuturetherewillbemoreattackswithmoredevastatingresults
asbillionsmorethingsandpeoplebecomeinterconnectedonlineandsystemsbecomemorecomplex
anddifficulttomanage.Manyhavedeepconcernsabouttheprotectionofcivillibertiesinaworldin
whichsomuchgranulardataiscontinuouslycollectedanddatabased,especiallyconsideringthefact
thatthethreatenvironmentcreatedbythiscomplexnetworkingishigh.
Threatsarelikelytoturnintoattacksandotheracts,possiblysome
violent
AnanonymousengineeratCiscocommented,Itisinevitablethatmorepeoplewillbe
connectedmoreandmore,butwedonotexpectthesecurity,whichisacatandmousegame,to
significantlyimproverelativetothenumberofthingsgettingconnected.Peoplewilllosetheirlives
duetocriminalexploitsofvulnerabilities.
duetocriminalexploitsofvulnerabilities.
Ananonymousprogrammeranddata
analystwrote,Mostpeoplearetotallyoblivioustothe Asphysicalattacks
fragileandeasilypiercednatureoftheNetandthetotallack
becomemorepublic,
ofprotectionoftheirmedical/financialinformation.Theywill
continuetonotcareorunderstandtheissuesandwillmove peoplewillunderstand
moredeeplyintoconnectivity.Attacksonpower theneedtotakegreater
infrastructure,automatedvehicles,airplanes,foodsupplies
areallunfortunateconsequencesoftheIoT.
responsibilityfortheir
owncybersecurity.
JerryMichalski,founderatREX,replied,Asidefrom
climatechangeandclownshavingtheirfingersonthenuclear JOH N H OWARD
trigger,theIoTisoneofthelargermenacesweface.Any
devicethatsbeeninthefieldoverfiveyearsishighlylikelyto
bep0wn3d[agamertermmeaningbeatenhandily]bythedarknet.AllofwhichsoundslikeIshould
haveansweredthatpeoplewillwithdrawfromtheIoT,butwithinthenextdecadeIbelievepeoplewill
justdiveinmerrily,becausewereintheuptakeperiodofthisnewtechnologyandthebigflawswont
showupwithinthedecade.WewoulddowelltorethinkentirelythestructuresofthevauntedInternet
ofThings.
JohnHoward,creativedirectoratLOOOK,amixedrealitydesignanddevelopmentstudio,
commented,ThegrowthofIoT,alongwith3DprintingandVR,willfurthererodethedigital/physical
divide.Physicalperil(realorimagined)willputgreateremphasisandopportunityonnetwork
security.Asphysicalattacksbecomemorepublic,peoplewillunderstandtheneedtotakegreater
responsibilityfortheirowncybersecurity.
TheriseoftheIoTandsecurityconcernsamplifiesworriesovercivil
liberties
Somerespondentsexpectthatbecausetherisksassociated
withtheIoTarehigh,thatwillcompelgreatersurveillanceby Connectedcitieswill
governments.Advancedartificialintelligencetoolswillbe
trackwhereandwhen
abletomonitor,analyzeandpassjudgmentuponnearlyevery
detailofanyindividualslifeviathedatacollectedbytheIoT. peoplewalk,initiallyto
Sentimentanalysiscanbeappliedtocreateaprofileof lighttheirway,but
peoplescharacterandintentionsexpertssaysuchprograms
willenhancesecurityandendangercivilliberties.Anumber
eventuallytomonitor
oftheseexpertsworrythatthosewhocontrolthealgorithms whattheydoandsay.
willbegintoevenmoredeeplyexploittheconstantly
multiplyingwaysinwhichtheycanmonitorusersbehaviors MARTI H EARST
multiplyingwaysinwhichtheycanmonitorusersbehaviors
andemotionsandevenpredictand/ormanipulatehow
peoplebehave.Someexpertssayifthebraintointernet
interfaceweretobecomeareality,thistypeofspyingcouldpossiblycaptureandprocesshuman
thought.Itisascifinightmarebroughttolife.Ananonymousrespondentdescribedaworst
casescenario,writing,Itsthetragedyofthecommons:Theindividualincentivesaregreat(better
health,moreconvenience,savingmoney)whilethelongtermconsequencesforsocietyaregrave(loss
ofprivacy,autonomy,safetyinonesownhome).
MartiHearst,aprofessorattheUniversityofCalifornia,Berkeley,replied,Justasthe
pervasivenessofcellphonesforcedthephasingoutofpayphonesinpublicplaces,itwillbecome
impossibletooptoutoftheoncomingconnectedworld.Peoplesbusinesses,homes,carsandeven
theirclothingwillbemonitoringtheireverymove,andpotentiallyeventheirthoughts.Connected
citieswilltrackwhereandwhenpeoplewalk,initiallytolighttheirway,buteventuallytomonitor
whattheydoandsay.Thewallsofbusinesseswillhavetinysensorsembeddedinthem,initiallyto
monitorfortoxinsandearthquakes,andeventuallytomonitorforintrudersandcompanysecrets
beingshared.Peoplecurrentlystrapmonitorsontheirbodiestotellthemhowmanystepstheytake.
Eventually,allfluidsinandoutofbodieswillbemonitoredandrecorded.Optingoutwillbeoutofthe
ordinaryandhugelyinconvenient,justasnotcarryingamobiledeviceandnotusingafastpassonthe
highwayaretoday.
T.RobWyatt,anindependentnetworksecurityconsultant,wrote,Functionalitytrumpslackof
securityeverytime.Wedevelopnewfunctionalmostwithoutregardtosecurityandthendiscoverwe
cannotretrofititafterthefact.Arecentcourtrulingstatedthatweshouldnolongerhaveany
expectationofprivacyinourinternetconnecteddevices.Consideringthatwenowhaveforks,
toothbrushes,healthmonitors,mattresses,sextoysandmoreconnectedtotheinternet,thisruling
hasprofoundimplicationstopersonallife,privacyandchecksandbalancestogovernmentintrusion
andcontrol.Therulingwentalmostunreportedandnopublicoutcrywasraisedoverit.Nopublic
backlashwilloccursolongasthetoysareshiny.
Ananonymousrespondentobserved,Itisahugeinvasionofprivacy.TheInternetofThings
isnotsomethingIwanttoparticipateinfully.OnlyinverylimitedwaysthatIcancontrol.ButIam
older,andwary.Youngerfolkswhohavegrownupwithtechnologiesmaynotcare,sointerconnection
willgrow.ImstillgoingtobuyaTVmonitorwithoutacamera,becauseIdontwantthatpartofmy
lifecameraenabled.Idontwantmyfridgeenabled.Idontreallywantmuchofanythingenabled.I
wantprivacy.
AnanonymouscomputerscienceprofessorataSwissuniversitywrote,The
mainissuewithconnectedobjectsisthepotentialtotracepeople,theiractionsandactivities,orto
hackobjectsandchangetheirbehavior.Weshouldavoidhavingcompletelycentralisedsystemswhere
hackobjectsandchangetheirbehavior.Weshouldavoidhavingcompletelycentralisedsystemswhere
eacheventisrecordedandsenttogovernmentsorsurveillancebodies.
MaryChayko,communicationsandinformationprofessoratRutgersUniversity,replied,While
cybersecurityhasbecomeacriticalchallengeforgovernments,psychologicalsecurityasenseof
safetyandrootednessbecomesperhapsthepremierchallengeforindividuals.Asweseeourdevices
andworldbecomeevermoretightlynetworkedandinterconnectedandrecognizetheinherent
securityvulnerabilitiesinsuchasystem,webecomemorepsychologicallyandemotionallyvulnerable.
Myhopeisthatwewilladdressthis,aswehavesomanyotherissuesinthedigitalage,incommunity
withoneanothercomingtogether(oftenonline)tobetterunderstandourcommonhuman
responses,needsandfrailties,andtodevelopstronger,moresecuresystemsandselves.
Responsesfromadditionalkeyexpertsregardingthefutureof
connectivityintheageoftheInternetofThings
Thissectionfeaturesresponsesbyseveralofthemanytopanalystswhoparticipatedinthis
canvassing.Followingthiswiderangingsetofcomments,amuchmoreexpansivesetofquotations
directlytiedthesevenprimarythemesbeginsonpage40.
Whoseintelligence?Whosecontrol?Howcanwemonitorthe
monitors?
BarryChudakov,founderandprincipalatSertainResearchandStreamFuzionCorp.,replied,
Wecannowunleashthepowerofallbrains,allconsciousnessbothsomaticandartificialtosolve
problemsandimprovethehumancondition.Thisistrulyaremarkabledevelopment.Bruce
SchneiersaystheInternetofThings,withthecomputerizationofeverything,willbetheworlds
biggestrobot.Thiseverythingeverywhererobotaconcatenationofconnectedthings,sensorsand
actuatorswillchangetheworldinwayswecannotpredictandwillmaximizeprofitsforthosewho
controlthecomponents.Physicalorhumandamagemightbecontainedoritcouldleavenations
andgovernmentsmorevulnerabletohacktivismandcyberterrorismtargetingairmonitoring,water
andelectricalinfrastructuresystems.Smartandnetworkedalsomeansmaliciousactorscanhack
thesesystemsandcreatemischiefandworse.TheInternetofThingsisawayofnotonlyconnecting
objects,butalsoembeddingintelligenceintothoseobjects.Thatintelligenceispersistentandwill
soonbeubiquitous.Veryquicklythequestionarises:Howmuchintelligence?Andhowmuch
decisionmaking,orcontrol,canbeembeddedintothoseobjects?Themostlylikelyphysicalor
humandamagethatwilloccurwhenthingsarenetworkedarisesinthisarea:Whoseintelligence?
Whosecontrol?Howdowe,ifneedbe,circumventitorturnitoff?Howcanwemonitorthemonitors
toensurenobadactorsaretryingtoharmususingIoTasaweapon?
Fixeswillarisebecausethecyberphysicalspaceisthefastestgrowing
Fixeswillarisebecausethecyberphysicalspaceisthefastestgrowing
partoftheeconomy
GlennRicart,InternetHallofFamememberandfounderandchieftechnologyofficerofU.S.
Ignite,said,Thereistremendouslatentpotentialingreaterconnectivityenoughpotentialtoforce
providersandconsumersaliketofindwaysofminimizingtheinevitabledownsides.Justas
UnderwritersLaboratories(thefamousULlabel)wasstartedbyinsurancecompaniestominimize
lossesduetofireandothermalfeasanceofnewelectricaltechnology,Iwouldexpectthat
organizationslikeMozillaandElectronicFrontierFoundationandotherswillcreatetestingprograms
andlabelsthatwillhavevalueincreatingtrustandreducingvulnerabilities.Atsomepoint,the
NationalInstituteofStandardsandTechnologywillfindthatitmustturnthemajorityofitsactivities
tostandardizationandtestinginthecyberphysicalspacebecausethatistheportionoftheeconomy
growingmostrapidly.
Theattackswillgetmuchworsebuttherearewaystomitigate
them
CoryDoctorow,writer,computerscienceactivistinresidenceatMITMediaLabandcoowner
ofBoingBoing,said,Theattackswillgetmuchworse.Thereareavarietyofwaystomitigatethem.
First,inthelineofestablishingmoregracefulfailuremodes:EliminateSection1201ofthe
DMCA[DigitalMillenniumCopyrightAct]andtheComputerFraudandAbuseAct,bothofwhichare
routinelyusedtosuppresstruefactsaboutsecuritydefectsinproductswerelyupon.Thecurrent
modelisthatwelearnaboutthesefactsnotwhentheyrediscoveredbyagoodguybutwhenabad
guyexploitsthemsohorriblythattheirexistencecannolongerbesuppressed.Second,uselegislation
toforcefirmstointernalizethecostofbreaches:Rightnow,losingacreditcardrecordcostsafirm
somethinglike$0.35,plusasixmonthgiftcertificateforacreditmonitoringservice.Butthedata
fromthosebreaches,combinedwithotherbreachdatabycrooks,canbeusedtopulloffbreathtaking
identitytheftcrimes(lastChristmassawarashoftheftsofwholehouses,accomplishedbyassembling
enoughidentitydatatosuccessfullyprocureduplicatetitles/deeds).Iffirmshadtopaytheentire
likelylifetimelossesfrombreaches(becauseofstatutorydamagesand/orprecedents)thennoinsurer
wouldunderwritecompaniesthatwereassloppyastodaysdatacollectionandretentionwouldbe
pricedaccordinglybyinsurers,atamuchhigherpricethantodays.(Today,themajorexpenseishard
drives,notliabilityinsuranceforallthatpotentiallyexplosivematerial.)Third,eliminatethestate
mandatesforcollectionandretention,especiallythoseintheEuropeanUnion,whichpressfirmsinto
serviceasproxiesforlawenforcement,andwhichsimultaneouslymandatethemass
collection/retentionofsensitivePII[personallyidentifiableinformation]thatwilleventuallyleakand
beexploitedbycrooks.
Abetterevaluationandcertificationsystemfordevicesisneeded
HenningSchulzrinne,professoratColumbiaUniversityandInternetHallofFamemember,
commented,Consumerscurrentlyhavenoreasonablewaytojudgewhetherthedevicestheybuyare
commented,Consumerscurrentlyhavenoreasonablewaytojudgewhetherthedevicestheybuyare
designedaccordingtocommonsecuritypractices,whetherandhowtheyarebeingtested,how
securityrelatedbugsareaddressedandforhowlongafterpurchase.Nordotheygenerallyknowwhat
kindofdatathevendorstoreswhere,sharedwithwhomandforhowlong,andwhetherthosesystems
areregularlytestedbyindependentthirdparties.Forhigherriskdevicesthatcaneitherdophysical
harm(cars)orcancausesignificantlossofprivacy(inhomecameras)orendangerphysicalsafety
(doorlocks),somekindofcertificationthatdoesnotjustconsistof10pagesofdisclaimersseems
necessary.
Technologyhasalwaysinspiredfears,butpeoplefoundwaystouse
themeffectively
JonathanGrudin,principalresearcheratMicrosoft,observed,Previoushardwaregenerations
andmajorsoftwareadvancesgaverisetofears,butpeoplefoundwaystousethemeffectively,
warrantingmeasurestopreventseriousmisuseornegativeconsequences.Whywouldthisbean
exception?
Peoplewilldemandsolutionstoproblemsinthecyberenabledworld
JimHendler,professorofcomputerscienceatRensselaerPolytechnicInstitute,observed,
Automobileaccidentshavenotkeptpeoplefromdriving,burglarydoesntkeeppeoplefromowning
houseswithnicethingsinthemandworkplaceviolencedoesntkeeppeoplefromholdingjobs.Society
findswaystocontrolthesethings,byacombinationofsocialandtechnicalmeans,andwhilenoneare
completelyremoved,theyarekepttoalevelpeoplecantoleratelocksareputondoors,lawsare
passed,policemenarehiredandsocietyadjusts.Thecyberenabledworldwillneedtocreate
analogousmechanisms,whichwillhappenasawarenessofthreatincreases,andimpactswillbe
controlled.Therewillbeaperiodofadjustment(asbadthingshappen),followedbyademandfor
change,andthatwillmotivate(throughfinancialincentivesand/orlegalpenalties)change.
RiskisapartoflifeandIoTsecuritywillimprove
RobertAtkinson,presidentoftheInformationTechnologyandInnovationFoundation,
observed,MostadultsintheU.S.drivecarseventhoughitentailsrisks.MostadultswilluseIoT
deviceseventhoughtheyinvolverisksbecausethebenefitswillvastlyoutweighanypotentialrisks.
Moreover,asIoTprogressessecuritywillimprove.
PeoplewillhavelittlechoicebuttoparticipateintheInternetof
Things
AliceMarwick ,afellowatData&Society,wrote,OptingoutoftheInternetofThingswill
AliceMarwick,afellowatData&Society,wrote,OptingoutoftheInternetofThingswill
becomeincreasinglydifficult,asdevicesfromautomobilestoalarmclockswillbeequippedwith
proprietaryinternetenabledsoftware.Theabilityofpeopletotinkerwiththeirowndevices,choose
whethertheywantinternetconnectivityandselectnonconnecteddeviceswilldecrease,making
optingoutonerous,expensiveanddisadvantageous.Thisissimilartothebodyscannersinairports,
whereonecanoptout,butithasacost.Currently,databreachesarewidespread,butthecostof
optingout(of,forinstance,creditcards)generallyoutweighstherisk.Peoplewillhavelittlechoicebut
toparticipateintheInternetofThings.
Optingoutisnotviable:Howdoesonedisconnectfromahome,city,
airport,healthcare?
KateCrawford,awellknowninternetresearcherstudyinghowpeopleengagewithnetworked
technologies,said,Thisquestionassumesthatdisconnectingremainsasociallyandeconomically
viableoption.Formanymillionsofpeople,itsimplywontbe.Quiteapartfromtheindividualuseof
devicesandplatforms,theinfrastructureofeverydaylifewillbenetworked.Howdoesonedisconnect
fromyourhome,city,airportorhealthcaresystem?
Fixesarehardtoconceive,butpeoplemightnothaveachoice
RebeccaMacKinnon,directorofNewAmericasRankingDigitalRightsinitiative,wrote,
Innovationsingovernance,accountability,securityandindustrycoordination(withoutcollusion)are
goingtoneedtoadvanceinwaysthatarehardtoconceiveatthispointintime.Peoplewithreal
securityconcernsaregoingtowanttodisconnectbutthequestioniswhethertheywillhaveachoice.
Insomepartsoftheworld,perhapsnot.
Thelikelyconsequencewillbemorecatastrophicevents
MarcRotenberg,executivedirectoroftheElectronicPrivacyInformationCenter,said,The
essentialproblemisthatitwillbeimpracticalforpeopletodisconnect.Carsandhomeswillbecome
increasinglydependentoninternetconnectivity.Thelikelyconsequencewillbemorecatastrophic
events.
Thecostandseverityoflapsesandbreacheswillbeaconstant,
ongoingburdenforall
AnilDash,entrepreneur,technologistandadvocate,observed,Peoplewillcontinuetoconnectout
ofnecessity,butthecostandseverityoflapsesandbreacheswillincreaseuntilitsaconstant,ongoing
burdenforall.
NewlyempowereduserswillprevailitisanAgeofAmateurs
NewlyempowereduserswillprevailitisanAgeofAmateurs
DavidBrin,authorofTheTransparentSocietyandExistenceandaleaderattheUniversityof
California,SanDiegosArthurC.ClarkeCenterforHumanImagination,wrote,Botharetrue[there
willbemoreconnectionandsomewilldisconnect].Weseldomnoteamajorrecenttrend,anAgeof
Amateurs.Alreadyweareinanerawhennoworthwhileskilliseverlostifitcandrawtheeyeofsome
smallbandofamateurs.TodaytherearemoreexpertflintknappersthaninthePaleolithic,more
swordmakersthantheMiddleAges.Thereisvastlymoresurfaceareaofhobbyisttelescopesthan
instrumentsownedbyallgovernmentsanduniversitiesputtogether.Networksofneighborshave
startedsettingupchemicalsensorsthatwillweaveintohyperenvironmentalwebs.Thiswillaugment.
Foreverycouchorwebpotato,therewillbetwowhousethesenewpowerstobecomemorevividin
reallife.
Onlychooselibresoftwareconnecteddevices
RichardStallman,presidentoftheFreeSoftwareFoundationandInternetHallofFame
member,said,Iwilldomyutmosttoconvincepeopletorejectinternetconnecteddevicesthat
containanynonlibresoftware,byteachingpeoplethattheycannotpossiblydeserveourtrust.See
[thisarticle]forwhythatisso.
Thebenefitsofbeingconnectedoutweightherisks
JeffJarvis,professorattheCityUniversityofNewYorkGraduateSchoolofJournalism,observed,
Itwasntlongagothatitwassaidnoonewouldeverputtheircreditcardsonline.Thencame
Amazon.Thebenefitsofbeingconnectedfaroutweightherisks.Therearemorethanenough
worrywartsandregulatorstowatchoveroursafety.
Nobacktothelandmovementisinsight
JohnMarkoff,seniorwriteratTheNewYorkTimes,commented,Iseenobacktotheland
movementonthehorizon.
Offnetterswillgetattentionbutwillnotadduptomuch
MikeRoberts,InternetHallofFamememberandfirstpresidentandCEOofICANN,responded,
Ithasbeendemonstratedtimeandagainthatindividualswilltradeprivacyforconvenience.Ifanew
networkapplicationpromisesselfperceivedconvenienceorvalue,suchatradeislikely.Indeed,we
seeitgoingoneveryday.Oneofthebroaderissuesishowtodealwithprivacyasasocialconstruct.
MuchofwhatweregardasprivacytodayisanEnlightenmentideathatisassociatedwithpersonal
freedomandotherhumanrights.Someregardtheseasimmutable,othersasfungibleinpursuitofa
betterlife.Theargumentsarenotgoingtobesettledsoon.Culturesofdissentwillpersist,andmuch 31/46
betterlife.Theargumentsarenotgoingtobesettledsoon.Culturesofdissentwillpersist,andmuch
willbemadeofoffnetters,similartothepublicitygainedbytodaysoffgridculture.Probablynota
bigdealinthegrandschemeofthings.
NewjobsandsocialprocesseswillemergetoprotecttheIoT
BenShneiderman,professorofcomputerscienceattheUniversityofMaryland,observed,
Maliciousattacksbyvandals,criminalsandterroristswillexpand,butincreasinglypowerfuldefenses
willbebuilt.Somecanbecentralizedandtopdown,butbottomup,communitydrivenstrategieswill
emerge,alongwithdevotedpublicdefenders(vigilantes).Newjobsandsocialprocesseswillemergeto
protecttheIoT.
Everythingthatcanbeconnectedtothewebwillbe
StoweBoyd,managingdirectorofAnotherVoice,wrote,Inaworldinwhichconnected
driverlesstransportationbecomestheubiquitousandlowcostnorm,fewwillbeconcernedthat
occasionallyahackercantakeoveravehicleandcrashit,especiallysincetensofthousandsdieevery
yearincaraccidentsnow.Thatexamplewillbetheinstancethatprovesthegeneralcase.Yes,hacking
willcontinue,andcorporationsandgovernmentswillfightit,butmeanwhile,theoverwhelming
majorityofhumanactivitiesandfinanceswillmoveonline,andeverythingthatcanbeconnectedto
thewebwillbe.
Thosewhodisconnectwillbeoutliers
FredBaker,fellowatCiscoSystemsandlongtimeInternetEngineeringTaskForceleader,said,
PeoplewillbecomemoreconnectedIsaythisbecauseIobservethatthey[already]do.Thereare
thosewhodisconnecttheyaretheoutliers.Itwouldbeagoodthingifourpublicinstitutionssought
tomakethingsmoresecureandsafe,andsomeofthoseinstitutionsdotry.However,otherpublic
institutionsseektoteardowntheexactthingsthatimproveoursecurity,suchasbyaskingfor1)law
enforcementaccesstoencryptedcommunications,or2)theoutrighttechnologicalbanofcertain
kindsofcommunications.Theyaskforitbecause1)theyaredeludedintobelievingthatonlylaw
enforcementwouldhaveaccesstotherevealedinformation,whichrunscountertotheexperienceof
theLosAngelesPoliceDepartmentintwocasesinthe1990sandoftheGreekgovernmentin2002.If
thereisawaytohaveaccesstothatcommunicationbyanyone,evenifanyoneiscomposedentirely
ofincorruptiblesaints,thereisawayformilitaryenemiesandorganizedcrimetohaveaccessaswell.
Theyalsoask2)becausetheydontunderstandthecapabilities,orlackofcapabilities,intechnology.
If,forexample,onewouldlikeallalQaidaandISISpropagandatobemagicallyfilteredawayand
unavailable,askhowwellwehavedonewithpornography.Wesay,Wherethereisawill,thereisa
way,andthatappliesbothtotheevilandthegood.
way,andthatappliesbothtotheevilandthegood.
MassiveworkisneededtomaketheInternetofThingsfunction
RandyBush,researchfellowatInternetInitiativeJapanandInternetHallofFamemember,
commented,PeoplewillignorethecontinuousIoTdisasters,andthepresswillminimizethem.We
paperoverIoTsecurityissues,yetmassiveworkisneededhere.
Peoplewilljusthopethattheinstitutionsaroundthemwontharm
them
danahboyd,founderofData&Society,commented,Therewillbenochoice.Asaresult,many
peoplewilljusthopethattheinstitutionsaroundthemwontharmthem,whilesomepeoplewillfeel
veryacutepainbecausetheydontfitintothesysteminanacceptableway.
Thisistheearlybreakinphasethingswillgetbetterovertime
DocSearls,journalist,speakeranddirectorofProjectVRMatHarvardUniversitysBerkman
CenterforInternetandSociety,wrote,TheInternetofThingsisamisnomer,atleastasoftoday.
WhatwehaveinsteadiswhatPhilWindley,PhD,callsaCompuserveofThings.Hissummary:On
theNettodaywefaceachoicebetweenfreedomandcaptivity,independenceanddependence.How
webuildtheInternetofThingshasfarreachingconsequencesforthehumanswhowilluseorbe
usedbyit.Willwepushforward,connectingthingsusingforestsofsilosthatarereminiscentthe
onlineservicesofthe1980s,orwillwelearnthelessonsoftheinternetandbuildatrueInternetof
Things?Connectivityforthingstodayiswhereconnectivityforpeopleandcomputerswereinthe
1980sandearly1990s,whentheclosestthingswehadtotheinternetwereCompuserve,AOL,Prodigy
andotheronlineservicesthatdidntinteractwitheachother.LikewisetodaywehavetheGoogleof
Things,theAppleofThingsandtheAmazonofThingsallofthemclosedcorporatesystems.Worse,
manyoftheconnectedthingswearesoldtodayspyonus,usuallywithoutourpermission.Somecars
reportourdrivingtoinsurancecompanies.SomeSamsungTVswatchandlistentoviewersinliving
rooms,soSamsungcansellthatdatatootherpartiesforadvertisingpurposes.Thisisnotonly
appallingonitsface,butitwillbeflushedoutbybothmarketresistanceandregulationssuchasthe
EUsGeneralDataProtectionRegulation.Theonlywaytofullyreducevulnerabilitytosurveillance
andotherformsofbadactingistogiveindividualsfullcontroloverthethingsintheirlives.Todaywe
areonlybeginningtoevolvetowardthatendstatebutthedemandwillbethere,whichiswhythere
willbeabusinessinit,anditwillcometopass.Onceitdoes,muchbetterinformationwillflowfrom
peoplewhoownthingstothecompaniesthatmakeandservicethosethings.Andspyingwontbe
required.BetweennowandthenwewillcontinuetofaceDr.Windleyschoice.
WhenitcomestotheInternetofThingsanddatabreaches,winteris
coming
AmyWebb,futuristandCEOattheFutureTodayInstitute,wrote,Historically,wehavenotseen
apositivecorrelationbetweenlargescalehackingattacksandsignificantnumbersofpeople
disconnectingfromdevicesorservices.Afterbreachesatsomeofourlargestretailersand
entertainmentproviders,suchasSonyandTarget,consumerswentrightbacktopayingfortheir
goodsandservices.Whenitcomestotechnology,ifitmakesourliveseasier,wewillcontinuetouseit,
evenwhenriskisassociated.LooknofurtherthanUber,aservicethatchangesitspricesregularly,
sometimeswithincreasesuptofiveorsixtimesabovewhattheywouldbeotherwise.Wemight
complain,butthefactisthatwecontinueusingtheservice,evenwhenitmakesnofinancialsense.
Technologycanbelikejunkfood.Wellconsumeit,evenwhenweknowitsbadforus.Thereisno
silverbullet.Theonlywaytoeffectivelypreventagainstmalwareanddatabreachesistostay
continuallyvigilant.ToborrowananalogyfromGameofThrones,weneedaNightsWatchfor
security.BecausewhenitcomestotheInternetofThingsanddatabreaches,winteriscoming.
Organizationsmusthireenoughknowledgeablestafftomonitorandadjustsystems,andtoempower
themtokeeppacewithhackers.ITandsecuritystaffmustbewillingtoeducatethemselves,toadmit
whentheyneedhelpandtodemandthatexecutivesmakedecisionsproactively.
Mostpeopledontcareaboutsecurityorprivacyuntiltheyhave
experiencedabreach
BradTempleton,chairforcomputingatSingularityUniversity,wrote,Fewwilldisconnecteven
iftherearestrongargumentsforit.(SelfdrivingcarswillbeonlymarginallyconnectedtotheirHQs
duetosecurityconcerns.)Whentheconnectionsaresetupbysecuritypros,theywillbemore
minimal.Whensetupbythepublictheywillbepromiscuous.Weneedtocompletelyreplaceour
existingoperatingsystems(Windows,Mac,Linux,Android,etc.)toactuallymakethesedevicessafe,
andwemustlimittheirconnectivity,buttheconveniencethatcomesfromnotdoingthosethingswill
win,sincemostpeopledontcareaboutsecurityorprivacyuntiltheyhaveexperiencedabreach.
Ifsuchsystemsprovetobeunreliable,peoplewillleaveindroves
VintonCerf,vicepresidentandchiefinternetevangelistatGoogleandInternetHallofFame
member,wrote,Thiswillhappenifdevicescomeonthemarketthatrequireonlineoratleastlocal
communicationandprogrammablecontrol.Therearemanyrisksthatreliabilityandsafetywillsuffer
unlessthemakersarediligentaboutprotectinguserinterests.Itcouldbeimpossibletoescape
increasedconnectivity.LookatpresentdependenceonGoogleMapsorgenerallyonmobilesandapps
inthelast10years.Reliabilitywillbekey.Ifsuchsystemsprovetobeunreliable,peoplewillleavein
droves.Sothatsaprimaryrequirement.Safetyisalsoaprimaryrequirement.Privacy,securityare
partofthemixbutthetoptwoarereliabilityandsafety.
Belessconcernedwithhackersandmoreconcernedabouttheways
Belessconcernedwithhackersandmoreconcernedabouttheways
datawillbeused
JudithDonathofHarvardUniversitysBerkmanKleinCenterforInternet&Societywrote,
Peoplewillmovemoredeeplyintoconnectedlifeandtheyalsowillbemovedtherewhetherthey
wanttobeornot.Theconnectionofthephysicalworldtoinformationnetworksenablesthecollection
ofanunimaginablyvastamountofdataabouteachofus,makingitpossibletocloselymodelhowwe
thinkandtodeviseincreasinglyeffectivewaysofinfluencinghowweactandwhatwebelieve.
Attainingthisabilityisextraordinarilyvaluabletoanyonewithsomethingtosellorpromote.The
crucialkeyisgettingpeopletoprovidethedata,anditsnotsurprisingthatwerealreadyseeingmany
oncestandaloneobjects(watches,heartratemonitors,thermostats,cameras,housekeysandsoon)
turnintodatacollectingnetworkdevices.Myconcernwiththesafetyofthingsthatarepartofdeeply
connectedworldisnotaboutitssecurityandthedangersofbeinghacked(thoughthosearereal,and
quiteserious)butwiththedangersthatcomewiththeirintendeduses:collectingavastamountof
intimatedataabouteachperson,whileweavingthemselvesintoeverydaylifeasasourceofgreat
convenienceandpampering.
Theinternetwillbecomemorelikeautility
DavidLankes,professoranddirectorattheUniversityofSouthCarolinasSchoolofLibraryand
InformationScience,said,Thereisaninterestingshiftwhenafeatureorservicebecomesautility.It
becomessimultaneouslyexpectedandinvisible.Youfliponthelightswitchandyousimplyexpect
powertobedeliveredwhilesimultaneouslybecominglessawareofhowthathappens.Youexpect
roadstotakeyoutoadestinationbuthavelittleknowledge(orconcern)withwhattheroadismadeof
(concrete,asphalt,newmaterials).Thisleadstoaseriesoftroublingissues.Takethoseroads.We
assume,asautility,theyareavailable,butdontknowspecifics.Specificslikebridgesagingoutof
service.Weonlybecomeawareoftheimportanceofbothavailabilityandserviceassurancewhen
somethinggoeswrong.Eventhen,westilldriveonthenextbridgeassumingthatthefailedonewasan
anomaly,orthatafailedbridgewillspuraction.TheInternetofThingsisnothingmoreorlessthan
theevolutionoftheinternettoautility.WedontthinkaboutourrefrigeratorshavingIPaddresses,or
ourcarslinkingtoWiFibecausewesimplyassumetheywill.Thevaluewegetistoohighnottotake
theriskparticularlybecausetheriskishiddenorminimized.
Securitymustimprove,butneedwilldrivemanufacturerstoprovidesecuresolutions
GalenHunt,partnerresearchmanageratMicrosoftResearchNExT,urged,ThesecurityofIoT
mustimprove.Asmoredevicesattach,consumersandenterpriseswillgrowintheirunderstandingof
theprofoundneedforsecuresystemsthisneedwilldrivemanufacturerstoprovidesecuresolutions.

Implications of The Internet of Things Connectivity Binge - Pew Research Center

Încărcat de

Informații document

Titlu original

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Implications of The Internet of Things Connectivity Binge - Pew Research Center

Încărcat de

Drepturi de autor:

Formate disponibile

6/8/2017 ImplicationsofTheInternetofThingsConnectivityBinge|PewResearchCenter

JimWarren,longtimetechnologyentrepreneurand DAVI D WU ERTELE

S-ar putea să vă placă și