Internet of Things (IoT) devices have been shown to be insecure in general. There are continuing research and news reports indicating Internet connected devices may contain backdoors either placed intentionally or discovered as vulnerabilities (Korolov, 2014). The backdoors in IoT devices, especially the deliberately hidden ones, present significant security risks to people, our society, and US economy as those devices are internet connected and deployed in massive numbers. US Government and organizations are developing guidelines and certification standards for IoT devices to mitigate risks. In this paper, we investigate the effectiveness of certification in identifying hidden backdoors in IoT devices. The research plan and implications of our study are discussed.
Privitera, Donald A. and Li, Lei, "ARE CERTIFIED IOT DEVICES TRUSTWORTHY? A PRELIMINARY INVESTIGATION" (2018). SAIS 2018 Proceedings. 4.