Can your smartwatch get hacked? Study shows what information is at risk
Smartwatches might be good for tracking steps and heartrates, but they can also offer hackers a wealth of personal information to exploit, according to a new Charles Darwin University (CDU) study.
Researchers in the study hacked into a variety of smart wearable devices, valued between $25 and $150, to understand the vulnerabilities of this technology and what information can be accessed and exploited.
These devices allow people to track their health, monitor their fitness, conduct medical tests and more but often use Bluetooth Low Energy (BLE) technology, which sacrifices security for low energy consumption.
Study supervisor Dr Bharanidharan Shanmugam, who is a Lecturer in Information Technology at CDU’s Faculty of Science and Technology, said researchers were able to connect to the devices and gain access to data and had the ability to manipulate it.
“We could bring a pulse down or up, we could see where a person has gone, where they’ve spent time and other medical readings like heartbeat, Blood Pressure and ECG readings” Dr Shanmugam said.
“This data can be pushed to medical companies, used for targeted marketing, or can be used to develop a profile on a user.”
Dr Shanmugam said given the rising popularity of smart wearable BLE devices, manufacturers needed to make it a priority to implement robust security mechanisms.
“The assertion that smartwatch makers are not taking security seriously is a significant concern,” Dr Shanmugam said.
“If this trend persists, it could lead to a cascade of negative consequences for both individuals and society. Potential consequences are increased identify theft and financial loss, as any breach could expose personally identifiable information to cybercriminals leading to identity theft, financial fraud and unauthorised access.
“There’s health data violation. If the data fall into wrong hands, it could be used for blackmail or even physical harm especially for elders, and there’s corporate espionage. Compromised devices can allow competitors or cybercriminals to steal valuable intellectual property. A massive volume of lawsuits stemming from these incidents could potentially bankrupt the company.”
The study was conducted with Christ Academy Institute for Advanced Studies in Bengaluru, India.
Vulnerability Analysis and Exploitation Attacks on Smart Wearable Devices was published by the Institute of Electrical and Electronics Engineers.
Related Articles
Industry and students collab to create AI road tech
In a single semester, four Charles Darwin University students developed an Artificial Intelligence model which can revolutionise road safety and infrastructure maintenance.
Read more about Industry and students collab to create AI road techFriend or foe: Why homebuilders have a lot to learn from termites
Termites are often thought of as bad news when it comes to a building’s integrity – but what if the voracious insects hold the blueprint to designing the coolest homes in the Territory?
Read more about Friend or foe: Why homebuilders have a lot to learn from termitesRooting out plant diseases: Are computers ready to run our farms?
Nature is still too complex for artificial intelligence (AI) modelling to be effective, but the tipping point is close, according to a new study that found the technology may still trip at the last real-world hurdle.
Read more about Rooting out plant diseases: Are computers ready to run our farms?