The Mirai Botnet and the Importance of IoT Device Security

Abstract

In September of 2016, a new threat appeared on the internet that launched crippling Denial of Service Attacks against several high-profile targets. The Mirai Botnet, as it was called, took advantage of the weak security measures on Internet of Things (IoT) devices and used them to launch these DDoS attacks. The severity of these attacks awakened the technology industry to the lack of security for IoT devices. The use of IoT devices is expanding rapidly, creating an increasingly large attack surface for threats like Mirai. Multiple technology organizations have since been working to develop standards to push manufacturers to emphasize security on their devices and implement new technologies to improve security for consumers and enterprises. The renewed interest in security and the development of security standards may not be enough, as the market for IoT devices often incentivizes ease of use and practicality over security. The goal of this document is two-fold. First, I will explore the workings of one of the most disruptive pieces of malware in recent history, the Mirai Botnet. Second, I will explore methods to secure IoT devices from being compromised by malware such as the Mirai Botnet.