Security issues for Internet appliances

Internet-connected consumer appliances, under a dedicated and simplified user interface, often contain fully-functional computers, sometimes even based on standard software platforms and operating systems. These appliances are therefore vulnerable to the same threats that plague desktop computers, including viruses and worms. Owing to their connectivity, uniform configuration and lack of professional administration, they also run a serious risk of being exploited for DDOS (distributed denial of service) attacks. This is where many previously infected appliances are woken up simultaneously by an evil master and ordered to bombard a designated victim from all sides. In this paper, we explore threats and defenses for this scenario. The issues we discuss include secure firmware upgrades, intrusion detection, remote administration and manufacturer liability.