Bullguard isn’t the only company getting into the home network security field.
On Tuesday, home-networking startup Eero announced the next generation of its Wi-Fi system, a $299 package that pairs a central router with a “Beacon” that plugs into an outlet to extend good Wi-Fi coverage throughout a dwelling, forming a mesh network. (Those cute beacons also double as nightlights.) Accompanying the product is a new feature called Eero Plus, an optional subscription service that will include security features for home networks for, like the Dojo, a monthly or yearly fee.
Nick Weaver, CEO of Eero, says that ideally, people would install antivirus or antimalware software on all the devices they own. But of course, that’s not possible. After all, your smart lightbulbs probably aren’t going to cooperate if you try to install software on them.
“When you look at the home, and all the devices we have connected,” he says. “The best way to do it is actually to protect everything at the network level.”
Eero Plus promises to keep the network safe in a couple ways. “Any type of known malware or virus that you try to download, it’ll block the download of that content on your device,” he says. “And then, if a device does happen to be infected, it will also block all of the traffic out.” That means that Eero Plus can block what Weaver calls “malicious communication” between a compromised device and an outside server, ensuring that it doesn’t become part of a botnet such as Mirai. It also offers parental controls to keep content kid-friendly.
Like the Dojo, the Eero Plus system considers the larger network that is comprised of all the smaller networks. “You can constantly tune and tweak what types of threats we see,” Weaver says, “and then you can deploy that learning across every single network.”
But it’s unclear whether consumers will want to plunk down cash for their own home network security, says Ghosemajumder, of Shape Security, which offers cybersecurity for companies and other organizations.
“I think that it’s too early to tell how effective these devices are, because they’re just coming to market now,” Ghosemajumder says, adding that the proof will be in how they handle real Mirai-type attacks. “The concept is definitely worthwhile. I think that there’s no reason that they shouldn’t be technically capable of providing a lot of effective protection.”
Your home network, by the way, should ideally incorporate a modern router and a Wi-Fi signal that’s password-protected.
Your smart fridge may not actually be threatening you specifically
“I think it’s fantastic that more and more devices [like Eero or Dojo] are becoming security-aware,” says Oren Falkowitz, who previously worked for the NSA and now heads a company called Area 1 that focuses on preventing phishing attacks. “And it’s important for people to have as many tools as possible.”
That said, Falkowitz points out that with something like a Mirai botnet attack, even though it utilizes consumer products, the focus is not on everyday people—it’s on companies like Dyn. A bigger concern for the average citizen, he says, is phishing attacks, in which cybercriminals try to get people to click on a bad link, or fill out an imitation bank form online. (Both Eero and Dojo say that their services can help protect against phishing scams, like by stopping a bad page from being loaded if a user clicks a suspect link.)
“It’s asking more and more of people for them to be like their own specialized security army,” Falkowitz says. “And that doesn’t make a lot of sense. The risk of a [internet-connected] refrigerator being compromised is not really against the individual that owns that refrigerator.”
More likely, that smart fridge, or webcam, is part of a larger attack. “It’s very uncommon that your refrigerator is attacking you,” he adds. “Or that anyone really cares if you have bad eggs.”
Ultimately, Falkowitz thinks that it’s not the consumers, but the manufacturers that make the internet-connected devices, who should bear the burden of making sure their devices are secure. “It’s not the responsibility of individuals to be defending the world against Mirai,” he says.
In other words: Until all device manufacturers are selling totally secure gadgets, systems like the Dojo or Eero Plus may well be a stop-gap.
