Finding vulnerable IoT devices in Japan
About National Cyber Observation Center
The Internet of Things (IoT) brings several benefits to individuals and society. However, the lagging of security and privacy on IoT devices can expose users and the supporting networks to cybersecurity risks. In response to the increase in cyber-attacks and the expansion of damage caused by IoT devices, “the amendment of the Telecommunications Business Act and the Act on the National Institute of Information and Communications Technology” came into force on November 1, 2018, adding the survey of vulnerable IoT devices to NICT operations for 5 years. The National Cyber Observation Center was established on January 25, 2019 to carry out this mission.
NOTICE (National Operation Towards IoT Clean Environment) is a national project by the Ministry of Internal Affairs and Communications (MIC), the National Institute of Information and Communications Technology (NICT), and Internet Service Providers (ISPs) to survey vulnerable IoT devices in Japan that may be abused in cyber attacks and to alert device users. The NOTICE project was launched on February 20, 2019.
The National Cyber Observation Center, as the organization responsible for surveying vulnerable IoT devices in the NOTICE project, conducts Internet-wide scans on IPv4 addresses allocated to Japan to search for IoT devices with weak ID/PW settings that may be abused in cyberattacks. In the survey, we enter several hundred ID/PW pairs (simple ID/PW pairs or those used in the default settings of commercially available IoT devices) into devices that allow login attempts from the Internet to check whether login is possible.
We provide ISPs with information on devices that have been successfully logged in the survey, as these devices are at risk of being compromised by attackers and abused in cyber-attacks. ISPs identify the users of the devices on the basis of the information and alert them to take countermeasures. Users who receive alerts from ISPs can reduce the risk of future damage by changing device settings and updating software with the help of the support center.
For technical inquiries regarding NOTICE survey, please contact us.
National Cyber Observation Center, Cybersecurity Research Institute,
National Institute of Information and Communications Technology
4-2-1 Nukui-Kitamachi, Koganei, Tokyo 184-8795, Japan
Cybersecurity Research Institute
- Cybersecurity Research InstituteClick here for other organizations
- cybersecurity research institute top