SUMMARY

Johannes vom Dorp explains the results of his team’s 2020 Home Router Security Report (spoiler alert: it doesn’t look good).

GUEST

Johannes vom Dorp of Fraunhofer Institute for Communication, Information Processing and Ergonomics FKIE

HIGHLIGHTS

  • They tested the latest firmware from 127 routers using the Firmware Analysis and Comparison tool.
  • Ninety percent of routers use Linux-based firmware, many of these with old, insecure kernels.
  • Real-time operating systems such as ThreadX and eCos are not used as much as Linux; they are harder to exploit.
  • The best things you can do as a user to have a secure home router are 1) choose a router company from the report that tends to update its firmware more often, 2) change passwords wherever you can on the router firmware/web UI, and 3) continually look for firmware updates for your router once you get it home, as many don’t automatically update.

LINKS

  • Cyber Analysis and Defense Department
  • 2020 Home Router Security Report
  • Firmware Analysis and Comparison Tool (open source)
  • Johannes’ router of choice, AVM FRITZ!Box 7590
  • Email Johannes and his group to get info on the security of your router