ETSI Releases New Standard for Consumer IoT Security

I want to see vendors differentiating their products through security and privacy controls. This standard should be a baseline, entry-level requirement to sell anything…:

The ETSI Technical Committee on Cybersecurity (TC CYBER) last week unveiled a new standard, ETSI EN 303 645 (EN) for cybersecurity in the Internet of Things (IoT).

As more devices in the home connect to the internet, the cybersecurity of the IoT has become a growing concern. The EN is designed to prevent large-scale, prevalent attacks against smart devices that cybersecurity experts see every day. Compliance with the standard will restrict the ability of attackers to control devices across the globe – known as botnets – to launch DDoS attacks, mine cryptocurrency and spy on users in their own homes. By preventing these attacks, the EN represents a huge uplift in baseline security and privacy.

[…]

Original article here