Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Security Review of Consumer Home IoT Products: Draft NISTIR 8267 Open for Public Comment

NIST has released a draft of NISTIR 8267, "Security Review of Consumer Home Internet of Things (IoT) Products," for public comment. The comment period closes November 1, 2019.

Consumer IoT products are rapidly growing in popularity because these devices can make basic tasks, like adjusting the thermostat or turning on exterior home lights easier, and more convenient. As more of these IoT devices make their way into consumers' homes, it is important to understand their security characteristics. NIST recently conducted a technical security review of several consumer home IoT devices and developed a series of considerations to manufacturers for improving the security of these devices.

The public is invited to review and comment on the findings and considerations, released by the National Cybersecurity Center of Excellence (NCCoE) has released Draft NISTIR 8267, Security Review of Consumer Home Internet of Things (IoT) Products. The report details open-source research, a hands-on review and a security features analysis of several commonly purchased IoT consumer home devices. This report builds upon a series of recent research by NIST on IoT devices, including Draft NISTIR 8259, Core Cybersecurity Feature Baseline for Securable IoT Devices, and NISTIR 8228, Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risk.

The public comment period for this document closes on Friday, November 1, 2019. See the publication details for a copy of the document and instructions for submitting comments.

If you are interested in joining a community of interest to follow the developments of this guide and future NIST IoT research, please email home-iot-nccoe [at] nist.gov.

 

NOTE: A call for patent claims is included on page iv of this draft.  For additional information, see the Information Technology Laboratory (ITL) Patent Policy--Inclusion of Patents in ITL Publications

Released October 1, 2019, Updated October 28, 2019