Cameras, wearables, and home sensors produce highly personal data. Excessive collection combined with weak protection exposes users when devices, apps, or vendor clouds are breached.
Collect only the data required for the device to function, de-identify where possible, protect stored data, and let users see and control what is collected.
The same feature written the risky way, then with the fix applied.
How this risk has ranked in each OWASP release.
Rank by release (taller is higher)
2022Latest
#05iot05 Insecure Ecosystem and Cloud Interfaces
No change since 20182018
#05iot05 Use of Insecure or Outdated Components
No change since 20142014
#05iot05-2014 Privacy Concerns
