Who Will Step Up To Secure The Internet Of Things?

The Internet of Things (IoT) presents a significant mix of opportunity and risk. Compared to the connected devices of the past, the gazillions of new IoT devices that are being predicted for our homes, transportation, cities, medical devices and elsewhere represent a unique set of security challenges for both companies and their users.

To start, IoT devices significantly expand the attack surface. Hackers can easily purchase any IoT device, which will often contain the same security features of other, identical devices already deployed in hundreds or even thousands of homes. Unlike servers or networking equipment, which are usually hacked through remote access points and reside in protected and monitored environments, IoT devices are more accessible to malicious threat actors.

The widespread availability and proliferation of these devices means that once a device is compromised, it’s very difficult for a company to flip a switch and update the millions of devices just like it sold around the world. It also means that hackers can use one insecure device to leapfrog their way into broader connected networks, allowing a single device to compromise sensitive data ranging from bank and health information to even access to broader corporate assets as the line 48001750between work and home continues to blur.

It’s also important to think about the companies producing today’s top IoT devices. Often, these companies are startups, which may not have the funds to bring to bear an army of security experts and white hats to ensure secure deployments. Instead, they must rely on the hardware and software provided to them through suppliers. And commodity pricing places an enormous strain on security engineering and maintenance. Many of the IoT devices on today’s shelves are by necessity inexpensive to manufacture, which means companies are less likely to spend high dollar on security throughout the development process.

Now is the time for the technology industry to proactively address these concerns, before the threat of widespread IoT security breaches becomes a reality. The standards groups, enterprise organizations and the legions of startups and maker communities working in this area must join together and get to work on addressing the critical issue of safeguarding the IoT before it’s too late.

http://techcrunch.com/2015/10/02/who-will-step-up-to-secure-the-internet-of-things/

5 thoughts on “Who Will Step Up To Secure The Internet Of Things?

  1. I think nowadays, it is unavoidable to be exposed to these danger as long as we use anything that is related to Internet. And this is also why privacy and Internet security are always our top issue. In the article of ‘Prevent IoT security threats and attacks before it’s too late’ (http://searchsecurity.techtarget.com/tip/Prevent-IoT-security-threats-and-attacks-before-its-too-late) the writer suggested a few method for IoT enterprises to keep your devices stay away from those threats as far as possible. Basically, the enterprises of your devices can perceive and detect any other unauthorized new devices on their network through routine asset or vulnerability scans. Enterprises should secure SSDP; SSDP usage should be limited to specific networks and scan their network regularly. Moreover, enterprises must also know how to defend against basic DDoS attacks.

    As the fast development of IoT, we should be alerted and understand how to secure our devices as well as our personal information. New and current developers of IoT devices should address these security problems into their design of devices. It might be more and more challenged in the future– since the hackers are sharpening their skill day by day– but this is not only the responsibility of enterprises, but also of every user of the IoT.

  2. Fundamentally, we are an information society. We excel in the consumption and exchange of information, whether involving technology or not. It’s a foundation of our everyday functionality, and it is always, always evolving. The Internet of Things is no exception, particularly as it expands and grows, approaching a full-fledged, full reaching IoT. Currently, though it provides certain conveniences, it isn’t a fully realized network. However, we’ve learned that it is in fact closer to fruition than we may have imagined, despite concerns many have regarding privacy and security issues. No matter how reasonable these concerns may be, I don’t think that there is any slowing the progression of the IoT.

    I agree with the original poster in that there are many issues to be found in the Internet of Things that should inhibit the spreading of the IoT as it is, but I disagree solely about the idea that we may be able to stop any breaches before they happen. Due to the rapidness that the IoT has approached near ubiquity, it may be hard to solve the mistakes of the past. Though, as another one of my classmates stated above, the technology in security risk analysis and privacy will continue to advance, partially helping combat aforementioned concerns, there will still be some skilled hacker out there who can deftly navigate even the toughest of firewalls. I am not claiming that the IoT is bound to cause an onslaught of incessant hacking into people’s back accounts and security systems, but rather that there will always be similar cases in every situation, no matter the strength of the code. The Internet of Things is spreading, and there is no stopping it. It may not be the safest or most secure network, but it will exist despite our efforts at bettering our security systems (http://spectrum.ieee.org/telecom/security/how-to-build-a-safer-internet-of-things is a cool article about some of the things that are trying to be done to make the IoT more secure) or no matter how fast or slow our SRA technology advances, the IoT will be there. Nothing can ever be deemed wholly “safe” or “secure” (I’m looking at you, Titanic), so it seems futile to fret about what may or may not happen in the scheme of the IoT.

  3. I concur with the original posters’ opinion in regards to the fact that The Internet of Things does present a significant amount of risk for tampering which is especially concerning the wide spread innovations of this type of technology in people’s personals lives. The technological word has been advancing at its fastest rate ever in recent years so it’s only logical to predict the further implementation of these types of devices in people’s everyday lives. Because of this security of these types of applications and devices Is crucial in order to protect the rights of the users. The integration of this technology is so great that automobile manufactures have begun to use electronic interfaces programmed within the car and use to navigate through applications within the vehicle. For example within the new Corvette models hackers and technologically advanced personnel have discovered a major security flaw due to this technology that would allow a hacker or thief to gain the access to start or shut off the car from a distance using Wifi signals and a computer. This is especially dangerous because in a car that can go as fast as the new corvette the fact that someone can turn the car off or manipulate it mid-drive while the driver may be accelerating is extremely unsafe and dangerous. These sorts of implications are just the first of many as technology advances and becomes further implemented into commonly used products. More research should be conducted before allowing a car on the market that can be easily hacked like this particular instance where the car company wasn’t even aware of this rather large flaw that could have seriously put the consumer’s health and livelihood at risk. http://consumerist.com/2015/08/11/hackers-cut-a-corvettes-brakes-wirelessly-to-prove-it-could-happen-to-your-car-too/

  4. In our current state of life, we have become more and more reliable to our technology to a point where we can’t live without. Just imagine a few years ago, people still had flip phones or analog phones, but now all of a sudden everything has become touch sensitive or even voice recognition. The rapid development of technology has benefited humans greatly to a point where now companies are chasing for the next big thing.
    The Internet of Things (IoT) has become the next hot topic that every company is trying to tactical, and every consumer is becoming more aware of what it is. IoT refers to the interconnections of between all devices with an addressable interface that we can communicate online. Some examples are iphones with siri, cars, app notifications, and more. IoT has slowly entered into our lives even if we like it or not because it is the next big thing that will benefit the society.
    Whenever we deal with new technologies, there will always be consequences to big discoveries, and for IoT its concerns is security. I believe that I agree to some degree with the author in that security has become more and more important as we introduce technologies like the cloud and IoT. This is so because now all our information is up for grabs and people can access our informations at all corners of the world. What I believe differently is that all these startups and existing big companies developing technologies related to IoT are all aware of security. One example is google cars, where they test there cars for more than 70,000 miles, run simulations, as well as employ 100,000+ google cars out to the public to find weaknesses and improve. Like many developed technologies, getting hacked is inevitable because some hackers do this for their lives, in order to combat that, companies has poured millions to billions of dollars on security its softwares and hardwares.
    In my opinion, we should all be concerned with our security, but I believe that as technologies advance, we will have stronger securities, and to be honest, our technologies are way advance than we can imagine, and hacking to these systems take years. From someone that encourage societal improvements, I believe that we will have our ways to combat hackers and strengthen our security for the future of our next generations.
    http://www.forbes.com/sites/davelewis/2014/09/16/security-and-the-internet-of-things/

  5. I certainly agree that the takeover of the Internet of Things can be very concerning, especially when it comes to security. The article, “IoT devices get a secure element to protect critical systems” talks about this problem and further explains how this lack of security can be avoided. Because the IoT is spreading to all sorts of fields it is raising more concerns than ever, calling for an answer to the problem. This article talks about how Gemlato, a company specializing in IoT security, is taking steps to provide permanent reliable security in this field. This could be your answer! Their website, http://www.gemalto.com, includes their slogan, “Bringing trust to the internet of things.” This shows how this company recognizes these hacking concerns. Specifically within the payment industries that are taking on this next step within IoT. Gemlato uses a secure element (SE) to establish these security solutions. They are now introducing this technology to industrial and automotive companies. This company holds a multi-step agenda that works to maintain security within these IoT devices. Gemlato begins by assessing the existing security a company has and completes a risk assessment from their findings. From here Gemlato provides tools to address the needs they uncover within the original evaluation. Finally, they look at the security issue for the long term. The final step is to continually update the system over its lifetime. So even though this technology takeover seems like its too much to handle, there are many people thinking ahead. But to answer your question Gemlato proves to be a promising company to start the initiative to maintain security. Who knows, will this be our key to living in a secure world of IoT devices?
    http://www.networkworld.com/article/2988659/internet-of-things/iot-devices-get-a-secure-element-to-protect-critical-systems.html

Leave a Reply