How to Secure Your Network with Zero Trust Security for IoT?

Zero Trust Security for IoT
The concept of "never trust, always verify" is the foundation of the relatively new security architecture known as "zero trust." Zero trust requires that all users and devices be verified every time they connect, even from inside the "moat," in contrast to the conventional castle-and-moat security architecture, which automatically trusts users and devices located within a network's perimeter.

Companies are being forced to reconsider how they safeguard their networks by the internet of things (IoT). Unmanaged smart gadgets connected to the internet expand the number of potential access points for hackers to compromise your security when they are added to a network.


Zero Trust Security Expansion for IoT

After establishing it for users and their devices, organizations must extend zero-trust security to cover unmanaged, non-user devices too. To do this, they require zero trust identity management technologies that automatically register devices, issue credentials, and offer password-less authentication.


Device Visibility

A device may be infected with malware or have a security breach if performance problems or bugs start to appear frequently. In addition, a malfunctioning device may be more vulnerable to attack. Therefore, organizations require device health monitoring that can automatically identify problems and flag them for remedy in order to establish and maintain zero trust security for IoT. Some cutting-edge solutions can also automatically prevent an impacted device from making further connection attempts or carrying out corrective actions without requiring human participation.


The Principle of Least Privilege (PoLP)

The principle of least privilege (PoLP), which argues that any user or device should only obtain the bare minimum access privileges necessary to perform their job functions, is widely used in conjunction with zero trust security. Therefore, organizations must establish the minimal level of network access required for each device to carry out its functions before limiting its potential privileges in order to deploy PoLP for IoT. Implementing identity and access management (IAM) tools and guidelines that support zero trust and PoLP for devices is one approach to accomplishing this.


Security Monitoring

There are other zero-trust security monitoring programs created especially for IoT, such as Palo Alto Networks' IoT Security, which was previously discussed. Businesses can also utilize tools to monitor devices and network traffic, such as next-generation firewalls and intrusion detection and prevention systems (IDS/IPS). The zero trust security solution for IoT must include monitoring in addition to as much automation as possible so that threats can be identified, contained, and remedied even when no one is there to press a button or disconnect a device manually.

One of the leading causes of zero trust security projects failing over time is that people stop adhering to them once they get complicated. This is especially true for IoT security that operates on zero trust. In addition, it can be logistically challenging to keep remote, unmanaged devices at zero trust.

Spotlight

inovex GmbH

inovex is an IT project house with a focus on digital transformation. Over 250 consultants and IT engineers support companies in digitising their core competencies and implementing new value-added models. inovex's portfolio includes web and mobile development, business intelligence, big data and search, data centre automation and cloud infrastructures. inovex has offices in Karlsruhe, Pforzheim, Munich, Cologne, Hamburg and Stuttgart and is involved in projects across Germany.

OTHER ARTICLES
Enterprise Iot

How Will the Emergence of 5G Affect Federated Learning?

Article | July 20, 2023

As development teams race to build out AI tools, it is becoming increasingly common to train algorithms on edge devices. Federated learning, a subset of distributed machine learning, is a relatively new approach that allows companies to improve their AI tools without explicitly accessing raw user data. Conceived by Google in 2017, federated learning is a decentralized learning model through which algorithms are trained on edge devices. In regard to Google’s “on-device machine learning” approach, the search giant pushed their predictive text algorithm to Android devices, aggregated the data and sent a summary of the new knowledge back to a central server. To protect the integrity of the user data, this data was either delivered via homomorphic encryption or differential privacy, which is the practice of adding noise to the data in order to obfuscate the results.

Read More
Enterprise Iot

Key IoT Security Certifications to Boost Your Career in IoT Industry

Article | August 10, 2022

Explore the IoT certifications and grow your skills with the transforming landscape. Including Iot security certifications, this curated list will help you to boost career in the IoT industry. As the Internet of Things continues to expand its reach across industries, the need for robust security measures to safeguard connected devices and data has become paramount. With IoT systems' growing complexity and interconnectivity, organizations seek professionals with specialized knowledge and expertise in IoT security. In response to this demand, various certifications have emerged to validate individuals' skills and provide them with a competitive edge in the IoT industry. In this article, we will explore some key IoT security certifications that can significantly enhance one's career prospects and contribute to IoT solutions' safe and secure deployment. 1. IoT Security Certification and Cybersecurity Intertek’s IoT Security Certification and Cybersecurity provides IoT certification and testing services to validate the security of connected products. Securing endpoints and ecosystems has become crucial with the rapid growth of the Internet of Things. Intertek's total quality assurance approach involves understanding the product, use cases, integration with other systems, and developing a roadmap to ensure compliance with industry standards and regulations. Their IoT security and cybersecurity experts guide clients in choosing the most relevant program for their product and target markets, instilling confidence in product security. Intertek offers services such as the Cyber Assured Program, vulnerability assessments, penetration testing, testing to standards like ANSI/UL 2900 and IEC 62443, connected medical device security, industrial automated control systems security (IEC 62443), and advisory services. Intertek's expertise helps clients address cybersecurity risks and ensure the security of their IoT products. 2. Securing IoT - Build secure IoT solutions: 2-in-1 The Securing IoT: Build Secure IoT Solutions: 2-in-1 course is a comprehensive training program designed to help IoT product designers, IoT product managers, IT security professionals, and security engineers build secure and robust Internet of Things systems. The course consists of 'Fundamentals of IoT Security' and 'Security Engineering for the IoT.' The learners will delve into IoT security architectures, regulations, and standards. Privacy concerns and Privacy by Design principles and practical examples of conducting Privacy Impact Assessments are addressed. Cryptographic solutions, identity and access management, and key management solutions are explored, along with the cloud's secure connectivity, processing, and storage of data. By the end of the program, participants will have the skills to identify threats to their organization's data and IoT systems, employing design techniques, applied cryptography, and secure cloud connectivity for robust security. 3. IOT Security Professional (ICIP) The IoT Security Professional (ICIP) program offered by ISAC is designed to provide participants with a comprehensive understanding of cyberattacks on IoT and SCADA systems. The training focuses on offensive testing techniques to better understand and combat hack and malware attacks. Participants will learn about discovering sensitive devices, network hacking via IoT, hacking smart devices, and controlling SCADA systems. The program includes case studies on malware like WannaCry and Crash Override and defensive measures like threat intelligence and endpoint protection. The course suits security researchers, forensic investigators, security teams, law enforcement agencies, and military personnel. Successful completion of the program grants a Clean Exit Professional Ethics Certification and inclusion in the National Security Database. 4. Internet of Things Security Expert Training The Internet of Things Security Expert course offered by Cognixia is a comprehensive training program designed for professionals seeking to enhance their knowledge of IoT security. The course covers various IoT security platforms and provides hands-on training with relevant tools. It consists of three major modules: python, advanced IoT training and certification, and IoT Security. The Python module familiarizes candidates with the versatile programming language and its applications in IoT development. The Advanced IoT Training and Certification module covers IoT ecosystems' architecture, development, deployment, and security with real-life case studies. The IoT Security module focuses on securing IoT devices, covering architecture, practical attacks, vulnerability disclosure, and securing connected products. The course offers lifetime access to learning materials and round-the-clock technical support. 5. IOT Analyst Certification One of the online IoT certification courses, the IT Analyst Certification is a 12-month program that focuses on combining IoT with Analytics to unlock valuable data from connected IoT devices. The course comprises three courses covering data acquisition, exploratory analysis, cleaning, and final analysis for IoT systems. It also teaches how advanced analytics and machine learning algorithms can be applied to build complex IoT solutions. The program is suitable for students from all backgrounds, and no prior knowledge of analytics or IoT is required, although basic quantitative skills are beneficial. After completing the curriculum and passing the certification test, students receive the IOT Analyst Certification, enabling them to process and analyze data from IoT sensors and become proficient in IoT analytics. The certification opens up opportunities in the fast-growing Big Data and Analytics industry, where IoT analytics is widely applied to predict future technology trends. 6. IOT Professional Certification The IOT Professional Certification offered by Jigsaw Academy is a comprehensive program designed to help individuals master the implementation of IoT using Arduino. This 12-month online iot certification course uses the Arduino platform to build IoT solutions from scratch. The program consists of four courses covering various IoT aspects, including sensor-connected devices and gateways. Students will engage in hands-on exercises, real-life case studies, and a capstone project to apply their knowledge effectively. Upon completion, students receive a certification that validates their skills in building and applying IoT solutions, setting up IoT Cloud for data storage and analysis, and proficiency in Arduino programming language. The IOT Professional Certification equips individuals with the necessary skills and knowledge to excel in the high-demand field of IoT and opens up better job prospects. 7. IoT and its Applications TCS iON Digital Learning Hub offers the 'IoT and its Applications' certificate course, providing learners with a comprehensive understanding of the fundamentals of the Internet of Things. The course spans 5 to 6 months, delivered in English through digital lectures, e-learning resources, and community-based virtual classrooms. Through industry assignments and expert-led instruction, participants gain theoretical and practical insights into IoT applications. Upon completion, learners receive a verifiable digital certificate and gain industry-level skills required for test engineers or computer programmers. This course helps learners grasp IoT theories and practical applications, offering valuable career opportunities. Conclusion In an era where the Internet of Things is transforming industries and revolutionizing the way, we interact with technology, ensuring the security of IoT systems has become a critical imperative. The certifications discussed in this article represent a selection of key credentials available to professionals seeking to boost their careers in the IoT industry. By obtaining these certifications, individuals can validate their expertise in IoT security, demonstrating their commitment to upholding best practices and safeguarding the integrity of connected devices and data. As the demand for IoT security professionals continues to rise, these certifications will serve as powerful assets, opening doors to exciting opportunities and positioning individuals as trusted experts in the ever-evolving field of IoT security. By investing in these certifications, professionals can take significant strides toward advancing their careers and contributing to the secure and responsible growth of the IoT ecosystem.

Read More
Enterprise Iot

Driving Rapid and Continuous Value for IoT Through an Ecosystem Approach

Article | July 13, 2022

In the wake of the COVID-19 pandemic, manufacturing is roaring back to life, and with it comes a renewed focus on Digital Transformation initiatives. The industry stands on the doorstep of its much-anticipated renaissance, and it’s clear that manufacturing leaders need to not only embrace but accelerate innovation while managing critical processes like increasing capacity while maintaining product quality. Effective collaboration will be key to doing both well, but it’s even more critical as workforces have gone and are still largely remote. As the virus swept the globe, it became apparent quickly that there would be winners and losers. Many manufacturers were caught off-guard, so to speak. Before manufacturing’s aforementioned reckoning, the industry had already been notorious for its slow adoption of the digital, data-centric mindset that has transformed other industries.

Read More

How to Refine Your Market Strategy with IoT

Article | January 29, 2021

If you’re struggling with creating a value proposition in volatile markets, you’re not alone. According to Neil Patel, 40% of marketers struggle to acquire leads by traditional marketing methods. As competition grows in each industry, even fairly monopolistic markets like tech are seeing rising competition in all areas. To combat market uncertainty, as well as stand out amongst your competitors, you need a market strategy that not only offers a direction but actively targets your goals. A market strategy is your go-to plan when things get rough and it is a map for when the waters are calm. Moreover, marketers with a documented strategy are 313% more likely to report success. We’re sure you already have a market strategy that is just right for you. But have you considered if it can be refined further? Thanks to emerging technologies like IoT, we now have access to the most mundane customer decisions that are taken on a day-to-day basis. This data is your ticket to a better market strategy without having to spend a bomb. This is how you can refine your market strategy with the help of IoT. Data-driven Decisions The Internet of Things has offered us insurmountable amounts of consumer data. A caffeine brand can now access information such as what time consumers have coffee, whether it is at home or office, what flavors they prefer, how much they’re willing to spend on coffee, and what other alternatives they consume. This kind of data, collected on an IoT device such as a coffee machine, is instrumental in making marketing decisions. If you know that your consumer prefers to have coffee at work in peace rather than in a rush at home, you can target offices in the area with your product rather than targeting individual consumers. IoT offers you the right information to make the right decisions. But you can also leverage this data to drive your market strategy. In the above example, the marketing team can account for campaigns geared towards workplaces based on the available data in the budget. Data-driven strategies prove to be more effective than otherwise, and as marketers, you must absolutely leverage any IoT data that may be relevant. Respect your Customers While IoT offers marketers a truly astounding amount of data, not all users are aware of what data is being tracked. This raises concerns for privacy and security among the users. Even though most of the users waive their rights to withhold the information when signing into an app or wearables software, they are not always comfortable sharing certain data. As marketers, it is important to keep your practices ethical and legal. Using consumer data may be completely legal, but it is best not to offend your customers by overt use of data that they aren’t comfortable sharing. Make sure that the usage of data in marketing campaigns and strategy is limited to what data has been consciously shared by your consumers. This will bolster your goodwill, as well as make your customers trust your brand. Offer Valuable Solutions With the advent of Big Data and AI technologies, the internet of things is turning over a new leaf. As there is a vast amount of data that can be processed fast with AI, marketers can now target individuals rather than households or groups. With precise data available over consumer decisions and actions, it is possible to know if there are any unlikely customers that you have been ignoring so far. IoT allows you to not only target these customers but also solve their problems. If we continue the caffeine example, the connected coffee machine can tell you when the coffee is about to be over, this can send you reminders to buy coffee, or in case of further automation, place an order on Amazon on your behalf. These solutions can be now hyper-personalized to suit individual needs through IoT. IoT Based Campaigns Your market strategy will have to account for campaigns throughout the year, but if you’ve noticed closely, the only marketing campaigns that gain significant traction are the ones that have a ‘wow factor’. A lot of marketers mistake the wow factor to be a subjective preference that customers have but it couldn’t be further from the truth. The wow factor is simply the effect produced when a business goes above and beyond to meet customer needs. IoT offers us the resources required to manufacture the wow factor in every single campaign. A great example of this phenomenon is beacon marketing. Beacon marketing is considerably new in the marketing industry and uses Bluetooth technology to transmit information to nearby mobile devices. It is heavily used in retail across the globe and giants like Target and Walmart are already using the technology to market its services. Walmart places beacons in its lights across its stores and sends offers to its customers based on their location. It not only personalizes the shopping experience, but also saves a large amount of electricity bill for its stores. Target Existing Customers Many times, in a bid to appease new customers, marketers often forget about their existing customers. Your existing customers already know you, have tried your product or service, and are clearly interested in the product. A good product or service is often enough to keep the customers returning, but with the current levels of competition, customers often find themselves wondering if they should try new things. As a marketer, all you need to do is deter your existing customers from straying. You can do this by either providing an unparalleled service, which is quite unlikely in today’s market, or you give them a reason to stay. Thankfully, targeting existing customers is much easier than targeting new ones. You already have their data over their preferences and habits. If you know that a certain firm updates their applications every second quarter, you can send them offers just before the second quarter starts and remain fresh in their memories when they decide to make the decision. Allergy medication Zyrtec leveraged IoT when targeting their existing customers with a voice-enable application. Its users could just ask the application about the daily allergens and pollutants in their area so they could prepare ahead. The app offered a powerful solution to its users while making great use of its brand image and retaining almost all of their existing customers. Leverage New Technologies We have already discussed several complementary technologies to IoT that can help you make the most out of your market strategy. AI and Big Data are some of the strongest allies for IoT that can help change the norms across industries. But even limited technologies like voice-enabled applications, QR scanners, beacons and so can open up a lot of opportunities for marketers. Consider adopting some of these technologies such as geofencing which are inexpensive and effective at the same time. Burger King is a great example of using geofencing for marketing. Geofencing is a technology wherein you can transmit messages or information to mobile devices within a certain area. Burger King set up their geofences across all McDonalds in the UK and as soon as anyone entered within a 500 m radius of a McDonald’s outlet, they received Burger King coupons and directions to the nearest store. Case Studies There are a lot of examples of IoT being used to enhance strategies or campaigns. Some of these examples are given below. Diageo, a whisky brand in Brazil innovatively used IoT to run a father’s day campaign. They encouraged men to buy whisky for their fathers and placed a QR code on their bottles. Once the bottle was received, the fathers could scan the code which would play a personalized father’s day message by their sons. This concept was so loved by people in Brazil that Diageo saw a 72% sales uplift in the two weeks leading up to Father’s Day. South East Water, CRM leveraged IoT by building an end-to-end IoT ecosystem powered by IBM’s Maximo. This helped them roll out an app that offered near real-time insights into customer requirements for over 80 engineering teams. This alone helped them ensure higher customer satisfaction and accelerated access to critical reports by 99 percent! Uber and Spotify rolled out an IoT campaign together wherein you could access your Spotify playlists through the Uber app and once you were in an Uber, you could play whatever you liked through the app and it would play on the car’s speakers. This increased customer satisfaction for both Uber and Spotify users. There are several examples of using IoT in marketing campaigns, and there is never a dearth of ideas. However, in order to appeal to your unique customer base, you need to innovate your product with IoT. Frequently Asked Questions What is the IoT strategy? IoT Strategy refers to an organization’s strategy to inculcate IoT in their business, whether as a marketing tool or as an integral part of the process. How does IoT affect the marketing industry? IoT offers a lot of insights and resources to marketers which helps them target their customers better and optimizes any marketing efforts, thereby effectively obliterating traditional marketing practices. What is the best internet of things marketing strategy? There is no one IoT marketing strategy that fits all businesses. Each business needs to identify its customer requirements and strategize accordingly. { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [{ "@type": "Question", "name": "What is the IoT strategy?", "acceptedAnswer": { "@type": "Answer", "text": "IoT Strategy refers to an organization’s strategy to inculcate IoT in their business, whether as a marketing tool or as an integral part of the process." } },{ "@type": "Question", "name": "How does IoT affect the marketing industry?", "acceptedAnswer": { "@type": "Answer", "text": "IoT offers a lot of insights and resources to marketers which helps them target their customers better and optimizes any marketing efforts, thereby effectively obliterating traditional marketing practices." } },{ "@type": "Question", "name": "What is the best internet of things marketing strategy?", "acceptedAnswer": { "@type": "Answer", "text": "There is no one IoT marketing strategy that fits all businesses. Each business needs to identify its customer requirements and strategize accordingly." } }] }

Read More

Spotlight

inovex GmbH

inovex is an IT project house with a focus on digital transformation. Over 250 consultants and IT engineers support companies in digitising their core competencies and implementing new value-added models. inovex's portfolio includes web and mobile development, business intelligence, big data and search, data centre automation and cloud infrastructures. inovex has offices in Karlsruhe, Pforzheim, Munich, Cologne, Hamburg and Stuttgart and is involved in projects across Germany.

Related News

Industrial IoT

Tuya Smart Delivers IoT Best Practice Using Amazon Aurora, Leads the Direction of Cloud Database Innovation Use Cases with Amazon Web Services

Tuya Smart | January 24, 2024

Tuya Smart, the global IoT developer service provider, has delivered its Best Practices in using Amazon Aurora at IoT industry. Amazon Aurora is a relational database management system (RDBMS) built for the cloud with full MySQL and PostgreSQL compatibility. Tuya and Amazon Web Services (AWS) built a solid basis of collaboration in database use cases exploration while also delivering smooth operation of billions of devices requiring high concurrency and low latency. Tuya and AWS: Building a benchmark for database implementation practice Tuya is a leading technology company focused on making our lives smarter. Tuya does this by offering a cloud platform that connects a range of devices via the IoT. By building interconnectivity standards, Tuya bridges the intelligent needs of brands, OEMs, developers, and retail chains across a broad range of smart devices and industries. Tuya's solutions enable partners and customers by improving the value of their products while making consumers' lives more convenient through the application of technology. As of September 30, 2023, the Tuya IoT Developer Platform has accumulated over 909,000 registered developers from over 200 countries and regions, covering industries including real estate, hospitality, residential, industry, agriculture, etc. The greater the breadth of business coverage, the more advanced technological support required. Tuya faces high-frequency reads and writes as well as enormous data storage challenges from billion-level online devices. Meanwhile, due to the commercial scenarios involving smart homes and smart industries, Tuya's operating response demands low latency in order to deliver a smoother user experience. Furthermore, Tuya's quick expansion and regular business changes have posed significant challenges to its operation and maintenance management. Tuya selected Amazon Aurora as core database engine for its unparalleled performance and availability at global scale. How does Tuya specifically leverage the Amazon Aurora database? Tuya currently manages billions of real-time online devices and can keep cloud message processing response times under 10 milliseconds. However, billions online devices provide a challenge. During holidays, there will be peak traffic volume, with tens of millions of devices going online and offline virtually simultaneously. Tuya used Amazon Aurora to construct a data storage solution to solve the main problem of rapid increase in short-term traffic, and to fully utilize resources. Aurora's design, which separates compute and storage and low-latency replication functionality, improves system throughput by enhancing the effect of read-write separation. Aurora provides up to 15 read replicas, setting the groundwork for Tuya's read flexibility development. At the same time, Tuya has integrated Aurora Serverless, which includes seconds-level elastic expansion and contraction, allowing Tuya to handle extremely heavy business traffic smoothly. Tuya's customers are located throughout more than 200 nations and regions, and they deal with widespread access to IoT data. Different countries and regions have different regulations on data compliance, such as GDPR and local PII. Tuya needs to adhere to each region's data security compliance regulations. As Tuya's primary business data storage provider, Amazon Aurora was among the first in the public cloud sector to enable physical encryption for database products, which significantly decreased the cost of Tuya's security compliance transformation and gave Tuya excellent basic security guarantees. In addition, Tuya is continuously testing out additional new innovation unique to Aurora, such as Enhanced Binlog, zero-ETL, and Limitless Database. Aurora's ongoing investment in innovative technologies provides more opportunities for Tuya to expand its business. Additionally, based on Tuya's comprehensive IoT developer platform architecture, both parties have collaborated to enhance Tuya IoT applications performance indicators like stability, low latency, scalability, and security in the real-world application of databases, revealing more potential and possibilities and enabling the IoT. Tuya and AWS: Continuously promoting the evolution of cloud experience Data-driven approaches will usher in a new era of innovation in tandem with the swift advancement of data applications. At this year's re:Invent conference, Peter DeSantis, Senior Vice President of AWS, reviewed the relational database's development history in great detail. In 2014, AWS created Aurora based on log architecture. In 2018, the release of Aurora Serverless allowed for seamless scaling of database resources through virtualization technology. This year, AWS announced the launch of the Amazon Aurora Limitless Database, which automatically scales to millions of write transactions per second well beyond current limits of a single PostgreSQL instance. It is apparent from Amazon Aurora's development history that AWS has always been dedicated to innovation. Customers and partners from a range of industries actively utilizes AWS to enable rapid innovation in a variety of ways, while also working together to enhance the cloud experience. Similar to how Tuya and AWS work together, Tuya's effective and user-friendly IoT developer platform and rich and varied IoT solutions have built a significant lighthouse, embracing the Amazon Aurora's innovation and accelerated the process of building a more secure and reliable IoT database use case. Amazon Aurora VP Yan Leshinsky said, "Amazon Aurora is the fastest growing service in the history of AWS and is trusted by hundreds of thousands of customers. We innovate by working backwards from customers' needs, and we appreciate the feedback that Tuya has shared. We remain committed in developing new Aurora features and capabilities so all customers can accelerate their applications' capabilities and business growth by using Aurora." "Tuya has always committed to strengthening advanced and valuable innovations, while offering open and neutral ecosystem assistance for global partners. We provide our developers with enhanced operational and maintenance control, adaptable data storage options, superior product experience, and a global business layout by utilizing the Amazon Aurora database. We will continue to work with AWS to benefit the world in the future in areas including technology, ecosystems, and cloud computing, helping customers achieve commercial success." said Eva Na, Vice President of Marketing and Strategic Cooperation, and CMO of Tuya Smart. Enhancing the partnership with AWS, Tuya delivered IoT best practice using Amazon Aurora database, giving the industry's growth additional impetus. Tuya will maintain its open and neutral stance going forward, collaborating with cloud service providers like AWS to offer global developers a more secure, reliable, and productive cloud environment, thereby advancing the innovation and development of the entire industry.

Read More

Enterprise Iot

Nozomi Networks Delivers Industry's First Multi-Spectrum Wireless Security Sensor for Global OT and IoT Environments

Nozomi Networks | January 25, 2024

Nozomi Networks Inc., the leader in OT and IoT security, today introduced Guardian Air™, the industry's only wireless spectrum sensor purpose-built for OT and IoT environments worldwide. With 80 percent of new IoT deployments wirelessly connected, wireless is quickly becoming a preferred network. The explosion of wirelessly connected devices increases potential access points and exploitation of networks. This puts critical infrastructure at risk of cyberattacks and disruptions to operations. Guardian Air provides much-needed visibility into wirelessly enabled devices which until now were only detected once connected to the wired network. Guardian Air monitors several prominent wireless frequencies, not just Bluetooth and Wi-Fi, to provide security teams with immediate visibility of connected sensors, devices, laptops and cell phones. With the addition of Guardian Air, customers have a comprehensive network solution all in one integrated platform. "Nozomi Networks has once again innovated to address an unmet need for wireless-level monitoring in OT and IoT environments," said Danielle VanZandt, an industry manager for commercial and public security research at Frost & Sullivan. "From smart manufacturing to digital medicine, to building automation, to modern oil field production and more, today industrial organizations are relying on billions of wireless devices to speed production and time to market. Guardian Air gives IT security professionals and OT operators the visibility they need to get a firm handle on wireless risk management and response." With Guardian Air, IT security professionals and OT operators can: Continuously monitor prominent wireless frequency technologies used in OT and IoT environments including Bluetooth, Wi-Fi, cellular, LoRaWAN, Zigbee, GPS, drone RF protocols, WirelessHART and more, Immediately detect wirelessly connected assets and gain asset information to quickly address unauthorized installations, Detect wireless-specific threats, including brute force attacks, spoofing, and bluejacking – with the added ability to determine the location of the devices performing the attacks, Seamlessly integrate wireless data into a single OT & IoT security platform that unifies asset visibility from the endpoint and across wired and wireless networks. "Wireless is fundamentally changing the way industrial organizations operate. Unfortunately, it also massively expands the potential attack surface," said Nozomi Networks Co-founder and Chief Product Officer Andrea Carcano. "Guardian Air solves this problem by giving customers the accurate visibility they need at the wireless level to minimize risk while maximizing resiliency. Because Guardian Air integrates easily into the Nozomi Networks Vantage platform, customers can combine network, endpoint and wireless for the greatest visibility, threat detection and AI-powered analysis for real-time security management and remediation across the entire attack surface." The Nozomi Guardian Air wireless sensor will be available this spring from Nozomi Networks and its extensive global network of channel partners. About Nozomi Networks Nozomi Networks accelerates digital transformation by protecting the world's critical infrastructure, industrial and government organizations from cyber threats. Our solution delivers exceptional network and asset visibility, threat detection, and insights for OT and IoT environments. Customers rely on us to minimize risk and complexity while maximizing operational resilience. www.nozominetworks.com

Read More

IoT Security

AppViewX Digital Trust Platform Named IoT Security Product of the Year

AppViewX | January 12, 2024

AppViewX, the leader in automated machine identity management (MIM) and application infrastructure security, today announced the AppViewX Digital Trust Platform has been named IoT Security Product of the Year in the 8th annual IoT Breakthrough awards program, which showcases technologies and companies that drive innovation and exemplify the best in IoT technology solutions across the globe. IoT Breakthrough is a leading market intelligence organization that recognizes the top companies, technologies and products in the global IoT market. The mission of the IoT Breakthrough Awards program is to recognize the innovators, leaders and visionaries from around the globe in a range of IoT categories, including Industrial and Enterprise IoT, Smart City technology, Connected Home and Home Automation, Connected Car, and many more. This year's program attracted nominations from companies all over the world. “Unmanaged machine identities for IoT devices can create critical security vulnerabilities, but for most organizations discovering, maintaining visibility into and controlling them has become manually unfeasible,” said Gregory Webb, CEO of AppViewX. “The AppViewX Digital Trust Platform automates IoT identity management at scale across the largest, most complex and distributed customer environments, allowing customers to achieve significantly stronger security posture and meet compliance requirements.” All IoT Breakthrough Award nominations were evaluated by an independent panel of experts within the IoT industry, with the winning products and companies selected based on a variety of criteria, including most innovative and technologically advanced products and services. About AppViewX Digital Trust Platform Out of the box, AppViewX provides instant value to customers by discovering all certificates across complex enterprise environments, building and maintaining inventories, provisioning both private and public trust certificates from any CA, alerting to expiring certificates and fully automating renewals and revocation to eliminate outages and security weaknesses across machines, applications, services, and security infrastructure. About AppViewX AppViewX is trusted by the world’s leading organizations to reduce risk, ensure compliance, and increase visibility through automated machine identity management and application infrastructure security and orchestration. The AppViewX platform provides complete certificate lifecycle management and PKI-as-a-Service using streamlined workflows to prevent outages, reduce security incidents and enable crypto-agility. Fortune 1000 companies, including six of the top ten global commercial banks, five of the top ten global media companies, and five of the top ten managed healthcare providers rely on AppViewX to automate NetOps, SecOps, and DevOps. AppViewX is headquartered in New York with offices in the U.K., Australia and three development centers of excellence in India. For more information, visit https://www.appviewx.com and follow us on LinkedIn and Twitter.

Read More

Industrial IoT

Tuya Smart Delivers IoT Best Practice Using Amazon Aurora, Leads the Direction of Cloud Database Innovation Use Cases with Amazon Web Services

Tuya Smart | January 24, 2024

Tuya Smart, the global IoT developer service provider, has delivered its Best Practices in using Amazon Aurora at IoT industry. Amazon Aurora is a relational database management system (RDBMS) built for the cloud with full MySQL and PostgreSQL compatibility. Tuya and Amazon Web Services (AWS) built a solid basis of collaboration in database use cases exploration while also delivering smooth operation of billions of devices requiring high concurrency and low latency. Tuya and AWS: Building a benchmark for database implementation practice Tuya is a leading technology company focused on making our lives smarter. Tuya does this by offering a cloud platform that connects a range of devices via the IoT. By building interconnectivity standards, Tuya bridges the intelligent needs of brands, OEMs, developers, and retail chains across a broad range of smart devices and industries. Tuya's solutions enable partners and customers by improving the value of their products while making consumers' lives more convenient through the application of technology. As of September 30, 2023, the Tuya IoT Developer Platform has accumulated over 909,000 registered developers from over 200 countries and regions, covering industries including real estate, hospitality, residential, industry, agriculture, etc. The greater the breadth of business coverage, the more advanced technological support required. Tuya faces high-frequency reads and writes as well as enormous data storage challenges from billion-level online devices. Meanwhile, due to the commercial scenarios involving smart homes and smart industries, Tuya's operating response demands low latency in order to deliver a smoother user experience. Furthermore, Tuya's quick expansion and regular business changes have posed significant challenges to its operation and maintenance management. Tuya selected Amazon Aurora as core database engine for its unparalleled performance and availability at global scale. How does Tuya specifically leverage the Amazon Aurora database? Tuya currently manages billions of real-time online devices and can keep cloud message processing response times under 10 milliseconds. However, billions online devices provide a challenge. During holidays, there will be peak traffic volume, with tens of millions of devices going online and offline virtually simultaneously. Tuya used Amazon Aurora to construct a data storage solution to solve the main problem of rapid increase in short-term traffic, and to fully utilize resources. Aurora's design, which separates compute and storage and low-latency replication functionality, improves system throughput by enhancing the effect of read-write separation. Aurora provides up to 15 read replicas, setting the groundwork for Tuya's read flexibility development. At the same time, Tuya has integrated Aurora Serverless, which includes seconds-level elastic expansion and contraction, allowing Tuya to handle extremely heavy business traffic smoothly. Tuya's customers are located throughout more than 200 nations and regions, and they deal with widespread access to IoT data. Different countries and regions have different regulations on data compliance, such as GDPR and local PII. Tuya needs to adhere to each region's data security compliance regulations. As Tuya's primary business data storage provider, Amazon Aurora was among the first in the public cloud sector to enable physical encryption for database products, which significantly decreased the cost of Tuya's security compliance transformation and gave Tuya excellent basic security guarantees. In addition, Tuya is continuously testing out additional new innovation unique to Aurora, such as Enhanced Binlog, zero-ETL, and Limitless Database. Aurora's ongoing investment in innovative technologies provides more opportunities for Tuya to expand its business. Additionally, based on Tuya's comprehensive IoT developer platform architecture, both parties have collaborated to enhance Tuya IoT applications performance indicators like stability, low latency, scalability, and security in the real-world application of databases, revealing more potential and possibilities and enabling the IoT. Tuya and AWS: Continuously promoting the evolution of cloud experience Data-driven approaches will usher in a new era of innovation in tandem with the swift advancement of data applications. At this year's re:Invent conference, Peter DeSantis, Senior Vice President of AWS, reviewed the relational database's development history in great detail. In 2014, AWS created Aurora based on log architecture. In 2018, the release of Aurora Serverless allowed for seamless scaling of database resources through virtualization technology. This year, AWS announced the launch of the Amazon Aurora Limitless Database, which automatically scales to millions of write transactions per second well beyond current limits of a single PostgreSQL instance. It is apparent from Amazon Aurora's development history that AWS has always been dedicated to innovation. Customers and partners from a range of industries actively utilizes AWS to enable rapid innovation in a variety of ways, while also working together to enhance the cloud experience. Similar to how Tuya and AWS work together, Tuya's effective and user-friendly IoT developer platform and rich and varied IoT solutions have built a significant lighthouse, embracing the Amazon Aurora's innovation and accelerated the process of building a more secure and reliable IoT database use case. Amazon Aurora VP Yan Leshinsky said, "Amazon Aurora is the fastest growing service in the history of AWS and is trusted by hundreds of thousands of customers. We innovate by working backwards from customers' needs, and we appreciate the feedback that Tuya has shared. We remain committed in developing new Aurora features and capabilities so all customers can accelerate their applications' capabilities and business growth by using Aurora." "Tuya has always committed to strengthening advanced and valuable innovations, while offering open and neutral ecosystem assistance for global partners. We provide our developers with enhanced operational and maintenance control, adaptable data storage options, superior product experience, and a global business layout by utilizing the Amazon Aurora database. We will continue to work with AWS to benefit the world in the future in areas including technology, ecosystems, and cloud computing, helping customers achieve commercial success." said Eva Na, Vice President of Marketing and Strategic Cooperation, and CMO of Tuya Smart. Enhancing the partnership with AWS, Tuya delivered IoT best practice using Amazon Aurora database, giving the industry's growth additional impetus. Tuya will maintain its open and neutral stance going forward, collaborating with cloud service providers like AWS to offer global developers a more secure, reliable, and productive cloud environment, thereby advancing the innovation and development of the entire industry.

Read More

Enterprise Iot

Nozomi Networks Delivers Industry's First Multi-Spectrum Wireless Security Sensor for Global OT and IoT Environments

Nozomi Networks | January 25, 2024

Nozomi Networks Inc., the leader in OT and IoT security, today introduced Guardian Air™, the industry's only wireless spectrum sensor purpose-built for OT and IoT environments worldwide. With 80 percent of new IoT deployments wirelessly connected, wireless is quickly becoming a preferred network. The explosion of wirelessly connected devices increases potential access points and exploitation of networks. This puts critical infrastructure at risk of cyberattacks and disruptions to operations. Guardian Air provides much-needed visibility into wirelessly enabled devices which until now were only detected once connected to the wired network. Guardian Air monitors several prominent wireless frequencies, not just Bluetooth and Wi-Fi, to provide security teams with immediate visibility of connected sensors, devices, laptops and cell phones. With the addition of Guardian Air, customers have a comprehensive network solution all in one integrated platform. "Nozomi Networks has once again innovated to address an unmet need for wireless-level monitoring in OT and IoT environments," said Danielle VanZandt, an industry manager for commercial and public security research at Frost & Sullivan. "From smart manufacturing to digital medicine, to building automation, to modern oil field production and more, today industrial organizations are relying on billions of wireless devices to speed production and time to market. Guardian Air gives IT security professionals and OT operators the visibility they need to get a firm handle on wireless risk management and response." With Guardian Air, IT security professionals and OT operators can: Continuously monitor prominent wireless frequency technologies used in OT and IoT environments including Bluetooth, Wi-Fi, cellular, LoRaWAN, Zigbee, GPS, drone RF protocols, WirelessHART and more, Immediately detect wirelessly connected assets and gain asset information to quickly address unauthorized installations, Detect wireless-specific threats, including brute force attacks, spoofing, and bluejacking – with the added ability to determine the location of the devices performing the attacks, Seamlessly integrate wireless data into a single OT & IoT security platform that unifies asset visibility from the endpoint and across wired and wireless networks. "Wireless is fundamentally changing the way industrial organizations operate. Unfortunately, it also massively expands the potential attack surface," said Nozomi Networks Co-founder and Chief Product Officer Andrea Carcano. "Guardian Air solves this problem by giving customers the accurate visibility they need at the wireless level to minimize risk while maximizing resiliency. Because Guardian Air integrates easily into the Nozomi Networks Vantage platform, customers can combine network, endpoint and wireless for the greatest visibility, threat detection and AI-powered analysis for real-time security management and remediation across the entire attack surface." The Nozomi Guardian Air wireless sensor will be available this spring from Nozomi Networks and its extensive global network of channel partners. About Nozomi Networks Nozomi Networks accelerates digital transformation by protecting the world's critical infrastructure, industrial and government organizations from cyber threats. Our solution delivers exceptional network and asset visibility, threat detection, and insights for OT and IoT environments. Customers rely on us to minimize risk and complexity while maximizing operational resilience. www.nozominetworks.com

Read More

IoT Security

AppViewX Digital Trust Platform Named IoT Security Product of the Year

AppViewX | January 12, 2024

AppViewX, the leader in automated machine identity management (MIM) and application infrastructure security, today announced the AppViewX Digital Trust Platform has been named IoT Security Product of the Year in the 8th annual IoT Breakthrough awards program, which showcases technologies and companies that drive innovation and exemplify the best in IoT technology solutions across the globe. IoT Breakthrough is a leading market intelligence organization that recognizes the top companies, technologies and products in the global IoT market. The mission of the IoT Breakthrough Awards program is to recognize the innovators, leaders and visionaries from around the globe in a range of IoT categories, including Industrial and Enterprise IoT, Smart City technology, Connected Home and Home Automation, Connected Car, and many more. This year's program attracted nominations from companies all over the world. “Unmanaged machine identities for IoT devices can create critical security vulnerabilities, but for most organizations discovering, maintaining visibility into and controlling them has become manually unfeasible,” said Gregory Webb, CEO of AppViewX. “The AppViewX Digital Trust Platform automates IoT identity management at scale across the largest, most complex and distributed customer environments, allowing customers to achieve significantly stronger security posture and meet compliance requirements.” All IoT Breakthrough Award nominations were evaluated by an independent panel of experts within the IoT industry, with the winning products and companies selected based on a variety of criteria, including most innovative and technologically advanced products and services. About AppViewX Digital Trust Platform Out of the box, AppViewX provides instant value to customers by discovering all certificates across complex enterprise environments, building and maintaining inventories, provisioning both private and public trust certificates from any CA, alerting to expiring certificates and fully automating renewals and revocation to eliminate outages and security weaknesses across machines, applications, services, and security infrastructure. About AppViewX AppViewX is trusted by the world’s leading organizations to reduce risk, ensure compliance, and increase visibility through automated machine identity management and application infrastructure security and orchestration. The AppViewX platform provides complete certificate lifecycle management and PKI-as-a-Service using streamlined workflows to prevent outages, reduce security incidents and enable crypto-agility. Fortune 1000 companies, including six of the top ten global commercial banks, five of the top ten global media companies, and five of the top ten managed healthcare providers rely on AppViewX to automate NetOps, SecOps, and DevOps. AppViewX is headquartered in New York with offices in the U.K., Australia and three development centers of excellence in India. For more information, visit https://www.appviewx.com and follow us on LinkedIn and Twitter.

Read More

Events