Cisco: Demanding a Plan for Cyber Resilience in the IoT

Earlier this month, I wrote about the need for a holistic security strategy for the Internet of Things (IoT). It’s more than securing a ‘thing’ within the IoT.

Spotlight

Cardinal Peak

Cardinal Peak believes in engineering success for our clients. We are a product engineering services firm that has helped 300+ clients solve the hard problems for their IoT and video/audio products. Our team is made up of experienced engineers, designers and strategists who provide services for mobile, web, cloud, embedded software and hardware solutions. At the end of the day, we solve engineering problems so our clients can bring their innovations to market.

OTHER ARTICLES
IoT Security

What Is IoT Forensics? Challenges Ahead and Best Tools to Use

Article | June 27, 2023

Internet of Things, generally known as IoT, is a network of objects or things. Embedded sensors help connect and exchange data with other objects via the internet. IoT is often related to the concept of smart homes, including devices like home security systems, cameras, lighting, refrigerators, etc. With all this data being transmitted over the internet, it is easy for the data to be modified, deleted, or stolen, which can lead to an invasion, theft, etc. IoT forensics plays a vital role in maintaining the integrity and security of the data being transmitted. Join us as we explore this fascinating web of devices and how you can get started in this vibrant field of forensics.

Read More
IoT Security

Microsoft acquires ReFirm Labs to enhance IoT security

Article | June 28, 2023

Modern computing devices can be thought of as a collection of discrete microprocessors each with a dedicated function like high-speed networking, graphics, Disk I/O, AI, and everything in between. The emergence of the intelligent edge has accelerated the number of these cloud-connected devices that contain multiple specialized sub-processors each with its own firmware layer and often a custom operating system. Many vulnerability analysis and endpoint detection and response (EDR) tools find it challenging to monitor and protect devices at the firmware level, leading to an attractive security gap for attackers to exploit. At the same time, we have also seen growth in the number of attacks against firmware where sensitive information like credentials and encryption keys are stored in memory. A recent survey commissioned by Microsoft of 1,000 security decision-makers found that 83 percent had experienced some level of firmware security incident, but only 29 percent are allocating resources to protect that critical layer. And according to March 2021 data from the National Vulnerability Database included in a presentation from the Department of Homeland Security’s Cybersecurity and Infrastructure Agency (CISA) at the 2021 RSA, difficult-to-patch firmware attacks are continuing to rise. Microsoft’s Azure Defender for IoT team (formerly CyberX) recently announced alongside the Department of Homeland Security a series of more than 25 critical severity vulnerabilities in IoT and OT devices

Read More
IoT Security

Explore Top IoT Security Conferences to Attend in 2023 and Beyond

Article | July 17, 2023

Explore the events on IoT security, addressing to the complex cyber security challenges and privacy issues. It caters to a variety of attendees including industrialists, students and enthusiasts. The significance of IoT security cannot be overstated in today's interconnected business landscape. Safeguarding sensitive data and mitigating risks is paramount, making robust IoT security a non-negotiable imperative for organizations seeking to thrive in the digital age. From industry professionals seeking to expand their knowledge to builders and buyers in the market, these events provide a comprehensive platform to learn, connect, and discover the possibilities of scaling with IoT. Attendees can connect with buyers, sellers, and innovators, fostering meaningful connections and exploring potential business opportunities. At these industrial IoT conferences 2023 and beyond, attendees can immerse themselves in a vibrant atmosphere of innovation and collaboration. 1. IoT Tech Expo September 26-27, 2023 | RAI (AMSTERDAM) The IoT Tech Expo Europe is a prominent event that serves as a platform for exploring the latest innovations, solutions, and strategies in the field of IoT, digital twins, enterprise transformation, IoT security, and edge platforms. It promises two days of top-level content and thought leadership discussions. Industry experts, including keynote speakers and panelists, will share their unparalleled industry knowledge, real-life experiences, and insights through solo presentations, expert panel discussions, and in-depth fireside chats. Some of the key sessions will include panel discussions on staying on track with digital twins, examining their pitfalls across industries, and exploring the incorporation of other technologies like AI, ML, and Blockchain for agile processes. Notable speakers in this domain include Bruno Ávila, i-Team Director - Digital Urban Planning Lab, City of Amsterdam; Ben Lomax Thorpe, Head of Digital Twin, among others. Additionally, the event showcases success stories and case studies from organizations leading the way in digitalization and IoT implementation. 2. International Conference on the Internet of Things November 7-10, 2023 | Nagoya (Japan) This event brings together leading researchers, industry experts, and stakeholders in the IoT field. This conference serves as a platform for visionary and groundbreaking research, fostering innovation in various IoT verticals such as smart industry, smart cities, smart health, and smart environment. The 13th International Conference on the Internet of Things (IoT 2023) will include keynote speeches, research presentations, panel discussions, and interactive sessions. It will provide a platform for sharing visionary ideas, ground-breaking research findings, and innovative solutions in the realm of IoT and related fields. Nagoya, the host city for IoT 2023, will offer a captivating setting for the conference. With a focus on visionary research and innovation, the conference provides a platform for knowledge sharing, collaboration, and exploration of IoT advancements in various verticals. 3. 9th Annual IoT Security Foundation Conference November 7, 2023 | IET (London) The 9th Annual IoT Security Foundation Conference is a highly regarded event dedicated to IoT cybersecurity. With the increasing prominence of artificial intelligence in various industries, this year's conference will focus on the impact of AI on cybersecurity, exploring its implications for developers and cyber defenders at the forefront of the field. The call for presentations is currently open, inviting submissions on a wide range of IoT security-related themes till July 14th, 2023, with notifications of acceptance to be sent by August 18th, 2023. By participating in the IoTSF 2023 Conference, sponsors and exhibitors gain exposure within the IoT security community and can forge new customer relationships, generate leads, establish partnerships, and strengthen existing customer connections. The conference will cover a range of themes, including business, technical, operational, educational, and policy-related topics. Proposals are invited on these subjects, offering speakers an opportunity to contribute to the diverse interests of conference attendees. 4. ETSI IoT Conference 2023 (ETSI IoT Week 2023) July 4-6, 2023 | Sophia Antipolis (France) ETSI, the European Telecommunications Standards Institute, is organizing its annual flagship event, the ETSI IoT Conference. The conference, ' IoT Technologies for Green and Digital Transformation,' is a must-attend event for professionals involved in the Internet of Things, recognizing the significance of standard-enabled technologies for IoT service deployments. It provides a valuable platform for attendees to learn and share experiences related to IoT technologies, services, activities, and requirements, focusing on current and future standardization efforts. The 2023 edition of the conference will feature a combination of keynote speeches, presentations, interactive panels, and IoT demonstrations, creating ample networking opportunities for participants. The event will revolve around three main areas: IoT for the digital and green transformation, IoT technologies, and horizontal IoT standards for various vertical business sectors. The ETSI IoT Conference is particularly relevant for organizations and stakeholders interested in the service and operational aspects of IoT, including industry representatives, SMEs, research and development institutions, academia, decision and policy makers, as well as users of IoT standards such as cities, governments, and societal actors. 5. 4th International Conference on Big Data, Machine Learning and IoT (BMLI 2023) August 26-27, 2023 | Dubai (UAE) The 4th International Conference on Big Data, Machine Learning, and IoT serves as a major platform for presenting innovative ideas, developments, research projects, and approaches in the domains of big data, machine learning, and the internet of things. This event includes but is not limited to big data techniques, models, and algorithms; infrastructure and platforms for big data; search and mining in big data; security, privacy, and trust in big data. Authors are invited to submit original papers by July 01, 2023, through the conference's submission system. Additionally, selected outstanding papers will have the opportunity to be considered for publication in renowned journals such as the International Journal of Database Management Systems (IJDMS), the International Journal of Data Mining & Knowledge Management Process (IJDKP), and others. The event will provide an excellent opportunity for researchers, industry professionals, and practitioners to explore the latest advancements, share knowledge, and foster collaborations in the dynamic fields of big data, machine learning, and IoT. 6. 28th Australasian Conference on Information Security and Privacy (ACISP 2023) July 5-7, 2023 | Brisbane (Australia) The 28th Australasian Conference on Information Security and Privacy (ACISP 2023) is an event in the field of cybersecurity and privacy, bringing together researchers, practitioners, and industry experts from Australasia and around the world. This conference will serve as a platform to exchange innovative ideas, research findings, and advancements in information security and privacy. ACISP 2023 focuses on addressing the evolving challenges and emerging trends in the field, providing a forum for discussing theoretical and practical aspects of IoT security risks. Participants have the opportunity to present their research papers, engage in enlightening discussions, and network with professionals in the industry. The conference covers a wide range of topics related to information security and privacy, including cryptographic protocols and algorithms, security in emerging technologies, intrusion detection and prevention. 7. The Things Conference September 21-22, 2023 | Amsterdam (Netherlands) The Things Conference is dedicated to LoRaWAN, attracting thousands of professionals and enthusiasts worldwide. This highly anticipated gathering will serve as a hub for the entire LoRaWAN ecosystem, offering a unique opportunity to meet key players, gain valuable insights into the IoT industry, and explore the expanding LPWAN market. The event showcases a diverse range of LoRaWAN enabled security IoT devices and gateways at the Wall of Fame, where participants can interact with and experience first-hand the latest products from over 100 partners. The conference program features an impressive line-up of speakers from prominent companies such as Blues, Miromico, ELSYS, TagoIO, Edge Impulse, and more. Attendees can benefit from engaging keynotes, insightful workshops, interactive side sessions, case studies, and value-driven stories. These sessions cover various aspects of LoRaWAN, offering attendees valuable knowledge and practical guidance. One of the highlights of The Things Conference is The Things Certifications, which allow participants to showcase their expertise. Final Thoughts The conferences help industry experts, IT professionals, engineers, and decision-makers to gain insights and in-depth knowledge. Attendees can expect a comprehensive program consisting of keynote presentations, panel discussions, case studies, and interactive workshops. The above events will cover various topics, concerning the IoT security. Participating in these will provide networking opportunities, allowing attendees to connect with peers, share experiences, and establish valuable business connections. Leaders can stay updated with the evolving data center landscape and gain a competitive edge in their evolving technologies, to provide protection against threats.

Read More
Enterprise Iot

Understanding IoT Data Protocols: Why Do They Matter for IoT Data?

Article | May 11, 2023

Learn more about IoT data protocols and what makes them essential for a cohesive IoT ecosystem. This article will provide a detailed view of data protocols and their importance for modern businesses. 1 Significance of IoT Data Protocols for Business Operations IoT ecosystems form an integral part of many businesses today, and IoT data protocols serve as the foundation for seamless communication and data exchange between connected devices. IoT protocols ensure the integrity and reliability of data, empowering businesses to make informed decisions, optimize operations, enhance productivity, and drive innovation. With standardized and secure IoT protocols and standards, companies can achieve efficient data transmission and allow for scalability across diverse IoT ecosystems. Understanding and leveraging the right protocols is essential for businesses to benefit from the full potential of their IoT investments and gain a competitive edge in today's interconnected world. 2 Understanding IoT Data Protocols IoT data protocols are standardized rules and formats that ensure efficient and secure data transmission for efficient IoT communication. By adhering to established protocols such as MQTT, CoAP, and AMQP, businesses can maintain interoperability, scalability, and robust data transmission of IoT data, ensuring efficient data storage and management for their IoT ecosystem. This, in turn, empowers organizations to monitor and control critical processes in real-time and make informed decisions. 2.1 Role of IoT Data Protocols in the IoT Ecosystem The seamless functioning of an organization's IoT ecosystem relies on the pivotal role played by IoT data protocols. These protocols, serving as the communication backbone, enable secure transfer and efficient data processing, thereby facilitating the seamless exchange of information within the IoT network. Consequently, businesses operating within the IoT sphere can harness the power of reliable data communication enabled by these protocols to unlock insights that drive innovation. IoT data protocols serve as the vital link that fuels the interconnected landscape of IoT devices, elevating the efficiency and efficacy of businesses as they navigate the complex web of IoT technologies and leverage its immense potential. 2.2 Overview of Common IoT Data Protocols The IoT data protocols come with their own set of applications and challenges. Understanding each protocol's individual use cases will help businesses set up and scale their IoT device ecosystems. MQTT (Message Queuing Telemetry Transport): MQTT is a lightweight and efficient protocol designed for low-power devices and unreliable networks. It uses a publish-subscribe model, making it ideal for IoT applications where bandwidth and power consumption are crucial factors, such as remote monitoring and control systems. CoAP (Constrained Application Protocol): For resource-constrained IoT devices, CoAP is designed to enable smooth communication over the Internet. It uses a client-server model and is suitable for IoT applications where devices have limited processing power and memory, such as smart home automation, environmental monitoring, and healthcare systems. HTTP (Hypertext Transfer Protocol): Although primarily designed for web applications, HTTP is also used in IoT systems for data transmission. The ubiquity and familiarity of HTTP make it a widely supported communication protocol. As a result, it is suitable for IoT devices that require high-level interoperability in applications that involve cloud integration, data analytics, and web-based control interfaces. AMQP (Advanced Message Queuing Protocol): AMQP is a flexible messaging protocol ensuring reliable, secure, and interoperable communication between IoT devices and back-end systems. It supports both publish-subscribe and point-to-point messaging models, making it suitable for IoT scenarios involving complex routing, large-scale deployments, and enterprise integrations. Zigbee: Zigbee is a wireless protocol designed specifically for low-power, short-range communication in IoT networks. It operates on the IEEE 802.15.4 standard and is known for its energy efficiency and mesh networking capabilities, leading to its widespread adoption in home automation, intelligent lighting, and industrial control systems. 3 Considerations for Choosing the Right IoT Data Protocol Selecting a suitable IoT data protocol is essential to maintain smooth interoperability and a unified IoT ecosystem. Compatibility with existing infrastructure is crucial for seamless integration and cost-effective implementation. Security measures must also be robust to protect sensitive data from unauthorized access and potential breaches. Additionally, scalable and flexible data protocols in IoT are vital to accommodate future growth and evolving business requirements. Furthermore, the protocol's reliability and efficiency in transmitting data should align with the use case of IoT systems. Finally, considering the protocol's industry adoption and standardization level will also help minimize risks and enhance interoperability. 4 In Summary IoT data protocols play a significant role in facilitating efficient and secure business operations within the IoT ecosystem. By learning more about the use cases of the most common protocols in the industry, businesses can consider factors such as compatibility, security, scalability, and reliability while choosing the most suitable option for their business. As IoT systems grow, more complex and reliable data protocols will emerge, paving the way for enhanced connectivity, interoperability, and transformative opportunities across various industries.

Read More

Spotlight

Cardinal Peak

Cardinal Peak believes in engineering success for our clients. We are a product engineering services firm that has helped 300+ clients solve the hard problems for their IoT and video/audio products. Our team is made up of experienced engineers, designers and strategists who provide services for mobile, web, cloud, embedded software and hardware solutions. At the end of the day, we solve engineering problems so our clients can bring their innovations to market.

Related News

Industrial IoT

Tuya Smart Delivers IoT Best Practice Using Amazon Aurora, Leads the Direction of Cloud Database Innovation Use Cases with Amazon Web Services

Tuya Smart | January 24, 2024

Tuya Smart, the global IoT developer service provider, has delivered its Best Practices in using Amazon Aurora at IoT industry. Amazon Aurora is a relational database management system (RDBMS) built for the cloud with full MySQL and PostgreSQL compatibility. Tuya and Amazon Web Services (AWS) built a solid basis of collaboration in database use cases exploration while also delivering smooth operation of billions of devices requiring high concurrency and low latency. Tuya and AWS: Building a benchmark for database implementation practice Tuya is a leading technology company focused on making our lives smarter. Tuya does this by offering a cloud platform that connects a range of devices via the IoT. By building interconnectivity standards, Tuya bridges the intelligent needs of brands, OEMs, developers, and retail chains across a broad range of smart devices and industries. Tuya's solutions enable partners and customers by improving the value of their products while making consumers' lives more convenient through the application of technology. As of September 30, 2023, the Tuya IoT Developer Platform has accumulated over 909,000 registered developers from over 200 countries and regions, covering industries including real estate, hospitality, residential, industry, agriculture, etc. The greater the breadth of business coverage, the more advanced technological support required. Tuya faces high-frequency reads and writes as well as enormous data storage challenges from billion-level online devices. Meanwhile, due to the commercial scenarios involving smart homes and smart industries, Tuya's operating response demands low latency in order to deliver a smoother user experience. Furthermore, Tuya's quick expansion and regular business changes have posed significant challenges to its operation and maintenance management. Tuya selected Amazon Aurora as core database engine for its unparalleled performance and availability at global scale. How does Tuya specifically leverage the Amazon Aurora database? Tuya currently manages billions of real-time online devices and can keep cloud message processing response times under 10 milliseconds. However, billions online devices provide a challenge. During holidays, there will be peak traffic volume, with tens of millions of devices going online and offline virtually simultaneously. Tuya used Amazon Aurora to construct a data storage solution to solve the main problem of rapid increase in short-term traffic, and to fully utilize resources. Aurora's design, which separates compute and storage and low-latency replication functionality, improves system throughput by enhancing the effect of read-write separation. Aurora provides up to 15 read replicas, setting the groundwork for Tuya's read flexibility development. At the same time, Tuya has integrated Aurora Serverless, which includes seconds-level elastic expansion and contraction, allowing Tuya to handle extremely heavy business traffic smoothly. Tuya's customers are located throughout more than 200 nations and regions, and they deal with widespread access to IoT data. Different countries and regions have different regulations on data compliance, such as GDPR and local PII. Tuya needs to adhere to each region's data security compliance regulations. As Tuya's primary business data storage provider, Amazon Aurora was among the first in the public cloud sector to enable physical encryption for database products, which significantly decreased the cost of Tuya's security compliance transformation and gave Tuya excellent basic security guarantees. In addition, Tuya is continuously testing out additional new innovation unique to Aurora, such as Enhanced Binlog, zero-ETL, and Limitless Database. Aurora's ongoing investment in innovative technologies provides more opportunities for Tuya to expand its business. Additionally, based on Tuya's comprehensive IoT developer platform architecture, both parties have collaborated to enhance Tuya IoT applications performance indicators like stability, low latency, scalability, and security in the real-world application of databases, revealing more potential and possibilities and enabling the IoT. Tuya and AWS: Continuously promoting the evolution of cloud experience Data-driven approaches will usher in a new era of innovation in tandem with the swift advancement of data applications. At this year's re:Invent conference, Peter DeSantis, Senior Vice President of AWS, reviewed the relational database's development history in great detail. In 2014, AWS created Aurora based on log architecture. In 2018, the release of Aurora Serverless allowed for seamless scaling of database resources through virtualization technology. This year, AWS announced the launch of the Amazon Aurora Limitless Database, which automatically scales to millions of write transactions per second well beyond current limits of a single PostgreSQL instance. It is apparent from Amazon Aurora's development history that AWS has always been dedicated to innovation. Customers and partners from a range of industries actively utilizes AWS to enable rapid innovation in a variety of ways, while also working together to enhance the cloud experience. Similar to how Tuya and AWS work together, Tuya's effective and user-friendly IoT developer platform and rich and varied IoT solutions have built a significant lighthouse, embracing the Amazon Aurora's innovation and accelerated the process of building a more secure and reliable IoT database use case. Amazon Aurora VP Yan Leshinsky said, "Amazon Aurora is the fastest growing service in the history of AWS and is trusted by hundreds of thousands of customers. We innovate by working backwards from customers' needs, and we appreciate the feedback that Tuya has shared. We remain committed in developing new Aurora features and capabilities so all customers can accelerate their applications' capabilities and business growth by using Aurora." "Tuya has always committed to strengthening advanced and valuable innovations, while offering open and neutral ecosystem assistance for global partners. We provide our developers with enhanced operational and maintenance control, adaptable data storage options, superior product experience, and a global business layout by utilizing the Amazon Aurora database. We will continue to work with AWS to benefit the world in the future in areas including technology, ecosystems, and cloud computing, helping customers achieve commercial success." said Eva Na, Vice President of Marketing and Strategic Cooperation, and CMO of Tuya Smart. Enhancing the partnership with AWS, Tuya delivered IoT best practice using Amazon Aurora database, giving the industry's growth additional impetus. Tuya will maintain its open and neutral stance going forward, collaborating with cloud service providers like AWS to offer global developers a more secure, reliable, and productive cloud environment, thereby advancing the innovation and development of the entire industry.

Read More

Enterprise Iot

Nozomi Networks Delivers Industry's First Multi-Spectrum Wireless Security Sensor for Global OT and IoT Environments

Nozomi Networks | January 25, 2024

Nozomi Networks Inc., the leader in OT and IoT security, today introduced Guardian Air™, the industry's only wireless spectrum sensor purpose-built for OT and IoT environments worldwide. With 80 percent of new IoT deployments wirelessly connected, wireless is quickly becoming a preferred network. The explosion of wirelessly connected devices increases potential access points and exploitation of networks. This puts critical infrastructure at risk of cyberattacks and disruptions to operations. Guardian Air provides much-needed visibility into wirelessly enabled devices which until now were only detected once connected to the wired network. Guardian Air monitors several prominent wireless frequencies, not just Bluetooth and Wi-Fi, to provide security teams with immediate visibility of connected sensors, devices, laptops and cell phones. With the addition of Guardian Air, customers have a comprehensive network solution all in one integrated platform. "Nozomi Networks has once again innovated to address an unmet need for wireless-level monitoring in OT and IoT environments," said Danielle VanZandt, an industry manager for commercial and public security research at Frost & Sullivan. "From smart manufacturing to digital medicine, to building automation, to modern oil field production and more, today industrial organizations are relying on billions of wireless devices to speed production and time to market. Guardian Air gives IT security professionals and OT operators the visibility they need to get a firm handle on wireless risk management and response." With Guardian Air, IT security professionals and OT operators can: Continuously monitor prominent wireless frequency technologies used in OT and IoT environments including Bluetooth, Wi-Fi, cellular, LoRaWAN, Zigbee, GPS, drone RF protocols, WirelessHART and more, Immediately detect wirelessly connected assets and gain asset information to quickly address unauthorized installations, Detect wireless-specific threats, including brute force attacks, spoofing, and bluejacking – with the added ability to determine the location of the devices performing the attacks, Seamlessly integrate wireless data into a single OT & IoT security platform that unifies asset visibility from the endpoint and across wired and wireless networks. "Wireless is fundamentally changing the way industrial organizations operate. Unfortunately, it also massively expands the potential attack surface," said Nozomi Networks Co-founder and Chief Product Officer Andrea Carcano. "Guardian Air solves this problem by giving customers the accurate visibility they need at the wireless level to minimize risk while maximizing resiliency. Because Guardian Air integrates easily into the Nozomi Networks Vantage platform, customers can combine network, endpoint and wireless for the greatest visibility, threat detection and AI-powered analysis for real-time security management and remediation across the entire attack surface." The Nozomi Guardian Air wireless sensor will be available this spring from Nozomi Networks and its extensive global network of channel partners. About Nozomi Networks Nozomi Networks accelerates digital transformation by protecting the world's critical infrastructure, industrial and government organizations from cyber threats. Our solution delivers exceptional network and asset visibility, threat detection, and insights for OT and IoT environments. Customers rely on us to minimize risk and complexity while maximizing operational resilience. www.nozominetworks.com

Read More

IoT Security

AppViewX Digital Trust Platform Named IoT Security Product of the Year

AppViewX | January 12, 2024

AppViewX, the leader in automated machine identity management (MIM) and application infrastructure security, today announced the AppViewX Digital Trust Platform has been named IoT Security Product of the Year in the 8th annual IoT Breakthrough awards program, which showcases technologies and companies that drive innovation and exemplify the best in IoT technology solutions across the globe. IoT Breakthrough is a leading market intelligence organization that recognizes the top companies, technologies and products in the global IoT market. The mission of the IoT Breakthrough Awards program is to recognize the innovators, leaders and visionaries from around the globe in a range of IoT categories, including Industrial and Enterprise IoT, Smart City technology, Connected Home and Home Automation, Connected Car, and many more. This year's program attracted nominations from companies all over the world. “Unmanaged machine identities for IoT devices can create critical security vulnerabilities, but for most organizations discovering, maintaining visibility into and controlling them has become manually unfeasible,” said Gregory Webb, CEO of AppViewX. “The AppViewX Digital Trust Platform automates IoT identity management at scale across the largest, most complex and distributed customer environments, allowing customers to achieve significantly stronger security posture and meet compliance requirements.” All IoT Breakthrough Award nominations were evaluated by an independent panel of experts within the IoT industry, with the winning products and companies selected based on a variety of criteria, including most innovative and technologically advanced products and services. About AppViewX Digital Trust Platform Out of the box, AppViewX provides instant value to customers by discovering all certificates across complex enterprise environments, building and maintaining inventories, provisioning both private and public trust certificates from any CA, alerting to expiring certificates and fully automating renewals and revocation to eliminate outages and security weaknesses across machines, applications, services, and security infrastructure. About AppViewX AppViewX is trusted by the world’s leading organizations to reduce risk, ensure compliance, and increase visibility through automated machine identity management and application infrastructure security and orchestration. The AppViewX platform provides complete certificate lifecycle management and PKI-as-a-Service using streamlined workflows to prevent outages, reduce security incidents and enable crypto-agility. Fortune 1000 companies, including six of the top ten global commercial banks, five of the top ten global media companies, and five of the top ten managed healthcare providers rely on AppViewX to automate NetOps, SecOps, and DevOps. AppViewX is headquartered in New York with offices in the U.K., Australia and three development centers of excellence in India. For more information, visit https://www.appviewx.com and follow us on LinkedIn and Twitter.

Read More

Industrial IoT

Tuya Smart Delivers IoT Best Practice Using Amazon Aurora, Leads the Direction of Cloud Database Innovation Use Cases with Amazon Web Services

Tuya Smart | January 24, 2024

Tuya Smart, the global IoT developer service provider, has delivered its Best Practices in using Amazon Aurora at IoT industry. Amazon Aurora is a relational database management system (RDBMS) built for the cloud with full MySQL and PostgreSQL compatibility. Tuya and Amazon Web Services (AWS) built a solid basis of collaboration in database use cases exploration while also delivering smooth operation of billions of devices requiring high concurrency and low latency. Tuya and AWS: Building a benchmark for database implementation practice Tuya is a leading technology company focused on making our lives smarter. Tuya does this by offering a cloud platform that connects a range of devices via the IoT. By building interconnectivity standards, Tuya bridges the intelligent needs of brands, OEMs, developers, and retail chains across a broad range of smart devices and industries. Tuya's solutions enable partners and customers by improving the value of their products while making consumers' lives more convenient through the application of technology. As of September 30, 2023, the Tuya IoT Developer Platform has accumulated over 909,000 registered developers from over 200 countries and regions, covering industries including real estate, hospitality, residential, industry, agriculture, etc. The greater the breadth of business coverage, the more advanced technological support required. Tuya faces high-frequency reads and writes as well as enormous data storage challenges from billion-level online devices. Meanwhile, due to the commercial scenarios involving smart homes and smart industries, Tuya's operating response demands low latency in order to deliver a smoother user experience. Furthermore, Tuya's quick expansion and regular business changes have posed significant challenges to its operation and maintenance management. Tuya selected Amazon Aurora as core database engine for its unparalleled performance and availability at global scale. How does Tuya specifically leverage the Amazon Aurora database? Tuya currently manages billions of real-time online devices and can keep cloud message processing response times under 10 milliseconds. However, billions online devices provide a challenge. During holidays, there will be peak traffic volume, with tens of millions of devices going online and offline virtually simultaneously. Tuya used Amazon Aurora to construct a data storage solution to solve the main problem of rapid increase in short-term traffic, and to fully utilize resources. Aurora's design, which separates compute and storage and low-latency replication functionality, improves system throughput by enhancing the effect of read-write separation. Aurora provides up to 15 read replicas, setting the groundwork for Tuya's read flexibility development. At the same time, Tuya has integrated Aurora Serverless, which includes seconds-level elastic expansion and contraction, allowing Tuya to handle extremely heavy business traffic smoothly. Tuya's customers are located throughout more than 200 nations and regions, and they deal with widespread access to IoT data. Different countries and regions have different regulations on data compliance, such as GDPR and local PII. Tuya needs to adhere to each region's data security compliance regulations. As Tuya's primary business data storage provider, Amazon Aurora was among the first in the public cloud sector to enable physical encryption for database products, which significantly decreased the cost of Tuya's security compliance transformation and gave Tuya excellent basic security guarantees. In addition, Tuya is continuously testing out additional new innovation unique to Aurora, such as Enhanced Binlog, zero-ETL, and Limitless Database. Aurora's ongoing investment in innovative technologies provides more opportunities for Tuya to expand its business. Additionally, based on Tuya's comprehensive IoT developer platform architecture, both parties have collaborated to enhance Tuya IoT applications performance indicators like stability, low latency, scalability, and security in the real-world application of databases, revealing more potential and possibilities and enabling the IoT. Tuya and AWS: Continuously promoting the evolution of cloud experience Data-driven approaches will usher in a new era of innovation in tandem with the swift advancement of data applications. At this year's re:Invent conference, Peter DeSantis, Senior Vice President of AWS, reviewed the relational database's development history in great detail. In 2014, AWS created Aurora based on log architecture. In 2018, the release of Aurora Serverless allowed for seamless scaling of database resources through virtualization technology. This year, AWS announced the launch of the Amazon Aurora Limitless Database, which automatically scales to millions of write transactions per second well beyond current limits of a single PostgreSQL instance. It is apparent from Amazon Aurora's development history that AWS has always been dedicated to innovation. Customers and partners from a range of industries actively utilizes AWS to enable rapid innovation in a variety of ways, while also working together to enhance the cloud experience. Similar to how Tuya and AWS work together, Tuya's effective and user-friendly IoT developer platform and rich and varied IoT solutions have built a significant lighthouse, embracing the Amazon Aurora's innovation and accelerated the process of building a more secure and reliable IoT database use case. Amazon Aurora VP Yan Leshinsky said, "Amazon Aurora is the fastest growing service in the history of AWS and is trusted by hundreds of thousands of customers. We innovate by working backwards from customers' needs, and we appreciate the feedback that Tuya has shared. We remain committed in developing new Aurora features and capabilities so all customers can accelerate their applications' capabilities and business growth by using Aurora." "Tuya has always committed to strengthening advanced and valuable innovations, while offering open and neutral ecosystem assistance for global partners. We provide our developers with enhanced operational and maintenance control, adaptable data storage options, superior product experience, and a global business layout by utilizing the Amazon Aurora database. We will continue to work with AWS to benefit the world in the future in areas including technology, ecosystems, and cloud computing, helping customers achieve commercial success." said Eva Na, Vice President of Marketing and Strategic Cooperation, and CMO of Tuya Smart. Enhancing the partnership with AWS, Tuya delivered IoT best practice using Amazon Aurora database, giving the industry's growth additional impetus. Tuya will maintain its open and neutral stance going forward, collaborating with cloud service providers like AWS to offer global developers a more secure, reliable, and productive cloud environment, thereby advancing the innovation and development of the entire industry.

Read More

Enterprise Iot

Nozomi Networks Delivers Industry's First Multi-Spectrum Wireless Security Sensor for Global OT and IoT Environments

Nozomi Networks | January 25, 2024

Nozomi Networks Inc., the leader in OT and IoT security, today introduced Guardian Air™, the industry's only wireless spectrum sensor purpose-built for OT and IoT environments worldwide. With 80 percent of new IoT deployments wirelessly connected, wireless is quickly becoming a preferred network. The explosion of wirelessly connected devices increases potential access points and exploitation of networks. This puts critical infrastructure at risk of cyberattacks and disruptions to operations. Guardian Air provides much-needed visibility into wirelessly enabled devices which until now were only detected once connected to the wired network. Guardian Air monitors several prominent wireless frequencies, not just Bluetooth and Wi-Fi, to provide security teams with immediate visibility of connected sensors, devices, laptops and cell phones. With the addition of Guardian Air, customers have a comprehensive network solution all in one integrated platform. "Nozomi Networks has once again innovated to address an unmet need for wireless-level monitoring in OT and IoT environments," said Danielle VanZandt, an industry manager for commercial and public security research at Frost & Sullivan. "From smart manufacturing to digital medicine, to building automation, to modern oil field production and more, today industrial organizations are relying on billions of wireless devices to speed production and time to market. Guardian Air gives IT security professionals and OT operators the visibility they need to get a firm handle on wireless risk management and response." With Guardian Air, IT security professionals and OT operators can: Continuously monitor prominent wireless frequency technologies used in OT and IoT environments including Bluetooth, Wi-Fi, cellular, LoRaWAN, Zigbee, GPS, drone RF protocols, WirelessHART and more, Immediately detect wirelessly connected assets and gain asset information to quickly address unauthorized installations, Detect wireless-specific threats, including brute force attacks, spoofing, and bluejacking – with the added ability to determine the location of the devices performing the attacks, Seamlessly integrate wireless data into a single OT & IoT security platform that unifies asset visibility from the endpoint and across wired and wireless networks. "Wireless is fundamentally changing the way industrial organizations operate. Unfortunately, it also massively expands the potential attack surface," said Nozomi Networks Co-founder and Chief Product Officer Andrea Carcano. "Guardian Air solves this problem by giving customers the accurate visibility they need at the wireless level to minimize risk while maximizing resiliency. Because Guardian Air integrates easily into the Nozomi Networks Vantage platform, customers can combine network, endpoint and wireless for the greatest visibility, threat detection and AI-powered analysis for real-time security management and remediation across the entire attack surface." The Nozomi Guardian Air wireless sensor will be available this spring from Nozomi Networks and its extensive global network of channel partners. About Nozomi Networks Nozomi Networks accelerates digital transformation by protecting the world's critical infrastructure, industrial and government organizations from cyber threats. Our solution delivers exceptional network and asset visibility, threat detection, and insights for OT and IoT environments. Customers rely on us to minimize risk and complexity while maximizing operational resilience. www.nozominetworks.com

Read More

IoT Security

AppViewX Digital Trust Platform Named IoT Security Product of the Year

AppViewX | January 12, 2024

AppViewX, the leader in automated machine identity management (MIM) and application infrastructure security, today announced the AppViewX Digital Trust Platform has been named IoT Security Product of the Year in the 8th annual IoT Breakthrough awards program, which showcases technologies and companies that drive innovation and exemplify the best in IoT technology solutions across the globe. IoT Breakthrough is a leading market intelligence organization that recognizes the top companies, technologies and products in the global IoT market. The mission of the IoT Breakthrough Awards program is to recognize the innovators, leaders and visionaries from around the globe in a range of IoT categories, including Industrial and Enterprise IoT, Smart City technology, Connected Home and Home Automation, Connected Car, and many more. This year's program attracted nominations from companies all over the world. “Unmanaged machine identities for IoT devices can create critical security vulnerabilities, but for most organizations discovering, maintaining visibility into and controlling them has become manually unfeasible,” said Gregory Webb, CEO of AppViewX. “The AppViewX Digital Trust Platform automates IoT identity management at scale across the largest, most complex and distributed customer environments, allowing customers to achieve significantly stronger security posture and meet compliance requirements.” All IoT Breakthrough Award nominations were evaluated by an independent panel of experts within the IoT industry, with the winning products and companies selected based on a variety of criteria, including most innovative and technologically advanced products and services. About AppViewX Digital Trust Platform Out of the box, AppViewX provides instant value to customers by discovering all certificates across complex enterprise environments, building and maintaining inventories, provisioning both private and public trust certificates from any CA, alerting to expiring certificates and fully automating renewals and revocation to eliminate outages and security weaknesses across machines, applications, services, and security infrastructure. About AppViewX AppViewX is trusted by the world’s leading organizations to reduce risk, ensure compliance, and increase visibility through automated machine identity management and application infrastructure security and orchestration. The AppViewX platform provides complete certificate lifecycle management and PKI-as-a-Service using streamlined workflows to prevent outages, reduce security incidents and enable crypto-agility. Fortune 1000 companies, including six of the top ten global commercial banks, five of the top ten global media companies, and five of the top ten managed healthcare providers rely on AppViewX to automate NetOps, SecOps, and DevOps. AppViewX is headquartered in New York with offices in the U.K., Australia and three development centers of excellence in India. For more information, visit https://www.appviewx.com and follow us on LinkedIn and Twitter.

Read More

Events