How to Secure Your Network with Zero Trust Security for IoT?

Abhinav Anand | July 19, 2022 | 589 views | Read Time : 04:33 min

Zero Trust Security for IoT
The concept of "never trust, always verify" is the foundation of the relatively new security architecture known as "zero trust." Zero trust requires that all users and devices be verified every time they connect, even from inside the "moat," in contrast to the conventional castle-and-moat security architecture, which automatically trusts users and devices located within a network's perimeter.

Companies are being forced to reconsider how they safeguard their networks by the internet of things (IoT). Unmanaged smart gadgets connected to the internet expand the number of potential access points for hackers to compromise your security when they are added to a network.


Zero Trust Security Expansion for IoT

After establishing it for users and their devices, organizations must extend zero-trust security to cover unmanaged, non-user devices too. To do this, they require zero trust identity management technologies that automatically register devices, issue credentials, and offer password-less authentication.


Device Visibility

A device may be infected with malware or have a security breach if performance problems or bugs start to appear frequently. In addition, a malfunctioning device may be more vulnerable to attack. Therefore, organizations require device health monitoring that can automatically identify problems and flag them for remedy in order to establish and maintain zero trust security for IoT. Some cutting-edge solutions can also automatically prevent an impacted device from making further connection attempts or carrying out corrective actions without requiring human participation.


The Principle of Least Privilege (PoLP)

The principle of least privilege (PoLP), which argues that any user or device should only obtain the bare minimum access privileges necessary to perform their job functions, is widely used in conjunction with zero trust security. Therefore, organizations must establish the minimal level of network access required for each device to carry out its functions before limiting its potential privileges in order to deploy PoLP for IoT. Implementing identity and access management (IAM) tools and guidelines that support zero trust and PoLP for devices is one approach to accomplishing this.


Security Monitoring

There are other zero-trust security monitoring programs created especially for IoT, such as Palo Alto Networks' IoT Security, which was previously discussed. Businesses can also utilize tools to monitor devices and network traffic, such as next-generation firewalls and intrusion detection and prevention systems (IDS/IPS). The zero trust security solution for IoT must include monitoring in addition to as much automation as possible so that threats can be identified, contained, and remedied even when no one is there to press a button or disconnect a device manually.

One of the leading causes of zero trust security projects failing over time is that people stop adhering to them once they get complicated. This is especially true for IoT security that operates on zero trust. In addition, it can be logistically challenging to keep remote, unmanaged devices at zero trust.

Spotlight

Wind River

Wind River is a global leader in delivering software for the Internet of Things. The company’s technology has been powering the safest, most secure devices in world since 1981 and is found in more than 2 billion products. Wind River offers a comprehensive edge-to-cloud portfolio, supported by world-class global professional services and support and a broad partner ecosystem. Wind River software and expertise are accelerating digital transformation of critical infrastructure systems that demand the highest levels of safety, security, performance, and reliability.

OTHER ARTICLES
ENTERPRISE IOT

The IoT Smarthome Battlefield: A Jointly Endorsed IoT Standard for the Home Area Network

Article | August 3, 2022

Google announced that together with Amazon and Apple (the big 3 smart home players) they will work on the adoption of a joint wireless IoT standard for the smart home. This new connectivity standard is designed to make it easier for smart home products to work with each other.In the statement, Google said they were “joining Amazon, Apple and others to create Connected Home over IP, a new independent working group managed by the Zigbee Alliance (separate from the existing Zigbee 3.0/Pro protocol). We’re contributing two of our market-tested and open-source smart home technologies, Weave and Thread. Both are built on IP and have been integrated into millions of homes around the world.”

Read More
ENTERPRISE IOT

Smart Home Technologies: Zigbee, Z-Wave, Thread, and Dotdot

Article | July 11, 2022

If you own smart home products like SmartThings or Nest, you may be familiar with some of the technologies behind them. Network protocols like Zigbee and Z-Wave dominate the industry, while Thread, a younger network standard, is gaining headway as a strong contender in the battle for market share. Although this may seem like your typical rivalry between industry leaders, the competitive landscape is more complicated than selecting one over another.

Read More
ENTERPRISE IOT

12 Industrial IoT Companies You Should Know

Article | July 6, 2022

As the industrial IoT market continues to expand at rapid rates, companies across the world are reaping the benefits. Utilizing this growing network of tools and systems, businesses have been able to prevent costly downtime, decrease product development costs, enhance customer engagement and satisfaction and acquire and implement intelligent data for strategic planning purposes.The potential benefits are seemingly endless, and the list of organizations that are embracing this industrial revolution is continuing to grow, so let’s highlight some of the main IIoT companies you need to know for a number of the most common IIoT use cases.

Read More

Who should lead the push for IoT security?

Article | February 10, 2020

The ease with which internet of things devices can be compromised, coupled with the potentially extreme consequences of breaches, have prompted action from legislatures and regulators, but what group is best to decide? Both the makers of IoT devices and governments are aware of the security issues, but so far they haven’t come up with standardized ways to address them. The challenge of this market is that it’s moving so fast that no regulation is going to be able to keep pace with the devices that are being connected,” said Forrester vice president and research director Merritt Maxim. “Regulations that are definitive are easy to enforce and helpful, but they’ll quickly become outdated.”The latest such effort by a governmental body is a proposed regulation in the U.K. that would impose three major mandates on IoT device manufacturers that would address key security concerns.

Read More

Spotlight

Wind River

Wind River is a global leader in delivering software for the Internet of Things. The company’s technology has been powering the safest, most secure devices in world since 1981 and is found in more than 2 billion products. Wind River offers a comprehensive edge-to-cloud portfolio, supported by world-class global professional services and support and a broad partner ecosystem. Wind River software and expertise are accelerating digital transformation of critical infrastructure systems that demand the highest levels of safety, security, performance, and reliability.

Related News

ENTERPRISE IOT, DEVICES

KORE to Acquire Twilio's IoT Business Unit and Accelerate Progress Towards Building the World's First 'IoT Hyperscaler'

prnewswire | March 28, 2023

KORE Group Holdings, Inc. a global leader in Internet of Things ("IoT") Solutions and worldwide IoT Connectivity-as-a-Service ("IoT CaaS"), announced today the signing of a definitive agreement to acquire Twilio's IoT business unit as part of a growth strategy to provide customers with a unified, seamless approach to launching IoT solutions as the world's leading pure-play IoT provider. As consideration for the acquisition, Twilio (NYSE:TWLO), the customer engagement platform that drives real-time, personalized experiences for today's leading brands, will receive 10 million shares of KORE common stock, which will represent approximately 11.5% of KORE's issued and outstanding shares. "IoT has immense potential to change the world," KORE President and CEO Romil Bahl said. "Whether it is ushering in the Fourth Industrial Revolution, supporting chronic disease management through remote patient monitoring, or optimizing agriculture and supporting sustainability, IoT has many powerful applications. Combining the digital prowess of Twilio's IoT business and the comprehensive connectivity-solutions-analytics portfolio of KORE is a meaningful step toward proliferating IoT and making it more accessible and successful." Continued Bahl, "KORE is thrilled to augment our best-in-class IoT CaaS offering with Twilio's IoT talent and customer portfolio. This acquisition represents exactly the kind of investment we have said we are willing to make to become an exciting top-line growth company, and specifically, we will benefit from the world-class digital experience and developer community Twilio has built for its IoT business." This acquisition will bring to market: A powerful connectivity suite, including best-in-class eSIM technologies with KORE OmniSIM™ and Twilio Super SIM A one-stop shop for building, deploying, managing, and scaling IoT operations throughout the entire lifecycle via award-winning technologies and world-class facilities An accelerated time to market through global, 24/7 customer support and 20 years of IoT experience through KORE and the Twilio IoT team's depth and breadth of digital experience "We are just scratching the surface of the opportunities IoT can unlock for customers," said Twilio's Head of IoT, Taylor Wolfe. "As a global leader in IoT, KORE has the right expertise, vision, and technology to expand the robust offerings that Twilio's world-class IoT team has built. KORE is the right home for Twilio's IoT business, and we look forward to this acquisition increasing scalability and creating even more powerful business outcomes for our customers going forward." Completion of the acquisition transaction is subject to customary closing conditions, including, among other things, the negotiation and execution of certain ancillary agreements. About KORE KORE is a pioneer, leader, and trusted advisor delivering mission critical IoT solutions and services. We empower organizations of all sizes to improve operational and business results by simplifying the complexity of IoT. Our deep IoT knowledge and experience, global reach, purpose-built solutions, and deployment agility accelerate and materially impact our customers' business outcomes.

Read More

ENTERPRISE IOT, DEVICES

Lantronix Announces New X300 Compact Cellular IoT Gateway Solution, Ideal for Mission-Critical Applications

globenewswire | March 29, 2023

Lantronix Inc. a global provider of secure turnkey solutions for the Industrial Internet of Things (IoT) and the Intelligent IT market, today announced its new X300 Compact Gateway IoT Solution. Ideal for secure mission-critical applications, the new X300 Cellular Compact IoT Gateway Solution combines Lantronix’s IoT gateway hardware with a premium services subscription, including centralized device management, integrated cellular data, enhanced device security and expert technical support in an all-in-one package. “At Lantronix, we are committed to providing our customers with turnkey IoT solutions that efficiently solve their connectivity and remote device management challenges while offering expert technical support to ensure a successful deployment,” said Paul Pickle, CEO of Lantronix. “With the new X300 Compact Gateway IoT Solution, our customers can rest assured that they have a reliable, easy-to-manage solution, achieving maximum uptime and data security for mission-critical applications.” According to Berg insights, more than 4.5 million cellular IoT gateways were shipped globally during 2021, a 23 percent increase, at a total market value of approximately $1.15 billion as annual sales grew at a rate of 14 percent as demand recovered following the COVID-19 pandemic. Annual revenues from the sales of cellular IoT gateways is forecasted to grow at a compound annual growth rate (CAGR) of 14 percent to reach $2.18 billion by 2026. The X300 Compact Gateway IoT Solution includes: X300 Gateway, a compact (79mm X 79mm) IoT industrial gateway with suitable hardware interfaces, including a Multi-mode Serial port, an Ethernet LAN port, Wi-Fi® 5, Bluetooth/BLE and Worldwide cellular options, enabling the connection of any type of industrial machine and sensor with any type of network. Services included in the first-year subscription: Free upgrade to ConsoleFlow™ premium cloud-based device management with analytics Connectivity Services global, convenient and scalable cellular data plans Free upgrade to LEVEL 2 Services prompt expert technical support and warranty with advanced hardware replacement Lantronix InfiniShield™ built-in security, including a Secure Element (SE) chip to enable secure boot, secure equipment access and secure communications and to prevent unauthorized access of confidential information. Thenew X300 Gateway IoT Solution will be displayed at ISC West in Las Vegas from March 28–31, 2023, in the Lantronix booth, Number 2097. About Lantronix Lantronix Inc. is a global provider of secure turnkey solutions for the Internet of Things (IoT) and Remote Environment Management (REM), offering Software as a Service (SaaS), connectivity services, engineering services and intelligent hardware. Lantronix enables its customers to accelerate time to market and increase operational up-time and efficiency by providing reliable, secure and connected Intelligent Edge IoT and Remote Management Gateway solutions.

Read More

ENTERPRISE IOT, DEVICES

Nozomi Networks Releases New Content Pack for ISA/IEC 62443 Compliance Reporting and Security Checks

Nozomi Networks | March 24, 2023

Nozomi Networks, the leader in OT and IoT security, today announced a new content pack for organizations working toward ISA/IEC 62443 compliance and certification. The ISA/IEC 62443 Content Pack makes it possible for Nozomi Networks platform users to quickly create custom queries and reports that help confirm their industrial automation and control systems (IACS) meet ISA/IEC 62443 standards. The Content Pack can also be used to assess an IACS’ security posture against ISA/IEC 62443 standards, identifying areas that align with the standards and areas that must be addressed in order to be compliant. “Nozomi Networks’ ISA/IEC 62443 Content Pack technology brings everyone together around a set of reports and queries that helps users access the details they need to reach compliance,” said Chris Grove, Nozomi Networks Director of Cybersecurity Strategy. “Rather than reinvent the wheel each time a customer needs this data, a user can create and distribute a single file where it can then be imported into a Guardian, run as-is or edited, and then re-distributed to the public, across Guardians, or to partners, collaborators, user groups, wherever you want to share it.” The ISA/IEC 62443 series of standards, developed by the International Society of Automation 99 committee (ISA99) and adopted by the International Electrotechnical Commission (IEC), provides a framework to address and mitigate current and future security vulnerabilities in IACSs. The committee draws on the input and knowledge of security experts across the globe to develop consensus standards that are applicable to all industry sectors and critical infrastructure. Nozomi Networks’ Content Packs are owned by Nozomi Networks’ user community and make it possible to export a combination of queries and reports into a single JSON file that can be shared in a completely separate environment. Content Packs do not contain any proprietary information and are safe to share. This allows Nozomi Networks and its customers to quickly share custom reports or queries internally or with the Nozomi Networks user community. The new ISA/IEC 62443 Content Pack covers parts 2-1 (security program best practices) and part 3-3 (definitions for system security requirements and security capabilities levels). About Nozomi Networks Nozomi Networks accelerates digital transformation by protecting the world’s critical infrastructure, industrial and government organizations from cyber threats. Our solution delivers exceptional network and asset visibility, threat detection, and insights for OT and IoT environments. Customers rely on us to minimize risk and complexity while maximizing operational resilience.

Read More

ENTERPRISE IOT, DEVICES

KORE to Acquire Twilio's IoT Business Unit and Accelerate Progress Towards Building the World's First 'IoT Hyperscaler'

prnewswire | March 28, 2023

KORE Group Holdings, Inc. a global leader in Internet of Things ("IoT") Solutions and worldwide IoT Connectivity-as-a-Service ("IoT CaaS"), announced today the signing of a definitive agreement to acquire Twilio's IoT business unit as part of a growth strategy to provide customers with a unified, seamless approach to launching IoT solutions as the world's leading pure-play IoT provider. As consideration for the acquisition, Twilio (NYSE:TWLO), the customer engagement platform that drives real-time, personalized experiences for today's leading brands, will receive 10 million shares of KORE common stock, which will represent approximately 11.5% of KORE's issued and outstanding shares. "IoT has immense potential to change the world," KORE President and CEO Romil Bahl said. "Whether it is ushering in the Fourth Industrial Revolution, supporting chronic disease management through remote patient monitoring, or optimizing agriculture and supporting sustainability, IoT has many powerful applications. Combining the digital prowess of Twilio's IoT business and the comprehensive connectivity-solutions-analytics portfolio of KORE is a meaningful step toward proliferating IoT and making it more accessible and successful." Continued Bahl, "KORE is thrilled to augment our best-in-class IoT CaaS offering with Twilio's IoT talent and customer portfolio. This acquisition represents exactly the kind of investment we have said we are willing to make to become an exciting top-line growth company, and specifically, we will benefit from the world-class digital experience and developer community Twilio has built for its IoT business." This acquisition will bring to market: A powerful connectivity suite, including best-in-class eSIM technologies with KORE OmniSIM™ and Twilio Super SIM A one-stop shop for building, deploying, managing, and scaling IoT operations throughout the entire lifecycle via award-winning technologies and world-class facilities An accelerated time to market through global, 24/7 customer support and 20 years of IoT experience through KORE and the Twilio IoT team's depth and breadth of digital experience "We are just scratching the surface of the opportunities IoT can unlock for customers," said Twilio's Head of IoT, Taylor Wolfe. "As a global leader in IoT, KORE has the right expertise, vision, and technology to expand the robust offerings that Twilio's world-class IoT team has built. KORE is the right home for Twilio's IoT business, and we look forward to this acquisition increasing scalability and creating even more powerful business outcomes for our customers going forward." Completion of the acquisition transaction is subject to customary closing conditions, including, among other things, the negotiation and execution of certain ancillary agreements. About KORE KORE is a pioneer, leader, and trusted advisor delivering mission critical IoT solutions and services. We empower organizations of all sizes to improve operational and business results by simplifying the complexity of IoT. Our deep IoT knowledge and experience, global reach, purpose-built solutions, and deployment agility accelerate and materially impact our customers' business outcomes.

Read More

ENTERPRISE IOT, DEVICES

Lantronix Announces New X300 Compact Cellular IoT Gateway Solution, Ideal for Mission-Critical Applications

globenewswire | March 29, 2023

Lantronix Inc. a global provider of secure turnkey solutions for the Industrial Internet of Things (IoT) and the Intelligent IT market, today announced its new X300 Compact Gateway IoT Solution. Ideal for secure mission-critical applications, the new X300 Cellular Compact IoT Gateway Solution combines Lantronix’s IoT gateway hardware with a premium services subscription, including centralized device management, integrated cellular data, enhanced device security and expert technical support in an all-in-one package. “At Lantronix, we are committed to providing our customers with turnkey IoT solutions that efficiently solve their connectivity and remote device management challenges while offering expert technical support to ensure a successful deployment,” said Paul Pickle, CEO of Lantronix. “With the new X300 Compact Gateway IoT Solution, our customers can rest assured that they have a reliable, easy-to-manage solution, achieving maximum uptime and data security for mission-critical applications.” According to Berg insights, more than 4.5 million cellular IoT gateways were shipped globally during 2021, a 23 percent increase, at a total market value of approximately $1.15 billion as annual sales grew at a rate of 14 percent as demand recovered following the COVID-19 pandemic. Annual revenues from the sales of cellular IoT gateways is forecasted to grow at a compound annual growth rate (CAGR) of 14 percent to reach $2.18 billion by 2026. The X300 Compact Gateway IoT Solution includes: X300 Gateway, a compact (79mm X 79mm) IoT industrial gateway with suitable hardware interfaces, including a Multi-mode Serial port, an Ethernet LAN port, Wi-Fi® 5, Bluetooth/BLE and Worldwide cellular options, enabling the connection of any type of industrial machine and sensor with any type of network. Services included in the first-year subscription: Free upgrade to ConsoleFlow™ premium cloud-based device management with analytics Connectivity Services global, convenient and scalable cellular data plans Free upgrade to LEVEL 2 Services prompt expert technical support and warranty with advanced hardware replacement Lantronix InfiniShield™ built-in security, including a Secure Element (SE) chip to enable secure boot, secure equipment access and secure communications and to prevent unauthorized access of confidential information. Thenew X300 Gateway IoT Solution will be displayed at ISC West in Las Vegas from March 28–31, 2023, in the Lantronix booth, Number 2097. About Lantronix Lantronix Inc. is a global provider of secure turnkey solutions for the Internet of Things (IoT) and Remote Environment Management (REM), offering Software as a Service (SaaS), connectivity services, engineering services and intelligent hardware. Lantronix enables its customers to accelerate time to market and increase operational up-time and efficiency by providing reliable, secure and connected Intelligent Edge IoT and Remote Management Gateway solutions.

Read More

ENTERPRISE IOT, DEVICES

Nozomi Networks Releases New Content Pack for ISA/IEC 62443 Compliance Reporting and Security Checks

Nozomi Networks | March 24, 2023

Nozomi Networks, the leader in OT and IoT security, today announced a new content pack for organizations working toward ISA/IEC 62443 compliance and certification. The ISA/IEC 62443 Content Pack makes it possible for Nozomi Networks platform users to quickly create custom queries and reports that help confirm their industrial automation and control systems (IACS) meet ISA/IEC 62443 standards. The Content Pack can also be used to assess an IACS’ security posture against ISA/IEC 62443 standards, identifying areas that align with the standards and areas that must be addressed in order to be compliant. “Nozomi Networks’ ISA/IEC 62443 Content Pack technology brings everyone together around a set of reports and queries that helps users access the details they need to reach compliance,” said Chris Grove, Nozomi Networks Director of Cybersecurity Strategy. “Rather than reinvent the wheel each time a customer needs this data, a user can create and distribute a single file where it can then be imported into a Guardian, run as-is or edited, and then re-distributed to the public, across Guardians, or to partners, collaborators, user groups, wherever you want to share it.” The ISA/IEC 62443 series of standards, developed by the International Society of Automation 99 committee (ISA99) and adopted by the International Electrotechnical Commission (IEC), provides a framework to address and mitigate current and future security vulnerabilities in IACSs. The committee draws on the input and knowledge of security experts across the globe to develop consensus standards that are applicable to all industry sectors and critical infrastructure. Nozomi Networks’ Content Packs are owned by Nozomi Networks’ user community and make it possible to export a combination of queries and reports into a single JSON file that can be shared in a completely separate environment. Content Packs do not contain any proprietary information and are safe to share. This allows Nozomi Networks and its customers to quickly share custom reports or queries internally or with the Nozomi Networks user community. The new ISA/IEC 62443 Content Pack covers parts 2-1 (security program best practices) and part 3-3 (definitions for system security requirements and security capabilities levels). About Nozomi Networks Nozomi Networks accelerates digital transformation by protecting the world’s critical infrastructure, industrial and government organizations from cyber threats. Our solution delivers exceptional network and asset visibility, threat detection, and insights for OT and IoT environments. Customers rely on us to minimize risk and complexity while maximizing operational resilience.

Read More

Events