Home > Resources > Articles > IoT security: An IBM position paper

IoT security: An IBM position paper

Coined by Kevin Ashton in 19991, the term Internet of Things (IoT) has come to denote the widespread deployment of sensors and actuators with ubiquitous interconnectivity, potentially to the Internet, to monitor and control physical systems and critical infrastructure such as electrical utilities, transportation systems, Supervisory Control and Data Acquisition (SCADA) systems, factories, and buildings. The goals of the effort have been to gain better visibility and understanding into the operation of these systems and to effect change that would lead to vastly improved efficiencies of operation.

Spotlight

EBV Elektronik

EBV Elektronik, an Avnet (NYSE: AVT) company, was founded in 1969 and is the leading specialist in European semiconductor distribution...

OTHER ARTICLES
Industrial IoT, IoT Security

How Can Businesses Reduce IoT and IIoT Security Risks?

Article | July 12, 2023

The Internet of Things (IoT) and Industrial Internet of Things (IIoT) markets have experienced explosive growth as a result of the digital industrial revolution that followed the COVID-19 epidemic. To fully benefit, however, organizations have had to handle security concerns associated with these revolutionary technologies. Therefore, finding the correct security strategy is crucial for any organization because of the increasing dependency on IoT and IIoT to manage essential business systems. IoT and IIoT can be implemented quickly, but they come with inherent vulnerabilities. This risks businesses from cyberthreats such as device theft, spoofing, denial of service attacks, and data breaches or siphoning. Attacks of this nature adversely affect an organization's operations, finances, safety, and reputation. Many IoT and IIoT devices have passwords hard-coded into their firmware, making it challenging to patch or update security, which is a significant problem. Even when security is deployed on a device, it can usually be bypassed by taking advantage of a variety of known weaknesses. As a result, IT teams may find it challenging to identify an occurrence when IoT or IIoT devices are compromised before affecting systems and data. Mitigating IoT and IIoT Security Risks Separate IIoT and wireless devices from the SCADA or ICS network. Micro-segmentation allows only authorized device connectivity in certain circumstances. Control network access by monitoring what connects and validating each device's security. Demand visibility across all enterprise security networks and devices. This should be centralized so all devices, networks, risks, traffic, and policies can be handled in real-time across production and IT environments. Use an intrusion protection system (IPS) to identify threats and patch IoT and IIoT devices virtually. Counter unexpected attacks with active protection and deception techniques. It's crucial to check that security solutions can grow automatically to meet business requirements before using them. This entails responding to network changes, foreseeing risks and controlling them proactively, and offering real-time threat intelligence.

Read More
Enterprise Iot

OT/IoT Security Superheroes: Tackling the Remote Employee Challenge

Article | May 11, 2023

Organizations around the world are coping with a variety of challenges related to the COVID-19 outbreak. Many companies are struggling to convert their processes from ‘in-office’ to ‘remotely accessible’. And, they’re scrambling to find new ways to “remote” tasks – with “remote” now becoming a verb. For example, we’ve heard from many customers that adding or expanding remote employee access capabilities is a hot topic. One such customer told us that they went from 9% of their workforce working remotely, to 52%. Wow! That’s not only a substantial change to operations and processes – it also directly impacts the company’s security posture. The challenge facing OT security practitioners is daunting. We absolutely must secure the people and systems responsible for saving mankind from an alien super-virus pandemic. But, while the bad guys are lobbing attacks from afar, the good guys are acting behind the scenes like NPCs (non-player characters). They’re bypassing the security systems we developed through years of hard work, like using Gmail or Zoom, or turning off anti-virus, in the name of getting things done.

Read More
Industrial IoT, IoT Security

Key IoT Security Certifications to Boost Your Career in IoT Industry

Article | July 11, 2023

Explore the IoT certifications and grow your skills with the transforming landscape. Including Iot security certifications, this curated list will help you to boost career in the IoT industry. As the Internet of Things continues to expand its reach across industries, the need for robust security measures to safeguard connected devices and data has become paramount. With IoT systems' growing complexity and interconnectivity, organizations seek professionals with specialized knowledge and expertise in IoT security. In response to this demand, various certifications have emerged to validate individuals' skills and provide them with a competitive edge in the IoT industry. In this article, we will explore some key IoT security certifications that can significantly enhance one's career prospects and contribute to IoT solutions' safe and secure deployment. 1. IoT Security Certification and Cybersecurity Intertek’s IoT Security Certification and Cybersecurity provides IoT certification and testing services to validate the security of connected products. Securing endpoints and ecosystems has become crucial with the rapid growth of the Internet of Things. Intertek's total quality assurance approach involves understanding the product, use cases, integration with other systems, and developing a roadmap to ensure compliance with industry standards and regulations. Their IoT security and cybersecurity experts guide clients in choosing the most relevant program for their product and target markets, instilling confidence in product security. Intertek offers services such as the Cyber Assured Program, vulnerability assessments, penetration testing, testing to standards like ANSI/UL 2900 and IEC 62443, connected medical device security, industrial automated control systems security (IEC 62443), and advisory services. Intertek's expertise helps clients address cybersecurity risks and ensure the security of their IoT products. 2. Securing IoT - Build secure IoT solutions: 2-in-1 The Securing IoT: Build Secure IoT Solutions: 2-in-1 course is a comprehensive training program designed to help IoT product designers, IoT product managers, IT security professionals, and security engineers build secure and robust Internet of Things systems. The course consists of 'Fundamentals of IoT Security' and 'Security Engineering for the IoT.' The learners will delve into IoT security architectures, regulations, and standards. Privacy concerns and Privacy by Design principles and practical examples of conducting Privacy Impact Assessments are addressed. Cryptographic solutions, identity and access management, and key management solutions are explored, along with the cloud's secure connectivity, processing, and storage of data. By the end of the program, participants will have the skills to identify threats to their organization's data and IoT systems, employing design techniques, applied cryptography, and secure cloud connectivity for robust security. 3. IOT Security Professional (ICIP) The IoT Security Professional (ICIP) program offered by ISAC is designed to provide participants with a comprehensive understanding of cyberattacks on IoT and SCADA systems. The training focuses on offensive testing techniques to better understand and combat hack and malware attacks. Participants will learn about discovering sensitive devices, network hacking via IoT, hacking smart devices, and controlling SCADA systems. The program includes case studies on malware like WannaCry and Crash Override and defensive measures like threat intelligence and endpoint protection. The course suits security researchers, forensic investigators, security teams, law enforcement agencies, and military personnel. Successful completion of the program grants a Clean Exit Professional Ethics Certification and inclusion in the National Security Database. 4. Internet of Things Security Expert Training The Internet of Things Security Expert course offered by Cognixia is a comprehensive training program designed for professionals seeking to enhance their knowledge of IoT security. The course covers various IoT security platforms and provides hands-on training with relevant tools. It consists of three major modules: python, advanced IoT training and certification, and IoT Security. The Python module familiarizes candidates with the versatile programming language and its applications in IoT development. The Advanced IoT Training and Certification module covers IoT ecosystems' architecture, development, deployment, and security with real-life case studies. The IoT Security module focuses on securing IoT devices, covering architecture, practical attacks, vulnerability disclosure, and securing connected products. The course offers lifetime access to learning materials and round-the-clock technical support. 5. IOT Analyst Certification One of the online IoT certification courses, the IT Analyst Certification is a 12-month program that focuses on combining IoT with Analytics to unlock valuable data from connected IoT devices. The course comprises three courses covering data acquisition, exploratory analysis, cleaning, and final analysis for IoT systems. It also teaches how advanced analytics and machine learning algorithms can be applied to build complex IoT solutions. The program is suitable for students from all backgrounds, and no prior knowledge of analytics or IoT is required, although basic quantitative skills are beneficial. After completing the curriculum and passing the certification test, students receive the IOT Analyst Certification, enabling them to process and analyze data from IoT sensors and become proficient in IoT analytics. The certification opens up opportunities in the fast-growing Big Data and Analytics industry, where IoT analytics is widely applied to predict future technology trends. 6. IOT Professional Certification The IOT Professional Certification offered by Jigsaw Academy is a comprehensive program designed to help individuals master the implementation of IoT using Arduino. This 12-month online iot certification course uses the Arduino platform to build IoT solutions from scratch. The program consists of four courses covering various IoT aspects, including sensor-connected devices and gateways. Students will engage in hands-on exercises, real-life case studies, and a capstone project to apply their knowledge effectively. Upon completion, students receive a certification that validates their skills in building and applying IoT solutions, setting up IoT Cloud for data storage and analysis, and proficiency in Arduino programming language. The IOT Professional Certification equips individuals with the necessary skills and knowledge to excel in the high-demand field of IoT and opens up better job prospects. 7. IoT and its Applications TCS iON Digital Learning Hub offers the 'IoT and its Applications' certificate course, providing learners with a comprehensive understanding of the fundamentals of the Internet of Things. The course spans 5 to 6 months, delivered in English through digital lectures, e-learning resources, and community-based virtual classrooms. Through industry assignments and expert-led instruction, participants gain theoretical and practical insights into IoT applications. Upon completion, learners receive a verifiable digital certificate and gain industry-level skills required for test engineers or computer programmers. This course helps learners grasp IoT theories and practical applications, offering valuable career opportunities. Conclusion In an era where the Internet of Things is transforming industries and revolutionizing the way, we interact with technology, ensuring the security of IoT systems has become a critical imperative. The certifications discussed in this article represent a selection of key credentials available to professionals seeking to boost their careers in the IoT industry. By obtaining these certifications, individuals can validate their expertise in IoT security, demonstrating their commitment to upholding best practices and safeguarding the integrity of connected devices and data. As the demand for IoT security professionals continues to rise, these certifications will serve as powerful assets, opening doors to exciting opportunities and positioning individuals as trusted experts in the ever-evolving field of IoT security. By investing in these certifications, professionals can take significant strides toward advancing their careers and contributing to the secure and responsible growth of the IoT ecosystem.

Read More

Hitachi, Infineon promote IoT tech for viral detection

Article | April 16, 2020

Tech companies are stepping up Internet of Things technologies to protect against COVID-19 and future viruses by using LiDAR and infrared cameras to detect a person’s body temperature from a distance or even handwashing. Keeping the data secure in such detection is also going to be a challenge. One approach is to put a chip inside an IoT device when it is manufactured to enable strong authentication and secure communication, mainly to guard against device counterfeiting. Hitachi Vantara has touted forward looking infrared cameras (FLIR) cameras to detect the temperature of a person from a distance. That way a passenger on a train or a worker or a customer in a store can be non-intrusively screened, according to a blog from Mark Jules, global vice president of smart spaces and video intelligence.

Read More
Industrial IoT, IoT Security

Key IoT Security Certifications to Boost Your Career in IoT Industry

Article | July 12, 2023

The Internet of Things (IoT) and Industrial Internet of Things (IIoT) markets have experienced explosive growth as a result of the digital industrial revolution that followed the COVID-19 epidemic. To fully benefit, however, organizations have had to handle security concerns associated with these revolutionary technologies. Therefore, finding the correct security strategy is crucial for any organization because of the increasing dependency on IoT and IIoT to manage essential business systems. IoT and IIoT can be implemented quickly, but they come with inherent vulnerabilities. This risks businesses from cyberthreats such as device theft, spoofing, denial of service attacks, and data breaches or siphoning. Attacks of this nature adversely affect an organization's operations, finances, safety, and reputation. Many IoT and IIoT devices have passwords hard-coded into their firmware, making it challenging to patch or update security, which is a significant problem. Even when security is deployed on a device, it can usually be bypassed by taking advantage of a variety of known weaknesses. As a result, IT teams may find it challenging to identify an occurrence when IoT or IIoT devices are compromised before affecting systems and data. Mitigating IoT and IIoT Security Risks Separate IIoT and wireless devices from the SCADA or ICS network. Micro-segmentation allows only authorized device connectivity in certain circumstances. Control network access by monitoring what connects and validating each device's security. Demand visibility across all enterprise security networks and devices. This should be centralized so all devices, networks, risks, traffic, and policies can be handled in real-time across production and IT environments. Use an intrusion protection system (IPS) to identify threats and patch IoT and IIoT devices virtually. Counter unexpected attacks with active protection and deception techniques. It's crucial to check that security solutions can grow automatically to meet business requirements before using them. This entails responding to network changes, foreseeing risks and controlling them proactively, and offering real-time threat intelligence.

Read More
Enterprise Iot

Understanding IoT Data Protocols: Why Do They Matter for IoT Data?

Article | May 11, 2023

Organizations around the world are coping with a variety of challenges related to the COVID-19 outbreak. Many companies are struggling to convert their processes from ‘in-office’ to ‘remotely accessible’. And, they’re scrambling to find new ways to “remote” tasks – with “remote” now becoming a verb. For example, we’ve heard from many customers that adding or expanding remote employee access capabilities is a hot topic. One such customer told us that they went from 9% of their workforce working remotely, to 52%. Wow! That’s not only a substantial change to operations and processes – it also directly impacts the company’s security posture. The challenge facing OT security practitioners is daunting. We absolutely must secure the people and systems responsible for saving mankind from an alien super-virus pandemic. But, while the bad guys are lobbing attacks from afar, the good guys are acting behind the scenes like NPCs (non-player characters). They’re bypassing the security systems we developed through years of hard work, like using Gmail or Zoom, or turning off anti-virus, in the name of getting things done.

Read More
Industrial IoT, IoT Security

Top 10 Tools for IoT Security Testing: Mitigating Cyber Threats

Article | July 11, 2023

Explore the IoT certifications and grow your skills with the transforming landscape. Including Iot security certifications, this curated list will help you to boost career in the IoT industry. As the Internet of Things continues to expand its reach across industries, the need for robust security measures to safeguard connected devices and data has become paramount. With IoT systems' growing complexity and interconnectivity, organizations seek professionals with specialized knowledge and expertise in IoT security. In response to this demand, various certifications have emerged to validate individuals' skills and provide them with a competitive edge in the IoT industry. In this article, we will explore some key IoT security certifications that can significantly enhance one's career prospects and contribute to IoT solutions' safe and secure deployment. 1. IoT Security Certification and Cybersecurity Intertek’s IoT Security Certification and Cybersecurity provides IoT certification and testing services to validate the security of connected products. Securing endpoints and ecosystems has become crucial with the rapid growth of the Internet of Things. Intertek's total quality assurance approach involves understanding the product, use cases, integration with other systems, and developing a roadmap to ensure compliance with industry standards and regulations. Their IoT security and cybersecurity experts guide clients in choosing the most relevant program for their product and target markets, instilling confidence in product security. Intertek offers services such as the Cyber Assured Program, vulnerability assessments, penetration testing, testing to standards like ANSI/UL 2900 and IEC 62443, connected medical device security, industrial automated control systems security (IEC 62443), and advisory services. Intertek's expertise helps clients address cybersecurity risks and ensure the security of their IoT products. 2. Securing IoT - Build secure IoT solutions: 2-in-1 The Securing IoT: Build Secure IoT Solutions: 2-in-1 course is a comprehensive training program designed to help IoT product designers, IoT product managers, IT security professionals, and security engineers build secure and robust Internet of Things systems. The course consists of 'Fundamentals of IoT Security' and 'Security Engineering for the IoT.' The learners will delve into IoT security architectures, regulations, and standards. Privacy concerns and Privacy by Design principles and practical examples of conducting Privacy Impact Assessments are addressed. Cryptographic solutions, identity and access management, and key management solutions are explored, along with the cloud's secure connectivity, processing, and storage of data. By the end of the program, participants will have the skills to identify threats to their organization's data and IoT systems, employing design techniques, applied cryptography, and secure cloud connectivity for robust security. 3. IOT Security Professional (ICIP) The IoT Security Professional (ICIP) program offered by ISAC is designed to provide participants with a comprehensive understanding of cyberattacks on IoT and SCADA systems. The training focuses on offensive testing techniques to better understand and combat hack and malware attacks. Participants will learn about discovering sensitive devices, network hacking via IoT, hacking smart devices, and controlling SCADA systems. The program includes case studies on malware like WannaCry and Crash Override and defensive measures like threat intelligence and endpoint protection. The course suits security researchers, forensic investigators, security teams, law enforcement agencies, and military personnel. Successful completion of the program grants a Clean Exit Professional Ethics Certification and inclusion in the National Security Database. 4. Internet of Things Security Expert Training The Internet of Things Security Expert course offered by Cognixia is a comprehensive training program designed for professionals seeking to enhance their knowledge of IoT security. The course covers various IoT security platforms and provides hands-on training with relevant tools. It consists of three major modules: python, advanced IoT training and certification, and IoT Security. The Python module familiarizes candidates with the versatile programming language and its applications in IoT development. The Advanced IoT Training and Certification module covers IoT ecosystems' architecture, development, deployment, and security with real-life case studies. The IoT Security module focuses on securing IoT devices, covering architecture, practical attacks, vulnerability disclosure, and securing connected products. The course offers lifetime access to learning materials and round-the-clock technical support. 5. IOT Analyst Certification One of the online IoT certification courses, the IT Analyst Certification is a 12-month program that focuses on combining IoT with Analytics to unlock valuable data from connected IoT devices. The course comprises three courses covering data acquisition, exploratory analysis, cleaning, and final analysis for IoT systems. It also teaches how advanced analytics and machine learning algorithms can be applied to build complex IoT solutions. The program is suitable for students from all backgrounds, and no prior knowledge of analytics or IoT is required, although basic quantitative skills are beneficial. After completing the curriculum and passing the certification test, students receive the IOT Analyst Certification, enabling them to process and analyze data from IoT sensors and become proficient in IoT analytics. The certification opens up opportunities in the fast-growing Big Data and Analytics industry, where IoT analytics is widely applied to predict future technology trends. 6. IOT Professional Certification The IOT Professional Certification offered by Jigsaw Academy is a comprehensive program designed to help individuals master the implementation of IoT using Arduino. This 12-month online iot certification course uses the Arduino platform to build IoT solutions from scratch. The program consists of four courses covering various IoT aspects, including sensor-connected devices and gateways. Students will engage in hands-on exercises, real-life case studies, and a capstone project to apply their knowledge effectively. Upon completion, students receive a certification that validates their skills in building and applying IoT solutions, setting up IoT Cloud for data storage and analysis, and proficiency in Arduino programming language. The IOT Professional Certification equips individuals with the necessary skills and knowledge to excel in the high-demand field of IoT and opens up better job prospects. 7. IoT and its Applications TCS iON Digital Learning Hub offers the 'IoT and its Applications' certificate course, providing learners with a comprehensive understanding of the fundamentals of the Internet of Things. The course spans 5 to 6 months, delivered in English through digital lectures, e-learning resources, and community-based virtual classrooms. Through industry assignments and expert-led instruction, participants gain theoretical and practical insights into IoT applications. Upon completion, learners receive a verifiable digital certificate and gain industry-level skills required for test engineers or computer programmers. This course helps learners grasp IoT theories and practical applications, offering valuable career opportunities. Conclusion In an era where the Internet of Things is transforming industries and revolutionizing the way, we interact with technology, ensuring the security of IoT systems has become a critical imperative. The certifications discussed in this article represent a selection of key credentials available to professionals seeking to boost their careers in the IoT industry. By obtaining these certifications, individuals can validate their expertise in IoT security, demonstrating their commitment to upholding best practices and safeguarding the integrity of connected devices and data. As the demand for IoT security professionals continues to rise, these certifications will serve as powerful assets, opening doors to exciting opportunities and positioning individuals as trusted experts in the ever-evolving field of IoT security. By investing in these certifications, professionals can take significant strides toward advancing their careers and contributing to the secure and responsible growth of the IoT ecosystem.

Read More

Hitachi, Infineon promote IoT tech for viral detection

Article | April 16, 2020

Tech companies are stepping up Internet of Things technologies to protect against COVID-19 and future viruses by using LiDAR and infrared cameras to detect a person’s body temperature from a distance or even handwashing. Keeping the data secure in such detection is also going to be a challenge. One approach is to put a chip inside an IoT device when it is manufactured to enable strong authentication and secure communication, mainly to guard against device counterfeiting. Hitachi Vantara has touted forward looking infrared cameras (FLIR) cameras to detect the temperature of a person from a distance. That way a passenger on a train or a worker or a customer in a store can be non-intrusively screened, according to a blog from Mark Jules, global vice president of smart spaces and video intelligence.

Read More
MORE ARTICLES

Spotlight

EBV Elektronik

EBV Elektronik, an Avnet (NYSE: AVT) company, was founded in 1969 and is the leading specialist in European semiconductor distribution...

Related News

Industrial IoT

Tuya Smart Delivers IoT Best Practice Using Amazon Aurora, Leads the Direction of Cloud Database Innovation Use Cases with Amazon Web Services

Tuya Smart | January 24, 2024

Tuya Smart, the global IoT developer service provider, has delivered its Best Practices in using Amazon Aurora at IoT industry. Amazon Aurora is a relational database management system (RDBMS) built for the cloud with full MySQL and PostgreSQL compatibility. Tuya and Amazon Web Services (AWS) built a solid basis of collaboration in database use cases exploration while also delivering smooth operation of billions of devices requiring high concurrency and low latency. Tuya and AWS: Building a benchmark for database implementation practice Tuya is a leading technology company focused on making our lives smarter. Tuya does this by offering a cloud platform that connects a range of devices via the IoT. By building interconnectivity standards, Tuya bridges the intelligent needs of brands, OEMs, developers, and retail chains across a broad range of smart devices and industries. Tuya's solutions enable partners and customers by improving the value of their products while making consumers' lives more convenient through the application of technology. As of September 30, 2023, the Tuya IoT Developer Platform has accumulated over 909,000 registered developers from over 200 countries and regions, covering industries including real estate, hospitality, residential, industry, agriculture, etc. The greater the breadth of business coverage, the more advanced technological support required. Tuya faces high-frequency reads and writes as well as enormous data storage challenges from billion-level online devices. Meanwhile, due to the commercial scenarios involving smart homes and smart industries, Tuya's operating response demands low latency in order to deliver a smoother user experience. Furthermore, Tuya's quick expansion and regular business changes have posed significant challenges to its operation and maintenance management. Tuya selected Amazon Aurora as core database engine for its unparalleled performance and availability at global scale. How does Tuya specifically leverage the Amazon Aurora database? Tuya currently manages billions of real-time online devices and can keep cloud message processing response times under 10 milliseconds. However, billions online devices provide a challenge. During holidays, there will be peak traffic volume, with tens of millions of devices going online and offline virtually simultaneously. Tuya used Amazon Aurora to construct a data storage solution to solve the main problem of rapid increase in short-term traffic, and to fully utilize resources. Aurora's design, which separates compute and storage and low-latency replication functionality, improves system throughput by enhancing the effect of read-write separation. Aurora provides up to 15 read replicas, setting the groundwork for Tuya's read flexibility development. At the same time, Tuya has integrated Aurora Serverless, which includes seconds-level elastic expansion and contraction, allowing Tuya to handle extremely heavy business traffic smoothly. Tuya's customers are located throughout more than 200 nations and regions, and they deal with widespread access to IoT data. Different countries and regions have different regulations on data compliance, such as GDPR and local PII. Tuya needs to adhere to each region's data security compliance regulations. As Tuya's primary business data storage provider, Amazon Aurora was among the first in the public cloud sector to enable physical encryption for database products, which significantly decreased the cost of Tuya's security compliance transformation and gave Tuya excellent basic security guarantees. In addition, Tuya is continuously testing out additional new innovation unique to Aurora, such as Enhanced Binlog, zero-ETL, and Limitless Database. Aurora's ongoing investment in innovative technologies provides more opportunities for Tuya to expand its business. Additionally, based on Tuya's comprehensive IoT developer platform architecture, both parties have collaborated to enhance Tuya IoT applications performance indicators like stability, low latency, scalability, and security in the real-world application of databases, revealing more potential and possibilities and enabling the IoT. Tuya and AWS: Continuously promoting the evolution of cloud experience Data-driven approaches will usher in a new era of innovation in tandem with the swift advancement of data applications. At this year's re:Invent conference, Peter DeSantis, Senior Vice President of AWS, reviewed the relational database's development history in great detail. In 2014, AWS created Aurora based on log architecture. In 2018, the release of Aurora Serverless allowed for seamless scaling of database resources through virtualization technology. This year, AWS announced the launch of the Amazon Aurora Limitless Database, which automatically scales to millions of write transactions per second well beyond current limits of a single PostgreSQL instance. It is apparent from Amazon Aurora's development history that AWS has always been dedicated to innovation. Customers and partners from a range of industries actively utilizes AWS to enable rapid innovation in a variety of ways, while also working together to enhance the cloud experience. Similar to how Tuya and AWS work together, Tuya's effective and user-friendly IoT developer platform and rich and varied IoT solutions have built a significant lighthouse, embracing the Amazon Aurora's innovation and accelerated the process of building a more secure and reliable IoT database use case. Amazon Aurora VP Yan Leshinsky said, "Amazon Aurora is the fastest growing service in the history of AWS and is trusted by hundreds of thousands of customers. We innovate by working backwards from customers' needs, and we appreciate the feedback that Tuya has shared. We remain committed in developing new Aurora features and capabilities so all customers can accelerate their applications' capabilities and business growth by using Aurora." "Tuya has always committed to strengthening advanced and valuable innovations, while offering open and neutral ecosystem assistance for global partners. We provide our developers with enhanced operational and maintenance control, adaptable data storage options, superior product experience, and a global business layout by utilizing the Amazon Aurora database. We will continue to work with AWS to benefit the world in the future in areas including technology, ecosystems, and cloud computing, helping customers achieve commercial success." said Eva Na, Vice President of Marketing and Strategic Cooperation, and CMO of Tuya Smart. Enhancing the partnership with AWS, Tuya delivered IoT best practice using Amazon Aurora database, giving the industry's growth additional impetus. Tuya will maintain its open and neutral stance going forward, collaborating with cloud service providers like AWS to offer global developers a more secure, reliable, and productive cloud environment, thereby advancing the innovation and development of the entire industry.

Read More

Enterprise Iot

Nozomi Networks Delivers Industry's First Multi-Spectrum Wireless Security Sensor for Global OT and IoT Environments

Nozomi Networks | January 25, 2024

Nozomi Networks Inc., the leader in OT and IoT security, today introduced Guardian Air™, the industry's only wireless spectrum sensor purpose-built for OT and IoT environments worldwide. With 80 percent of new IoT deployments wirelessly connected, wireless is quickly becoming a preferred network. The explosion of wirelessly connected devices increases potential access points and exploitation of networks. This puts critical infrastructure at risk of cyberattacks and disruptions to operations. Guardian Air provides much-needed visibility into wirelessly enabled devices which until now were only detected once connected to the wired network. Guardian Air monitors several prominent wireless frequencies, not just Bluetooth and Wi-Fi, to provide security teams with immediate visibility of connected sensors, devices, laptops and cell phones. With the addition of Guardian Air, customers have a comprehensive network solution all in one integrated platform. "Nozomi Networks has once again innovated to address an unmet need for wireless-level monitoring in OT and IoT environments," said Danielle VanZandt, an industry manager for commercial and public security research at Frost & Sullivan. "From smart manufacturing to digital medicine, to building automation, to modern oil field production and more, today industrial organizations are relying on billions of wireless devices to speed production and time to market. Guardian Air gives IT security professionals and OT operators the visibility they need to get a firm handle on wireless risk management and response." With Guardian Air, IT security professionals and OT operators can: Continuously monitor prominent wireless frequency technologies used in OT and IoT environments including Bluetooth, Wi-Fi, cellular, LoRaWAN, Zigbee, GPS, drone RF protocols, WirelessHART and more, Immediately detect wirelessly connected assets and gain asset information to quickly address unauthorized installations, Detect wireless-specific threats, including brute force attacks, spoofing, and bluejacking – with the added ability to determine the location of the devices performing the attacks, Seamlessly integrate wireless data into a single OT & IoT security platform that unifies asset visibility from the endpoint and across wired and wireless networks. "Wireless is fundamentally changing the way industrial organizations operate. Unfortunately, it also massively expands the potential attack surface," said Nozomi Networks Co-founder and Chief Product Officer Andrea Carcano. "Guardian Air solves this problem by giving customers the accurate visibility they need at the wireless level to minimize risk while maximizing resiliency. Because Guardian Air integrates easily into the Nozomi Networks Vantage platform, customers can combine network, endpoint and wireless for the greatest visibility, threat detection and AI-powered analysis for real-time security management and remediation across the entire attack surface." The Nozomi Guardian Air wireless sensor will be available this spring from Nozomi Networks and its extensive global network of channel partners. About Nozomi Networks Nozomi Networks accelerates digital transformation by protecting the world's critical infrastructure, industrial and government organizations from cyber threats. Our solution delivers exceptional network and asset visibility, threat detection, and insights for OT and IoT environments. Customers rely on us to minimize risk and complexity while maximizing operational resilience. www.nozominetworks.com

Read More

IoT Security

AppViewX Digital Trust Platform Named IoT Security Product of the Year

AppViewX | January 12, 2024

AppViewX, the leader in automated machine identity management (MIM) and application infrastructure security, today announced the AppViewX Digital Trust Platform has been named IoT Security Product of the Year in the 8th annual IoT Breakthrough awards program, which showcases technologies and companies that drive innovation and exemplify the best in IoT technology solutions across the globe. IoT Breakthrough is a leading market intelligence organization that recognizes the top companies, technologies and products in the global IoT market. The mission of the IoT Breakthrough Awards program is to recognize the innovators, leaders and visionaries from around the globe in a range of IoT categories, including Industrial and Enterprise IoT, Smart City technology, Connected Home and Home Automation, Connected Car, and many more. This year's program attracted nominations from companies all over the world. “Unmanaged machine identities for IoT devices can create critical security vulnerabilities, but for most organizations discovering, maintaining visibility into and controlling them has become manually unfeasible,” said Gregory Webb, CEO of AppViewX. “The AppViewX Digital Trust Platform automates IoT identity management at scale across the largest, most complex and distributed customer environments, allowing customers to achieve significantly stronger security posture and meet compliance requirements.” All IoT Breakthrough Award nominations were evaluated by an independent panel of experts within the IoT industry, with the winning products and companies selected based on a variety of criteria, including most innovative and technologically advanced products and services. About AppViewX Digital Trust Platform Out of the box, AppViewX provides instant value to customers by discovering all certificates across complex enterprise environments, building and maintaining inventories, provisioning both private and public trust certificates from any CA, alerting to expiring certificates and fully automating renewals and revocation to eliminate outages and security weaknesses across machines, applications, services, and security infrastructure. About AppViewX AppViewX is trusted by the world’s leading organizations to reduce risk, ensure compliance, and increase visibility through automated machine identity management and application infrastructure security and orchestration. The AppViewX platform provides complete certificate lifecycle management and PKI-as-a-Service using streamlined workflows to prevent outages, reduce security incidents and enable crypto-agility. Fortune 1000 companies, including six of the top ten global commercial banks, five of the top ten global media companies, and five of the top ten managed healthcare providers rely on AppViewX to automate NetOps, SecOps, and DevOps. AppViewX is headquartered in New York with offices in the U.K., Australia and three development centers of excellence in India. For more information, visit https://www.appviewx.com and follow us on LinkedIn and Twitter.

Read More

Industrial IoT

Tuya Smart Delivers IoT Best Practice Using Amazon Aurora, Leads the Direction of Cloud Database Innovation Use Cases with Amazon Web Services

Tuya Smart | January 24, 2024

Tuya Smart, the global IoT developer service provider, has delivered its Best Practices in using Amazon Aurora at IoT industry. Amazon Aurora is a relational database management system (RDBMS) built for the cloud with full MySQL and PostgreSQL compatibility. Tuya and Amazon Web Services (AWS) built a solid basis of collaboration in database use cases exploration while also delivering smooth operation of billions of devices requiring high concurrency and low latency. Tuya and AWS: Building a benchmark for database implementation practice Tuya is a leading technology company focused on making our lives smarter. Tuya does this by offering a cloud platform that connects a range of devices via the IoT. By building interconnectivity standards, Tuya bridges the intelligent needs of brands, OEMs, developers, and retail chains across a broad range of smart devices and industries. Tuya's solutions enable partners and customers by improving the value of their products while making consumers' lives more convenient through the application of technology. As of September 30, 2023, the Tuya IoT Developer Platform has accumulated over 909,000 registered developers from over 200 countries and regions, covering industries including real estate, hospitality, residential, industry, agriculture, etc. The greater the breadth of business coverage, the more advanced technological support required. Tuya faces high-frequency reads and writes as well as enormous data storage challenges from billion-level online devices. Meanwhile, due to the commercial scenarios involving smart homes and smart industries, Tuya's operating response demands low latency in order to deliver a smoother user experience. Furthermore, Tuya's quick expansion and regular business changes have posed significant challenges to its operation and maintenance management. Tuya selected Amazon Aurora as core database engine for its unparalleled performance and availability at global scale. How does Tuya specifically leverage the Amazon Aurora database? Tuya currently manages billions of real-time online devices and can keep cloud message processing response times under 10 milliseconds. However, billions online devices provide a challenge. During holidays, there will be peak traffic volume, with tens of millions of devices going online and offline virtually simultaneously. Tuya used Amazon Aurora to construct a data storage solution to solve the main problem of rapid increase in short-term traffic, and to fully utilize resources. Aurora's design, which separates compute and storage and low-latency replication functionality, improves system throughput by enhancing the effect of read-write separation. Aurora provides up to 15 read replicas, setting the groundwork for Tuya's read flexibility development. At the same time, Tuya has integrated Aurora Serverless, which includes seconds-level elastic expansion and contraction, allowing Tuya to handle extremely heavy business traffic smoothly. Tuya's customers are located throughout more than 200 nations and regions, and they deal with widespread access to IoT data. Different countries and regions have different regulations on data compliance, such as GDPR and local PII. Tuya needs to adhere to each region's data security compliance regulations. As Tuya's primary business data storage provider, Amazon Aurora was among the first in the public cloud sector to enable physical encryption for database products, which significantly decreased the cost of Tuya's security compliance transformation and gave Tuya excellent basic security guarantees. In addition, Tuya is continuously testing out additional new innovation unique to Aurora, such as Enhanced Binlog, zero-ETL, and Limitless Database. Aurora's ongoing investment in innovative technologies provides more opportunities for Tuya to expand its business. Additionally, based on Tuya's comprehensive IoT developer platform architecture, both parties have collaborated to enhance Tuya IoT applications performance indicators like stability, low latency, scalability, and security in the real-world application of databases, revealing more potential and possibilities and enabling the IoT. Tuya and AWS: Continuously promoting the evolution of cloud experience Data-driven approaches will usher in a new era of innovation in tandem with the swift advancement of data applications. At this year's re:Invent conference, Peter DeSantis, Senior Vice President of AWS, reviewed the relational database's development history in great detail. In 2014, AWS created Aurora based on log architecture. In 2018, the release of Aurora Serverless allowed for seamless scaling of database resources through virtualization technology. This year, AWS announced the launch of the Amazon Aurora Limitless Database, which automatically scales to millions of write transactions per second well beyond current limits of a single PostgreSQL instance. It is apparent from Amazon Aurora's development history that AWS has always been dedicated to innovation. Customers and partners from a range of industries actively utilizes AWS to enable rapid innovation in a variety of ways, while also working together to enhance the cloud experience. Similar to how Tuya and AWS work together, Tuya's effective and user-friendly IoT developer platform and rich and varied IoT solutions have built a significant lighthouse, embracing the Amazon Aurora's innovation and accelerated the process of building a more secure and reliable IoT database use case. Amazon Aurora VP Yan Leshinsky said, "Amazon Aurora is the fastest growing service in the history of AWS and is trusted by hundreds of thousands of customers. We innovate by working backwards from customers' needs, and we appreciate the feedback that Tuya has shared. We remain committed in developing new Aurora features and capabilities so all customers can accelerate their applications' capabilities and business growth by using Aurora." "Tuya has always committed to strengthening advanced and valuable innovations, while offering open and neutral ecosystem assistance for global partners. We provide our developers with enhanced operational and maintenance control, adaptable data storage options, superior product experience, and a global business layout by utilizing the Amazon Aurora database. We will continue to work with AWS to benefit the world in the future in areas including technology, ecosystems, and cloud computing, helping customers achieve commercial success." said Eva Na, Vice President of Marketing and Strategic Cooperation, and CMO of Tuya Smart. Enhancing the partnership with AWS, Tuya delivered IoT best practice using Amazon Aurora database, giving the industry's growth additional impetus. Tuya will maintain its open and neutral stance going forward, collaborating with cloud service providers like AWS to offer global developers a more secure, reliable, and productive cloud environment, thereby advancing the innovation and development of the entire industry.

Read More

Enterprise Iot

Nozomi Networks Delivers Industry's First Multi-Spectrum Wireless Security Sensor for Global OT and IoT Environments

Nozomi Networks | January 25, 2024

Nozomi Networks Inc., the leader in OT and IoT security, today introduced Guardian Air™, the industry's only wireless spectrum sensor purpose-built for OT and IoT environments worldwide. With 80 percent of new IoT deployments wirelessly connected, wireless is quickly becoming a preferred network. The explosion of wirelessly connected devices increases potential access points and exploitation of networks. This puts critical infrastructure at risk of cyberattacks and disruptions to operations. Guardian Air provides much-needed visibility into wirelessly enabled devices which until now were only detected once connected to the wired network. Guardian Air monitors several prominent wireless frequencies, not just Bluetooth and Wi-Fi, to provide security teams with immediate visibility of connected sensors, devices, laptops and cell phones. With the addition of Guardian Air, customers have a comprehensive network solution all in one integrated platform. "Nozomi Networks has once again innovated to address an unmet need for wireless-level monitoring in OT and IoT environments," said Danielle VanZandt, an industry manager for commercial and public security research at Frost & Sullivan. "From smart manufacturing to digital medicine, to building automation, to modern oil field production and more, today industrial organizations are relying on billions of wireless devices to speed production and time to market. Guardian Air gives IT security professionals and OT operators the visibility they need to get a firm handle on wireless risk management and response." With Guardian Air, IT security professionals and OT operators can: Continuously monitor prominent wireless frequency technologies used in OT and IoT environments including Bluetooth, Wi-Fi, cellular, LoRaWAN, Zigbee, GPS, drone RF protocols, WirelessHART and more, Immediately detect wirelessly connected assets and gain asset information to quickly address unauthorized installations, Detect wireless-specific threats, including brute force attacks, spoofing, and bluejacking – with the added ability to determine the location of the devices performing the attacks, Seamlessly integrate wireless data into a single OT & IoT security platform that unifies asset visibility from the endpoint and across wired and wireless networks. "Wireless is fundamentally changing the way industrial organizations operate. Unfortunately, it also massively expands the potential attack surface," said Nozomi Networks Co-founder and Chief Product Officer Andrea Carcano. "Guardian Air solves this problem by giving customers the accurate visibility they need at the wireless level to minimize risk while maximizing resiliency. Because Guardian Air integrates easily into the Nozomi Networks Vantage platform, customers can combine network, endpoint and wireless for the greatest visibility, threat detection and AI-powered analysis for real-time security management and remediation across the entire attack surface." The Nozomi Guardian Air wireless sensor will be available this spring from Nozomi Networks and its extensive global network of channel partners. About Nozomi Networks Nozomi Networks accelerates digital transformation by protecting the world's critical infrastructure, industrial and government organizations from cyber threats. Our solution delivers exceptional network and asset visibility, threat detection, and insights for OT and IoT environments. Customers rely on us to minimize risk and complexity while maximizing operational resilience. www.nozominetworks.com

Read More

IoT Security

AppViewX Digital Trust Platform Named IoT Security Product of the Year

AppViewX | January 12, 2024

AppViewX, the leader in automated machine identity management (MIM) and application infrastructure security, today announced the AppViewX Digital Trust Platform has been named IoT Security Product of the Year in the 8th annual IoT Breakthrough awards program, which showcases technologies and companies that drive innovation and exemplify the best in IoT technology solutions across the globe. IoT Breakthrough is a leading market intelligence organization that recognizes the top companies, technologies and products in the global IoT market. The mission of the IoT Breakthrough Awards program is to recognize the innovators, leaders and visionaries from around the globe in a range of IoT categories, including Industrial and Enterprise IoT, Smart City technology, Connected Home and Home Automation, Connected Car, and many more. This year's program attracted nominations from companies all over the world. “Unmanaged machine identities for IoT devices can create critical security vulnerabilities, but for most organizations discovering, maintaining visibility into and controlling them has become manually unfeasible,” said Gregory Webb, CEO of AppViewX. “The AppViewX Digital Trust Platform automates IoT identity management at scale across the largest, most complex and distributed customer environments, allowing customers to achieve significantly stronger security posture and meet compliance requirements.” All IoT Breakthrough Award nominations were evaluated by an independent panel of experts within the IoT industry, with the winning products and companies selected based on a variety of criteria, including most innovative and technologically advanced products and services. About AppViewX Digital Trust Platform Out of the box, AppViewX provides instant value to customers by discovering all certificates across complex enterprise environments, building and maintaining inventories, provisioning both private and public trust certificates from any CA, alerting to expiring certificates and fully automating renewals and revocation to eliminate outages and security weaknesses across machines, applications, services, and security infrastructure. About AppViewX AppViewX is trusted by the world’s leading organizations to reduce risk, ensure compliance, and increase visibility through automated machine identity management and application infrastructure security and orchestration. The AppViewX platform provides complete certificate lifecycle management and PKI-as-a-Service using streamlined workflows to prevent outages, reduce security incidents and enable crypto-agility. Fortune 1000 companies, including six of the top ten global commercial banks, five of the top ten global media companies, and five of the top ten managed healthcare providers rely on AppViewX to automate NetOps, SecOps, and DevOps. AppViewX is headquartered in New York with offices in the U.K., Australia and three development centers of excellence in India. For more information, visit https://www.appviewx.com and follow us on LinkedIn and Twitter.

Read More

Events