NSTAC Report to the President on the Internet of Things

IoT Security

Article | July 5, 2023

IoT has undeniably become the massive growth propellant for modern-day business. Enterprises employ intelligent systems to improve production in factories, and reduce costs, build industrial automation systems to replace human assignments, monitor and reduce energy; and develop autonomous transportation to enhance driver safety. Inside these embedded systems are sensors that rapidly transmit data that must be immediately captured, processed, and acted upon. Traditional embedded database solutions don't understand and meet the complex needs of IoT devices when it comes to processing and managing data. IoT edge database solutions that can understand the constant data stream from sensors enable devices to make crucial decisions in milliseconds. Real-time Edge Data Processing Enterprisers and business owners prefer scalable edge data management solutions to deploy hundreds of IoT devices so that each device can manage, collect, and analyze the massive amounts of data these IoT sensors produce without losing performance. These devices must capture and store critical information so that the IoT node can make independent decisions and trigger appropriate reactions. Database queries allow device apps to get the information they need to make intelligent decisions in real-time, quickly and without wasting time. To be successful in the IoT, you need the right data management software and the ability to quickly collect and connect device data rapidly to get low latency. IoT Data Processing and Management Standard data management solutions do not fully address the complexity of architecting software for IoT data processing. Despite being the primary data source, sensors are often constrained by their limitations and fail to provide sophisticated analysis. The focus of IoT data analysis and management is to harvest real-time information and make sense of it quickly. A good solution uses technologies that many developers are already familiar with, like SQL, to solve the new problem of analyzing IoT sensors directly on edge devices. Conclusion While building a device application, at every stage, developers must make tough calls to select the best data management and database software to launch their edge-centric IoT systems. Such costly decisions consume significant development and validation time as well. Using existing IoT data management platforms is a better way to deal with scaling, security, and the weight of data. Businesses can set up, connect, and grow their IoT infrastructure with these platforms. Organizations don't have to build their own IoT infrastructure from scratch. Instead, they can use IoT platforms that give them access to IoT devices, cloud infrastructure, and networks worldwide. Small and medium-sized businesses may find this method saves money.

Industrial IoT, IoT Security

Article | July 12, 2023

Explore the IoT tools for security and maintenance. These IoT monitoring tools addresses cyber security and privacy issues, catering to a various users including industrialists & individuals. With the proliferation of interconnected devices in the Internet of Things ecosystem, ensuring robust security measures has become crucial to protect against cyber threats. The complexity and diversity of IoT systems pose unique challenges, making thorough security testing an essential practice. To address these challenges, various IoT development tools have emerged that enable organizations to assess and mitigate vulnerabilities in their IoT deployments. In this article, explore the top ten tools to secure IoT and IoT testing, equipping professionals and organizations with the means to identify and address potential security weaknesses, thus bolstering the overall security posture of their IoT infrastructure. 1. AWS IoT Device Defender AWS IoT Device Defender is one of the security IoT management tools, designed to protect and manage IoT devices and fleets. Its auditing capabilities and continuous monitoring enable users to assess their IoT resources' security posture, identify vulnerabilities, and address potential gaps. By leveraging machine learning models or defining custom device behaviors, it can monitor and detect malicious activities, such as traffic from suspicious IP addresses or unusual connection attempts. The tool provides security alerts for failed audits or behavior anomalies, allowing users to mitigate potential risks quickly. Built-in actions facilitate security issue resolution, including device certificate updates, quarantine, and policy replacements. AWS IoT Device Defender offers automation for security assessments, identification of attack vectors, analysis of historical device behavior, and alarm notifications through various AWS interfaces. 2. Dynamic Application Security Testing Appknox offers two robust mobile application security solutions: Automated Dynamic Application Security Testing (DAST) and Penetration Testing (PT). With Automated DAST, users can assess the security of their mobile apps in real time while running in their operational environment. The solution provides access to real devices, allowing users to replicate real-life interactions and identify security vulnerabilities. On the other hand, Appknox's Penetration Testing solution delivers reliable and thorough security assessments by expert security researchers. Users can request a manual pentest effortlessly, and the skilled team analyzes apps to identify and eliminate potential threats. The process includes identifying the tech stack, analyzing the threat landscape, setting up breakpoints, testing responses, detecting bugs, and performing advanced threat exploits. 3. Enterprise IoT Security Enterprise IoT Security is a comprehensive Zero Trust solution designed to address IoT devices' security challenges in modern enterprises. It helps eliminate implicit trust and enforces zero-trust principles through least privilege access, continuous trust verification, and continuous security inspection. With this solution, organizations can quickly discover and assess every IoT device, easily segment and enforce the least privileged access, and protect against known and unknown threats. By simplifying operations, Enterprise IoT Security enables faster deployment, with a 15-time faster deployment than other solutions. The solution offers better and faster protection for IoT devices, delivering 70 times more security efficiency and 20 times speedier policy creation. 4. Azure Sphere Azure Sphere is a secure IoT platform offered by Microsoft that allows businesses to create, connect, and maintain intelligent IoT devices. It provides end-to-end security, from the silicon level to the operating system (OS) to the cloud. With Azure Sphere, organizations can securely connect, manage, and protect existing and new IoT devices. The platform offers over-the-air updates, integration with IoT platform services, and continuous security improvements. It helps businesses deploy real-time security patches, maintain device operations, and accelerate time to market. Azure Sphere incorporates essential security properties and offers comprehensive security and compliance. 5. Microsoft Defender for IoT Microsoft Defender for IoT is a comprehensive security solution that provides real-time asset discovery, vulnerability management, and threat protection for the Internet of Things and industrial infrastructure, including ICS/OT environments. It offers context-aware visibility into IoT and OT assets, enabling organizations to manage their security posture and reduce attack surfaces based on risk prioritization. With behavioral analytics, it detects and responds to attacks across IT and OT networks. Integrated with SIEM/SOAR and XDR tools, it delivers unified security and leverages threat intelligence for automatic response. Microsoft Defender for IoT is designed to meet the unique security needs of various industries and supports complete endpoint protection when combined with Defender for Endpoint. 6. IoT Security Forescout offers an IoT security solution that automates security measures and provides visibility for every device connected to the network. Their zero-trust approach ensures complete device visibility, proactive network segmentation, and least-privilege access control for IoT, OT, IoMT, and IT devices. The platform classifies and monitors devices in real time, identifies weak credentials, and enforces strong passwords. It also enables dynamic network segmentation and automates zero trust policy orchestration across multi-vendor environments. Forescout's solution efficiently manages asset inventory and device lifecycle and has been proven to scale for enterprise-level deployments. 7. ThingSpace The ThingSpace Platform for IoT offers a comprehensive set of iot tools and devices for developing and managing the lifecycle of IoT devices. It enables connectivity management at scale, allowing secure activation on the Verizon network and providing features to troubleshoot, locate, and manage IoT devices. Whether at the prototype stage or ready to scale for enterprise-level deployment, ThingSpace provides the necessary resources for IoT solution development and management. As a Magic Quadrant Leader for IoT Connectivity Services, ThingSpace offers solutions for software management, device readiness, and overall device lifecycle management. Businesses can collaborate with technology leaders through their Executive Briefing Program to achieve their specific goals and gain a competitive edge. 8. Verimatrix The Verimatrix Secure Delivery Platform offers a unified user experience by combining cybersecurity and anti-piracy services into a comprehensive cloud ecosystem. It provides media companies, content owners, streaming providers, and broadcast operators with a single pane of glass experience for securing content, applications, and devices. Key offerings include Streamkeeper Multi-DRM for cloud-based digital rights management, Verimatrix App Shield for zero code hardening of mobile applications, Verimatrix Video Content Authority System (VCAS) for real-time monitoring, and Streamkeeper Counterspy for cybersecurity and anti-piracy solutions. The platform also facilitates partner integrations, enabling seamless onboarding and revenue preservation. 9. Trustwave Trustwave's Managed IoT Security provides comprehensive solutions to secure the Internet of Things (IoT) and minimize the risk of compromise. With expertise from Trustwave SpiderLabs, it offers knowledge about network assets, identifies weaknesses in applications, servers, APIs, and cloud clusters, and enables secure IoT deployment with quick validation of fixes. This reduces the risk of compromised devices, which can lead to various threats, including DoS attacks, privacy violations, and data theft. Trustwave's services cater to IoT developers/manufacturers, offering product security reviews, testing, and incident readiness services. For IoT implementers, it provides managed security services and testing to safeguard deployments and associated data. 10. ARMIS Agentless Device Security Platform The ARMIS Agentless Device Security Platform supports implementing the Critical Security Controls(CIS) framework. Developed by the Center for Internet Security (CIS), these controls are periodically updated by a global community of experts. ARMIS aligns with the CIS Controls and provides a comprehensive set of security controls to address the framework's requirements. The platform caters to enterprises of all sizes and offers different implementation groups based on risk profile and available resources. With ARMIS, organizations can enhance their cybersecurity posture and implement the CIS Controls effectively. Final Thoughts Security is a major concern in IoT tools and software due to the proliferation of connected devices, the diverse and complex nature of IoT ecosystems, the need to protect data privacy and confidentiality, the lack of standardization, the long lifecycles of devices, and the distributed and scalable nature of IoT deployments. Addressing these concerns is crucial to prevent unauthorized access, data breaches, and ensure the integrity and privacy of IoT data. The IoT tools and technologies discussed in this article represent some of the top options for conducting comprehensive IoT security testing. By leveraging these tools, professionals and organizations can proactively identify and address vulnerabilities in their IoT systems, ensuring their data and devices' confidentiality, integrity, and availability. By incorporating these tools into their security practices, organizations can bolster their IoT security strategy and enhance their ability to protect against emerging threats in the dynamic IoT landscape.

Enterprise Iot

Article | July 20, 2023

The evolution of internet-based market models has changed the way businesses operate. Present-day businesses know that data visualization in business intelligence is integral to competitive success. Therefore, businesses are now expanding their data and intelligence retrieval capacities. As a result, IoT (Internet of Things) data visualization is gaining popularity among industrialists and researchers across various disciplines. In corporate finance, IoT-based efficient data visualization analyses data from multiple sources with the help of corporate analytics management tools and manages data quality for business intelligence to reduce the risk of leaks. Impact of IoT Data Visualization on Corporate Finance BI Data is everywhere— right from a customer's first visit to your company’s website until he signs out, all the behavioral patterns and data are tracked. All this data becomes useless unless it is utilized for a particular purpose. Analyzing this data to predict future trends is one of the significant benefits of smart data visualization tools and technologies. It helps to slice and dice the data gained from different sources of different complexity levels to the minute granular level. Business intelligence utilizes these insights and the existing database to run risk analysis. It gives an overview of your financial performance and the risks and exposures it faces. And if you switch the KPIs at the center of any dashboard, your entire team can instantly access the most important and relevant data. IoT data visualization can measure big data on customers more efficiently, allowing organizations to add value to their customers. Customized tools will analyze your customers’ data and produce reports according to specific customer needs to help you get a deeper insight. Corporations can also utilize this data to better understand their competitors’ benchmarks. Customizable IoT Data to Store Millions of Data Points in One Place IoT collects millions of data from various complex sources. The data visualization dashboard contains multiple widgets that convert this data into various forms, such as line graphs, geographical maps, bar charts, pie charts, gauges, heat maps, etc. This information, transmitted into multiple visualizations, helps organizations to unlock every piece of data into a valuable asset. The Benefits of Using IoT Data Visualization Businesses can collect, analyze and monitor a variety of data using IoT, such as internet usage data, video surveillance data, mobile app usage, and social media. It helps businesses to design products and provide personalized value-added services to drive better consumer engagement. Here are some key benefits IoT data visualization offers: Unlock multiple insights across various verticals Addressing important financial concerns proactively Combination of multiple data sources into a single insightful dashboard Multi-layered visual data. Combines new data with the existing data to analyze new business opportunities. Better performance on IoT data flow. Analyze multiple data correlations in real-time Improved Collaboration Well-coordinated and efficient performance. Cost reduction Accurate data interpretation Mitigate risk factor Better decision making Conclusion Hands down, IoT data visualization intelligence in a company’s business operations will lead to better decision-making. But, before you choose an IoT data visualization tool for your business, you should know what kind of data you need to analyze and if you need any additional historical data. Because IoT services offer data visualization tools and techniques to analyze and monitor the data accordingly to predict future trends. So, it’s important to identify the goals before selecting a tool for your organization.

Article | June 25, 2020

The year 2020 was supposed to be a breakthrough year for many technologies but, most businesses have now been forced back into building an infrastructure to transit their workforce to work remotely and ensure continuity of workflow. Nevertheless, an unprecedented set of events have pushed several industries to accelerate the adoption of technologies as they continue to work from home. 5G and Wi-Fi 6 are two tech advancements that have been turning eyes around the world since their introduction. The two wireless technologies are well on their way to revolutionize the Internet of Things as businesses move fast towards digitization and the world is excited. Table of Contents: - Wi-Fi 6: A Breakthrough in Wireless Technology - 5G: For a Better Connected World - How are Wi-Fi 6 and 5G Transforming the IoT? - 5G and Wi-Fi 6: Rivals or Allies? Wi-Fi 6: A Breakthrough in Wireless Technology The next-generation Wi-Fi with boosted speed was introduced last year to meet the demand for faster internet amongst the rising internet users. But, Wi-Fi 6 is simply more than a tweak in the speed. Technically called 802.11ax, Wi-Fi 6 is the advancement in the wireless standard doing the same basic things but with greater efficiency in the device-dense areas, and offering much greater bandwidth than its predecessor 802.11ac or Wi-Fi 5. Wi-Fi 6 promises a speed up to 9.6 Gbps up four times than that of Wi-Fi 5 (3.5Gbps). In reality, this is just a theoretical maximum that one is not expected to reach. Even still, the 9.6Gbps is higher speed and doesn’t have to go to a single device but split up across a network of devices. A new technology in Wi-Fi 6 called the Target Wake Time (TWT) lets routers set check-in times with devices, allowing communications between the router and the devices. The TWT also reduces the time required to keep the antennas powered to search for signals, which in turn also improves battery life. Wi-Fi 6 also comes with a new security protocol called WPA3, making it difficult to hack the device passwords by simple guesswork. In short, Wi-Fi 6 means better speeds with optimized battery lives, and improved security. 5G: For a Better Connected World 5G is the next in line to replace 4G LTE. While Wi-Fi covers small scale internet requirements, cellular networks like 5G are here to connect everyone and everything virtually on a larger scale. The technology is based on the Orthogonal frequency-division Multiplexing (OFDM) that reduces interference by modulating a digital signal across several channels. Ability to operate in both lower bands (like sub-6 GHz) and mmWave (24 GHz and above), 5G promises increased network capacity, low latency and multi-Gbps throughput. 5G also uses the new 5G NR air interface to optimize OFDM to deliver not just better user experience but also a wider one extending to many industries, and mission-critical service areas. The 5G technology, in a nutshell, has brought with it ultra-high speeds, increased and scalable network capacity, and very low latency. How are Wi-Fi 6 and 5G Transforming the IoT? 5G and Wi-Fi 6 will fill up the speed gaps that our existing networks are not able to especially, in crowded homes or congested urban areas. It's not just about the speed. The two wireless technologies will increase network capacity and improve signal strengths. On the business front, 5G and Wi-Fi 6 are both living up to the hype they created since their introduction. Wi-Fi 6 has emerged, as the enabler of converged IoT at the edge. It has put IT into OT applications, connected devices and processed data from devices such as IP security cameras, LED lighting, and digital signage with touch screen or voice command. Wi-Fi 6 can now be used in office buildings for intelligent building management systems, occupancy sensors, access control (smart locks), smart parking, and fire detection and evacuation. It’s (Wi-Fi 6) built for IoT. It will connect many, many more people to mobile devices, household appliances, or public utilities, such as the power grid and traffic lights. The transfer rates with Wi-Fi 6 are expected to improve anywhere from four times to 10 times current speeds, with a lower power draw, i.e. while using less electricity. - Tom Soderstrom, IT Chief Technology and Innovation Officer at NASA’s Jet Propulsion Laboratory (JPL) Similarly, 5G will open doors for more devices and data. It will increase the adoption of edge computing for faster data processing close to the point of action. The hype around 5G is because of the three key attributes it comes with: enhanced mobile broadband (eMBB), ultra-reliable low-latency (uRLLC), and massive IoT device connectivity (mMTC). But there is the fourth attribute that sets it apart from its predecessor: use of a spectrum that operates at the low-end frequency range (typically 600 MHz). Called as ‘low-band 5G’, it delivers high speeds with signals that go for miles without propagation losses and ability to penetrate obstacles. The 5G operates in the new millimetre-wave bands (24 to 86 GHz) delivering more capacity to enable many low-power IoT connections. If we were to point down the benefits, these two wireless technologies are bringing to the Internet of Things those would be: Increased Human-Device Interactions Increased Data and Devices More IoT investments Advancing to the Edge Acceleration towards Industrial IoT Enhanced use of IoT devices Better VUI 5G and Wi-Fi 6: Rivals or Allies? In February, Cisco estimated that by 2023 M2M communications will contribute to 50% or about 14.7 billion of all networked connections. Cisco’s Annual Internet Report reveals that 5G will enable new IoT applications with greater bandwidth and lower latencies and will accelerate innovations at scale. The same report estimates that 10.6% of global mobile connections in 2023 will be 5G, while Wi-Fi 6 hotspots will be 11.6% of all public Wi-Fi hotspots growing 13 times from 2020 through 2023. Wi-Fi6 will serve as a necessary complement to 5G. A significant portion of cellular traffic is offloaded to Wi-Fi networks to prevent congestion and degraded performance of cellular networks (due to demand). - Thomas Barnett, Director of Thought Leadership, Cisco Systems The two technologies are here to feed different data-hungry areas with gigabit speeds. With lower deployment costs, Wi-Fi 6 will be dominating the home and business environments where access points need to serve more users covering devices like smartphones, tablets, PCs, printers, TV sets, and streaming devices. With an unlicensed spectrum, the performance of Wi-Fi 6 depends on the number of users, that are using the network at the same time. 5G, with its longer range, will deliver mobile connections and accelerate smart city deployments and manufacturing operations. Like LTE, 5G speeds will depend upon users’ proximity to base stations and the number of people using that network. The performance of the two depends largely on the area where they are being deployed. For instance, Wi-Fi can very well handle machine-to-machine communications in a managed manufacturing unit, whereas 5G can enhance campus-wide manufacturing operations efficiently. Businesses will have a decision to make which among the two wireless networks fulfils their data appetite. In conclusion, the two wireless technologies continue to develop in parallel and causing the next big wave in the Internet of Things.