Settling on standards to threat model IoT systems

BRANDON LEWIS | March 1, 2016

article image
One of the foremost security experts in our field, Blackberry’s Chief Security Officer David Kleidermacher began his presentation at the IoT Evolution Developers Conference by pointing out that while there are a number of general guidelines, no real standards exist for IoT security. It’s easy to say that “device hardening” or “secure communications” are prerequisites for a secure system, but for developers looking to begin the process of threat modeling, what does this really mean? Beyond the theoretical, engineers need a real-world, methodical approach to the problem of security that helps them identify and evaluate threats and define the requirements of a solution.

Spotlight

Tomorrow Lab

"Tomorrow Lab™ is a product design and development consultancy with a unique focus on prototyping new hardware technology ideas and turning those into new market-ready products.The products we develop allow new ventures to grow into companies, and allow established companies to break into new markets. Together with our network of rapid fabrication partners, we design, develop, and deliver revolutionary technology hardware solutions to meet the needs of our clients."

OTHER ARTICLES

WISeKey Drives Innovations in IoT Security with 23 Strategic Patents in the US

Article | February 18, 2020

WISeKey International Holding Ltd., cybersecurity delivering Integrated Security Platforms, announced that it has registered a total of 23 new strategic patents in US which are essential to the digital transformation applications that are fueling the growth in the IoT market.With a rich portfolio of more than 46 patent families, covering over 100 fundamental individual patents, and another 22 patents under review, WISeKey continues to expand its technology footprint in various domains including the design of secure chips, near field communication (NFC), the development of security firmware and backend software, the secure management of data, the improvement of security protocols between connected objects and advanced cryptography.

Read More

Internet of Things (IoT): The Need for Vendors to Address Security

Article | February 18, 2020

By the end of this year there will be 5.8 billion Internet of Things (IoT) endpoints, according to Gartner. And depending on how IoT devices are counted the number is even higher. Statista, for example, estimates the device count for 2020 to be more than 30 billion. Security remains a big challenge for IoT as a strategy to be successful. IoT devices are still not being designed with security as a top priority.Mary O’Neill, VP of security at Nokia, noted in a press conference at MWC Los Angeles 2019 and reported by SDXCentral, that “if an IoT device today is plugged into the network and it doesn’t have protection on it, it’s infected in three minutes or less.”Jake Williams, founder of the security firm Rendition Infosec, said that “IoT vendors emphasize, often rightly, that their products improve quality of life, but they often neglect to disclose the risk of these devices to consumers. The onus of understanding how an IoT device might impact security should not be purely on the consumer. The vendor shares this responsibility.

Read More

The IoT Smarthome Battlefield: A Jointly Endorsed IoT Standard for the Home Area Network

Article | February 18, 2020

Google announced that together with Amazon and Apple (the big 3 smart home players) they will work on the adoption of a joint wireless IoT standard for the smart home. This new connectivity standard is designed to make it easier for smart home products to work with each other.In the statement, Google said they were “joining Amazon, Apple and others to create Connected Home over IP, a new independent working group managed by the Zigbee Alliance (separate from the existing Zigbee 3.0/Pro protocol). We’re contributing two of our market-tested and open-source smart home technologies, Weave and Thread. Both are built on IP and have been integrated into millions of homes around the world.”

Read More

Practical AI – A Serious Issue for Industrial IoT

Article | February 18, 2020

While the Industrial Internet of Things (IIoT) is maturing rapidly, there’s often a strong link to Artificial intelligence (AI) and Machine Learning (ML) tools to manage data flows. This raises a host of challenges including connectivity, security, storage and modeling requirements. Designers of IIoT devices and larger deployments must build in contingencies for shifts in these areas or risk falling short. While IIoT is gaining in maturity, the overall market still has many challenges to overcome. Some of these challenges are technical barriers to IoT device operation, such as connectivity standards and battery technology, but the picture is even wider than that. The world of IIoT not only requires IoT hardware to operate reliably and efficiently in all environments but also relies on supporting networks and services too. The result is that IIoT deployments cannot be viewed as isolated technology upgrades or productivity drives, but highly interconnected ecosystems sensitive to a wide range of variables – in particular the developing world of AI.

Read More

Spotlight

Tomorrow Lab

"Tomorrow Lab™ is a product design and development consultancy with a unique focus on prototyping new hardware technology ideas and turning those into new market-ready products.The products we develop allow new ventures to grow into companies, and allow established companies to break into new markets. Together with our network of rapid fabrication partners, we design, develop, and deliver revolutionary technology hardware solutions to meet the needs of our clients."

Events