Exploring Security Economics in IoT Standardization Efforts

February 18, 2018

The Internet of Things (IoT) propagates the paradigm of interconnecting billions of heterogeneous devices by various manufacturers. To enable IoT applications, the communication between IoT devices follows specifications defined by standard developing organizations. In this paper, we present a case study that investigates disclosed insecurities of the popular IoT standard ZigBee, and derive general lessons about security economics in IoT standardization efforts. We discuss the motivation of IoT standardization efforts that are primarily driven from an economic perspective, in which large investments in security are not considered necessary since the consumers do not reward them. Success at the market is achieved by being quick-to-market, providing functional features and offering easy integration for complementors. Nevertheless, manufacturers should not only consider economic reasons but also see their responsibility to protect humans and technological infrastructures from being threatened by insecure IoT products. In this context, we propose a number of recommendations to strengthen the security design in future IoT standardization efforts, ranging from the definition of a precise security model to the enforcement of an update policy.

Spotlight

ALTEN Calsoft Labs

ALTEN Calsoft Labs is part of ALTEN Group ($2 Billion Company) , offering next gen digital transformation, enterprise IT and product engineering services. The company enables clients innovate, integrate, and transform their business by leveraging disruptive technologies like Artificial Intelligence, Machine Learning, Mobility, big data, analytics, cloud, IoT and software-defined networking (SDN/NFV).

OTHER WHITEPAPERS
news image

5G The Future of IoT

whitePaper | November 1, 2019

The Internet of Things (IoT) is transforming businesses and peoples’ lives, and will continue to ignite innovations in the future. It is expected that we will progress to tens of billions of connected devices globally over the next decade1 that will generate multi-trillion dollars of economic value2 across many markets forming the foundation of a totally interconnected world—or the Internet of Everything.

Read More
news image

IoT Standards for Trade Facilitation

whitePaper | May 12, 2022

IoT is a network that connects uniquely identifiable “things” or devices to the Internet. These devices have sensing capabilities and can, potentially, be programmed. Through the exploitation of their unique identification and sensing capabilities, information about these devices can be collected and the state of these devices can be changed.

Read More
news image

Technology Efficiencies and Opportunities for Universities

whitePaper | March 22, 2022

There is no denying that the COVID-19 pandemic accelerated innovation and changed the way institutions now approach teaching, learning, working and research. While technology has played a growing and supporting role in student engagement and enabling teachers and administrative staff to take advantage of the very latest resources, it has now taken the lead role and provided many more opportunities for students, teachers and staff to succeed.

Read More
news image

Industrial Wireless IoT - The direct path to your Level 0

whitePaper | October 18, 2022

Over the past months, OTORIO’s research team together with researchers from a global leader of cyber security solutions and services, conducted comprehensive research on industrial wireless IoT devices such as industrial cellular gateways/routers and industrial Wi-Fi access points, which resulted in the discovery of broad issues in their implementation.

Read More
news image

Aruba IOT gateway solution

whitePaper | May 4, 2022

The Internet of Things, represents the billion autonomous devices connected to a network, primarily the Internet. You could find it at home, in the cities, in the industry, at hospital, and almost everywhere. IoT has given rise to concepts called smart home, smart cities, Industry 2.0 / 4.0 (depending if it’s used with or without AI) or smart healthcare.

Read More
news image

How to meet the IoT security requirements of today and tomorrow

whitePaper | July 4, 2023

Governments around the world are creating Internet of Things (IoT) security legislation and regulations designed to keep users safe in an increasingly connected world. Connectivity is good and, in fact, great but bad things can happen to people with unprotected or poorly protected IoT devices. Failing to meet government regulations or guidelines may lead to the inability to sell products in a region and thus to lost revenue. However, the regulations are constantly in a state of flux. This white paper provides updated background on what governments are suggesting or requiring as well as specific details on how to implement security defenses and obtain security certifications that can satisfy current and even future government requirements

Read More

Spotlight

ALTEN Calsoft Labs

ALTEN Calsoft Labs is part of ALTEN Group ($2 Billion Company) , offering next gen digital transformation, enterprise IT and product engineering services. The company enables clients innovate, integrate, and transform their business by leveraging disruptive technologies like Artificial Intelligence, Machine Learning, Mobility, big data, analytics, cloud, IoT and software-defined networking (SDN/NFV).

Events