Question

The author discusses IoT (Internet of Things) Security on pages 251 and 252. Please post a case study, organization, application, or device that implements or provides security for IoT in a couple of sentences or more.

Answer 1

List of Top 18 IoT Devices Examples in 2019
#1) Google Home Voice Controller
#2) Amazon Echo Plus Voice Controller
#3) Amazon Dash Button
#4) August Doorbell Cam
#5) August Smart Lock
#6) Kuri Mobile Robot
#7) Belkin WeMo Smart Light Switch
#8) Footbot Air Quality Monitor
#9) Flow by Plume Labs Air Pollution Monitor
#10) Nest Smoke Alarm
#11) Nest T3021US Learning Thermostat Easy Temperature Control
#12) Philips Hue Bulbs and Lighting System
#13) Bitdefender BOX IoT Security Solution
#14) Ring Doorbell
#15) WeMo Insight Smart Plug
#16) Logitech Harmony Universal Remote
#17) Particle Photon Wi-Fi with Headers
#18) NETGEAR Orbi Ultra-Performance Whole Home Mesh Wi-Fi System

Here are a few ways to IoT Security:

IoT Network Security

IoT network security is a daunting task compared to traditional network security. There are several communication protocols, standards, and device functionalities which when combined together pose significant issues and complexity.

IoT Authentication

Allowing users to authenticate IoT device right from managing multiple users of a single device, ranging from simple static password/pins to authentication mechanisms.

Encrypt Everything

IoT will continue to provide omnipresence experience in smart, connected devices. It is practically impossible to assess the credibility of each and every device that might originate from or be stored on firewall networks. In such cases, the only solution is to ensure that data is encrypted. This effectively means only users with authentication credentials or a pre-verified device will be able to access encrypted data.

IoT Security Analytics

IoT security analytics is all about collecting and assimilating data from IoT devices and providing an alert system on specific activities or when activities fall outside the realms of set policies and procedures. These solutions add a new perspective of machine learning, artificial intelligence, and big data techniques to provide a rather rigorous predictive modeling and anomaly detection. However, these capabilities are still gaining momentum. IoT security analytics allow detection of IoT-specific intrusions that are not identified by conventional network security solutions.

IoT API Security

Providing the ability to authenticate and authorize data movement between IoT devices, back-end systems, and applications using documented REST-based APIs. API security protects the data transiting to ensure that only authentic devices, developers, and apps are communicating with APIs as well as detecting nefarious threats against APIs.

User access controls

Build in mandatory or role-based access controls and password policies to limit user access to device components and applications, ensuring they only access the resources needed to do their jobs. If any component is compromised, access control ensures the intruder has as minimal access to other parts of the system as possible.

Device lifecycle management

Implement procedures that enable devices to get timely security patches and updates to firmware and software.

Conclusion: IoT is becoming a significant part of our lives, and its security is one of the major issues that must be addressed with the effective participation of the entire global tech community.