Question

Securing the Internet of Things ( search the article online)

Read article and then prepare a short report, preferably within 6-8

Each report should include two parts: (1) summary of the article, and (2) comments to the article

Answer 1

Answer :

* Securing the Internet of Things :

Article 1) -
       Comments : There are many devices but their safety ways are Limited.

       Summary :

• Securing the Internet of Things is a technology related to providing safety for connected devices, digital machines, people.
• Security of Internet of Things is the technology area concerned with safeguarding connected devices and networks in the internet of things.
• A rapidly increasing number of devices and as manufacturers roll out new products more quickly, security can be given low priority as the focus is on time-to-market and return-on-investment metrics.
• In multiple businesses use Internet of Things(IoT), so obviously they faced problems on Securing their business. While businesses cannot stop IoT attacks from happening, they can be proactive in mitigating threats to network security and protecting valuable data and IT systems.

• Internet of Things technologies special potential dangers to your internet safety.

• News reports have ranged from an IoT botnet taking down portions of the Internet to hackers exploiting baby monitors.

• Its main purpose is that providing security to internet based devices which are connected each other.

• Nowdays, technical devices are highly manufactured but theirs safety is fail to protect them as compare to their size.
• It is not possible to secure all machines, all internet related devices.

Article 2) -

       Comments : To secure Internet of Things is very challenging.
       Summary :

• There has been lot of discussion related to the hacking of devices and systems to obtain information and data.
• Just as critical are cyber-attacks against the devices themselves - attacks which taking a control of the device and cause them to operate in dangerous and insecure ways.
• Unfortunately many of these systems thought to be safe are still vulnerable.
• In addition to devices, systems and appliances in a home, embedded devices also are found controlling the world’s transportation infrastructure, the utility grids, communication systems and many other capabilities relied upon by modern society.Interruption of these capabilities by a cyber-attack could have catastrophic consequences.
• Use of multiple layers of protection is the driving principle for enterprise security.
• Devices may be in the field for 15 or even 20 years.Building a device today that will stand up to the ever evolving security requirements of the next two decades is a tremendous challenge.
• Many embedded devices are mobile or are deployed in the field.As a result, these devices may be directly connected to the Internet with none of the protections found in a corporate environment.

Article 3) -

       Comments : Security requirements for the Internet of Secure Things
       Summary :

• Security requirements must take into consideration the cost of a security failure (i.e. economic, environmental, social, etc.), the risk of attack, available attack vectors, and the cost of implementing a security solution.
• A security solution for embedded devices must ensure the device firmware has not been tampered with, it must secure the data stored by the device, secure communication and it must protect the device from cyber-attacks.
• This can only be achieved by including security in the early stages of design.
• There is no one one-size fits all security solution for embedded devices.
• Since many embedded devices are deployed outside of the standard enterprise security perimeter, it is critical that security be included in the device itself.
• Some security Features are : Authentication, Data Security, Secure communication, Secure boot, Embedded security management. etc

Article 4) -

       Comments : Cyber warfare and the motivated hacker
       Summary :

• The level of security required for an embedded device varies dramatically depending upon the function of the device.
• Rather than asking if the device is secure, the OEMs should be asking if the device is secure enough.
• A military communication satellite or nuclear power plant control system clearly needs a very different level of security than a water softener equipped with Internet connections for remote diagnostics and automated reordering of salt.
• We are no longer just talking about protecting a device from malformed IP packets or DoS packet floods.
• Hacking organizations invest significant resources in gathering information on the device or devices they wish to attack.
• It’s likely that they have attempted to obtain design information on networks and devices using other methods of espionage including attempts to hire engineers involved in designing the devices they wish to hack.

Article 5) -

       Comments : Integrate security with the IoT product development process

       Summary :

• An effective risk management mechanism is nothing new, but it is an important part of this process.
• Organisations must inform and educate consumers on best practice including regularly changing passwords, which is still one of the most common causes of a security breach, and offering advice on security patches.
• Business leaders need to identify where their organisation might be vulnerable through an analysis of disruptive attack scenarios, and the financial and non-financial impact of an attack on the organisation as well as the users.
• Once this is understood, leaders will have a clearer view of the cyber threat landscape and how security should be embedded throughout the product design process of design, coding, testing and evaluation.
• Planning and integrating strong security features will only take you so far before it comes back to how the IoT product is being used.

Article 6) -

       Comments : Address privacy concerns with transparent privacy policies
       Summary :

• The internet of things has the potential to be enormous for both consumers and businesses, but security has to be at the heart of every stage of the process.
• To protect consumers from potential data privacy breaches, businesses need to develop privacy policies that clearly detail how the data collected from IoT products will be used, and these policies should be easily accessible to consumers.
• To inspire confidence in the IoT as it gathers pace, businesses need to ensure they are supplying the lock as well as handing over the keys.
• Everybody is becoming more conscious about where their data is being held, and an organisation making a clear effort to show consumers what their data is being used for will differentiate itself from the competition.