Kevin Ashton’s famous 1999 presentation to Proctor & Gamble made the internet of things seem like both an untapped gold mine for forward thinking industries, and the next logical step in the evolution of computer technology. Correctly assessing that the Internet was “almost wholly dependent on human beings for information,” Ashton went on to envision a world in which many devices and everyday objects would capture and share data all by themselves — making it easier to track commodities, reduce losses and lower costs. Today, that world is in many ways a reality, but many people in the industry think there might be a dark side.
\r\nToday, there is such a proliferation of network-censored items worldwide, they are taken for granted by the vast majority of people who use them. A study by Verizon and ABI Research recently put the number of devices connected to the Internet at 1.2 billion but predicted that by 2020 that number would rise to almost 5.4 billion.
\r\nIn short, the IoT seems poised to obliterate the line between information technology and operational technology altogether. Already a vast amount of machine-generated data is being collected and analyzed by other systems around the world, with the stated goal of opening new avenues for improvement. Python developers are having a field day since this is one of the most vital and useful languages for data science and machine learning. However, the sheer amount of information being gathered has sparked concern among critics, many of whom are unsure of its exact nature—and the potential applications for its misuse. As a result, there has been a lot of heated coverage of the IoT in recent years, making it difficult to determine the real problems it faces. According to ISACA, most concerns about the IoT are based on security, with data privacy the runner-up.
\r\nA 2015 paper by Wind River called Security in the internet of things summarized the crux of the matter beautifully: “As we become increasingly reliant on intelligent, interconnected devices in every aspect of our lives, how do we protect potentially billions of them from intrusions and interference that could compromise personal privacy or threaten public safety?”
\r\nThe short answer is that there’s no magic solution. However, Itransition IoT developers recommend various existing IT controls that can be successfully applied to IoT security, as long as they can be tailored to those embedded devices with network-compromising potential:
\r\n● Use digital signatures to start devices securely. IoT security isn’t just about protecting the network; it should start with the moment you first boot up your device. Devices that attach digital signatures to their software images can check them upon startup to make sure that they aren’t loading anything unauthorized — such as a foreign program or virus.
\r\n● Limit access from device controls and applications. To keep devices as secure as possible, it’s best to make sure that every piece of software on them is accessing only the information that helps them function properly. This confers two benefits upon users: first of all, it limits the amount of data that a device can transmit to its parent company (like your iPhone to Apple, for example, which allows you to customize the amount of information your phone can share through various apps and services). Secondly, it ensures that if someone were to hack into any of your devices, that person would have limited access to the system — which leaves you and your personal information less vulnerable in a worst-case-scenario.
\r\n● Use machine authentication when connecting to a network. Whenever one of your devices connects to its network, it should be required to provide authentication before collecting or sending information. Since many devices are embedded too thoroughly to have flesh-and-blood users authenticating them manually, this requires a process called machine authentication (as opposed to a username and password). This is most often accomplished with a digital certificate, which stores the authentication information securely and delivers it upon establishing a network connection.
\r\n● Use firewalls. You might think that having network-based appliances in place would prevent the need for a firewall, which is typically used for securing outward communications. However, firewalls are also essential tools for protocol filtering, which essentially ensures that the devices on your network are all talking to each other properly. This can identify dangerous payloads concealed in non-IT protocols, which can threaten your network, your devices, and your individual privacy.
\r\n● Be careful when delivering patches and updates. Practically every object in the IoT is going to receive updates every so often. The problems occur when those updates are happening on a massive scale and consuming vast amounts of bandwidth, or reducing the functional safety of said devices—since this can prevent users from updating them, and leave them open to security breaches. Updates and patches for devices should be rolled out in such a way as to minimize their strain on both bandwidth and connectivity making it easy for users to keep their devices up to date with the latest security measures.
\r\nThe bottom line is this: while there are real consequences for neglecting IoT security, it’s a mistake to feel as though nothing can be done about it. Users, network administrators and developers alike can take steps to make sure their assets are protected in the age of the IoT — ensuring that the benefits of this technology outweigh the risks.
\n","docType":"article","guid":"articles_5460bab64120dae5727b5d8ff55266a0","lastModified":"2017-05-25T18:59:00.000Z","published":"2017-05-25T18:59:00.000Z","structuredData":null,"subtitle":null,"template":"legacy","title":"How Real are the IoT Security Concerns?","type":"article","author":{"avatar":"https://staging.business.com/images/author/584/fa4833187b13d255bc67a/100-100","bio":"As marketing manager at the software development company Itransition, Maria Marinina brings over 10 years of experience in marketing, communications and public relations. Maria’s primary focus is to drive business growth through increased brand awareness and lead generation.","name":"Maria Marinina","image":null,"slug":null,"social":{"facebook":"","linkedin":"","twitter":null,"website":"https://www.itransition.com/"},"status":"enabled","title":null,"type":"Old BDC Member","user":{"imagePath":"https://staging.business.com/images/uploads/user/profile/ff405adbdcdaced382f45dc721dbbf05469f2.jpg","profile":{"company":"Itransition","jobTitle":"","website":""}}},"breadcrumbs":null,"channels":{"primary":{"name":"Technology","slug":"technology"},"sub":{"name":"Security","slug":"security"}},"meta":{"robots":"index, follow","description":"While there are real consequences for neglecting IoT security, it’s a mistake to feel as though nothing can be done about it.","title":"How Real are the IoT Security Concerns? - business.com"},"parsedContent":{"toc":[],"json":[{"component":"p","children":["Kevin Ashton’s famous 1999 presentation to Proctor & Gamble made the internet of things seem like both an untapped gold mine for forward thinking industries, and the next logical step in the evolution of computer technology. Correctly assessing that the Internet was “almost wholly dependent on human beings for information,” Ashton went on to envision a world in which many devices and everyday objects would capture and share data all by themselves — making it easier to track commodities, reduce losses and lower costs. Today, that world is in many ways a reality, but many people in the industry think there might be a dark side."]},{"component":"p","children":["Today, there is such a proliferation of network-censored items worldwide, they are taken for granted by the vast majority of people who use them. A study by Verizon and ABI Research recently put the number of devices connected to the Internet at 1.2 billion but predicted that by 2020 that number would rise to almost 5.4 billion."]},{"component":"p","children":["In short, the IoT seems poised to obliterate the line between information technology and operational technology altogether. Already a vast amount of machine-generated data is being collected and analyzed by other systems around the world, with the stated goal of opening new avenues for improvement. Python developers are having a field day since this is one of the most vital and useful languages for data science and machine learning. However, the sheer amount of information being gathered has sparked concern among critics, many of whom are unsure of its exact nature—and the potential applications for its misuse. As a result, there has been a lot of heated coverage of the IoT in recent years, making it difficult to determine the real problems it faces. According to ISACA, most concerns about the IoT are based on security, with data privacy the runner-up."]},{"component":"p","children":[{"component":"picture","props":{"className":"aligncenter full"},"children":[{"component":"source","props":{"srcSet":"/images/content/592/2e1621039eba3238b4567/1200_-942- 1200w, /images/content/592/2e1621039eba3238b4567/668_-524- 668w, /images/content/592/2e1621039eba3238b4567/320_-251- 320w","sizes":"668px, 100%"}}]},"The potential for IoT misuse is quite easy to imagine: hacking into an ex’s smart-toaster to ruin their breakfast, for example. The challenge is to separate the speculative concerns from the real and more serious ones. Just look at the February 2017 scandal involving Vizio, whose affordable smart TVs were ",{"component":"a","props":{"href":"https://www.wired.com/2017/02/smart-tv-spying-vizio-settlement/","target":"_blank","rel":"nofollow"},"children":["spying on their owners"]}," and transmitting the data back to the company so it could be sold to advertisers. A more recent and dramatic episode occurred in Dallas on April 7, 2017, when hackers ",{"component":"a","props":{"href":"https://www.theverge.com/2017/4/9/15235306/hackers-activated-emergency-sirens-dallas-texas-cybersecurity","target":"_blank","rel":"nofollow"},"children":["turned on all the city’s emergency sirens at once"]},", causing many residents to think they were under attack."]},{"component":"p","children":["A 2015 paper by Wind River called Security in the internet of things summarized the crux of the matter beautifully: “As we become increasingly reliant on intelligent, interconnected devices in every aspect of our lives, how do we protect potentially billions of them from intrusions and interference that could compromise personal privacy or threaten public safety?”"]},{"component":"p","children":["The short answer is that there’s no magic solution. However, ",{"component":"a","props":{"href":"https://www.itransition.com/technologies/internet-of-things","target":"_blank","rel":"nofollow"},"children":["Itransition IoT developers"]}," recommend various existing IT controls that can be successfully applied to IoT security, as long as they can be tailored to those embedded devices with network-compromising potential:"]},{"component":"p","children":["● Use digital signatures to start devices securely. IoT security isn’t just about protecting the network; it should start with the moment you first boot up your device. Devices that attach digital signatures to their software images can check them upon startup to make sure that they aren’t loading anything unauthorized — such as a foreign program or virus."]},{"component":"p","children":["● Limit access from device controls and applications. To keep devices as secure as possible, it’s best to make sure that every piece of software on them is accessing only the information that helps them function properly. This confers two benefits upon users: first of all, it limits the amount of data that a device can transmit to its parent company (like your iPhone to Apple, for example, which allows you to customize the amount of information your phone can share through various apps and services). Secondly, it ensures that if someone were to hack into any of your devices, that person would have limited access to the system — which leaves you and your personal information less vulnerable in a worst-case-scenario."]},{"component":"p","children":["● Use machine authentication when connecting to a network. Whenever one of your devices connects to its network, it should be required to provide authentication before collecting or sending information. Since many devices are embedded too thoroughly to have flesh-and-blood users authenticating them manually, this requires a process called machine authentication (as opposed to a username and password). This is most often accomplished with a digital certificate, which stores the authentication information securely and delivers it upon establishing a network connection."]},{"component":"p","children":["● Use firewalls. You might think that having network-based appliances in place would prevent the need for a firewall, which is typically used for securing outward communications. However, firewalls are also essential tools for protocol filtering, which essentially ensures that the devices on your network are all talking to each other properly. This can identify dangerous payloads concealed in non-IT protocols, which can threaten your network, your devices, and your individual privacy."]},{"component":"p","children":["● Be careful when delivering patches and updates. Practically every object in the IoT is going to receive updates every so often. The problems occur when those updates are happening on a massive scale and consuming vast amounts of bandwidth, or reducing the functional safety of said devices—since this can prevent users from updating them, and leave them open to security breaches. Updates and patches for devices should be rolled out in such a way as to minimize their strain on both bandwidth and connectivity making it easy for users to keep their devices up to date with the latest security measures."]},{"component":"p","children":["The bottom line is this: while there are real consequences for neglecting IoT security, it’s a mistake to feel as though nothing can be done about it. Users, network administrators and developers alike can take steps to make sure their assets are protected in the age of the IoT — ensuring that the benefits of this technology outweigh the risks."]}]},"resource":null,"sponsorship":null,"thumbnail":{"path":"https://staging.business.com/images/content/592/718fbcf838ebd5c8b4568/1500-0-","caption":"one photo/Shutterstock","isBlurred":true},"bestPicks":null},"related":{"relatedArticles":[{"title":"Internet of Things: Security, Compliance, Risks and Opportunities","canonical":"https://www.business.com/articles/internet-of-things-security-compliance-risks-and-opportunities/","slug":"internet-of-things-security-compliance-risks-and-opportunities","thumbnail":"https://www.business.com/images/channel/technology.jpg","dek":"The Internet of Things (IoT) is pushing an information-driven shift to connected devices in the enterprise world at large.","lastModified":"2015-11-06T21:00:00Z","published":"2015-11-06T21:00:00Z","sponsored":false},{"title":"Protecting Your Business From Internet Security Problems","canonical":"https://staging.business.com/articles/protecting-your-business-from-internet-security-problems/","slug":"protecting-your-business-from-internet-security-problems","thumbnail":"https://staging.business.com/images/content/53b/32ee9cb786b4417c04054/1500-0-","dek":"Ensure that you have appropriate internet security management to protect your business from internet security problems.","lastModified":"2014-06-26T22:48:00Z","published":"2014-06-26T22:48:00Z","sponsored":null},{"title":"Internet of Things: Security, Compliance, Risks and Opportunities","canonical":"https://staging.business.com/articles/internet-of-things-security-compliance-risks-and-opportunities/","slug":"internet-of-things-security-compliance-risks-and-opportunities","thumbnail":"https://staging.business.com/images/content/563/a62962f87b1ce328b459a/1500-0-","dek":"The Internet of Things (IoT) is pushing an information-driven shift to connected devices in the enterprise world at large.","lastModified":"2019-07-31T20:56:29Z","published":"2015-11-06T21:00:00Z","sponsored":null},{"title":"Threats to Cybersecurity Increasing: How to Secure Your Network","canonical":"https://staging.business.com/articles/threats-cybersecurity-increasing-secure-network/","slug":"threats-cybersecurity-increasing-secure-network","thumbnail":"https://staging.business.com/images/content/53e/91ab4c9786bdec767a812/1500-0-","dek":"Cybersecurity threats are increasing at an alarming rate. Make sure your small business network is secure by following these recommended...","lastModified":"2014-04-24T12:00:46Z","published":"2014-04-24T12:00:46Z","sponsored":null},{"title":"Tech Evolution: Will Internet of Things Die Before it Gets a Chance?","canonical":"https://staging.business.com/articles/will-internet-of-things-die-before-it-gets-a-chance/","slug":"will-internet-of-things-die-before-it-gets-a-chance","thumbnail":"https://staging.business.com/images/content/574/4a4742f87b181186c18bb/1500-0-","dek":"For all the positivity surrounding IoT predictions, the Internet of Things is far from a sure thing. Read this article to find out why.","lastModified":"2016-05-25T13:00:00Z","published":"2016-05-25T13:00:00Z","sponsored":null},{"title":"Threats to Internet Security for Businesses","canonical":"https://staging.business.com/articles/threats-to-internet-security-for-businesses/","slug":"threats-to-internet-security-for-businesses","thumbnail":"https://staging.business.com/images/content/53b/32693cc786bf9960f83ac/1500-0-","dek":"Gain awareness of the multiple threats to internet security that exist, including what to look for and how to prevent from becoming a victim","lastModified":"2014-06-26T22:35:00Z","published":"2014-06-26T22:35:00Z","sponsored":null},{"title":"How to Protect Your Small Business From Cyber Attacks","canonical":"https://staging.business.com/articles/how-to-protect-your-small-business-from-cyber-attacks/","slug":"how-to-protect-your-small-business-from-cyber-attacks","thumbnail":"https://staging.business.com/images/content/54b/e00243287b164348b45d3/1500-0-","dek":"Cyber criminals are the newest and baddest breed of criminals and SMBs are most vulnerable to attacks. Here's how to protect your business.","lastModified":"2015-01-20T14:00:00Z","published":"2015-01-20T14:00:00Z","sponsored":null},{"title":"From IoT to Wearables: The 3 Technology Trends You Need to Watch in 2016","canonical":"https://staging.business.com/articles/3-technology-trends-to-watch-in-2016/","slug":"3-technology-trends-to-watch-in-2016","thumbnail":"https://staging.business.com/images/content/56c/f67803287b17e0f10de18/1500-0-","dek":"From biometrics to the Internet of Things, rapid technology innovation is changing the game for small businesses. Are you keeping up?","lastModified":"2016-02-26T22:00:00Z","published":"2016-02-26T22:00:00Z","sponsored":null},{"title":"Six Sigma and the IoT Workplace: Internet of Things Brings a New World of Opportunity","canonical":"https://staging.business.com/articles/six-sigma-and-the-iot-workplace-internet-of-things-brings-a-new-world-of-opportunity/","slug":"six-sigma-and-the-iot-workplace-internet-of-things-brings-a-new-world-of-opportunity","thumbnail":"https://staging.business.com/images/content/56c/60a183187b13f366040c1/1500-0-","dek":"The Internet of Things delivers new opportunities, but a Six Sigma driven process is what drives real change in this new era.","lastModified":"2016-02-19T14:00:00Z","published":"2016-02-19T14:00:00Z","sponsored":null},{"title":"4 Security Tips to Keep Your Business Safe","canonical":"https://www.business.com/articles/four-security-tips-to-keep-your-business-safe/","slug":"four-security-tips-to-keep-your-business-safe","thumbnail":"https://www.business.com/images/content/5e9/5f4695a215e1d118b458a/1500-0-","dek":"Keep your business secure with these four simple tips.","lastModified":"2020-04-14T23:17:00Z","published":"2017-08-16T17:57:00Z","sponsored":false},{"title":"4 Enterprise Marketing Technologies Destined to Disrupt Small Business","canonical":"https://staging.business.com/articles/4-enterprise-marketing-technologies-destined-to-disrupt-small-business/","slug":"4-enterprise-marketing-technologies-destined-to-disrupt-small-business","thumbnail":"https://staging.business.com/images/content/57b/9de8a3287b19f3586c927/1500-0-","dek":"These four enterprise marketing technologies will disrupt SMBs sooner than you think. From the IoT to AI Chat Bots, see what's coming.","lastModified":"2016-08-22T18:00:00Z","published":"2016-08-22T18:00:00Z","sponsored":null},{"title":"Under Cyber-Attack: Steps to a More Secure Small Business","canonical":"https://staging.business.com/articles/under-cyber-attack-steps-to-a-more-secure-small-business/","slug":"under-cyber-attack-steps-to-a-more-secure-small-business","thumbnail":"https://staging.business.com/images/content/53e/91b55c9786bdec767acf4/1500-0-","dek":"With the right security software, systems and strategy in place, you can reduce the risks your business could be susceptible to from...","lastModified":"2013-06-20T12:00:02Z","published":"2013-06-20T12:00:02Z","sponsored":null}],"relatedReviews":[{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5df908cc5a215e8c4a8b4568/conferencecall_Antonio_Diaz_Getty.jpg","canonical":"https://staging.business.com/categories/best-conference-call-services/","title":"The Best Conference Call Services of 2021","dek":"Which conference call service is right for your business in 2021? We review the top-rated services.","slug":"best-conference-call-services","lastModified":"2021-03-17T18:17:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5e00d4787b43745d6a8b456e/Laptop_undrey_getty.jpg","canonical":"https://staging.business.com/categories/employee-monitoring-software/","title":"The Best Employee Monitoring Software of 2021","dek":"We've narrowed down the best employee monitoring software for businesses. Check out our best picks and reviews.","slug":"employee-monitoring-software","lastModified":"2021-03-05T15:40:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5df905909c658a7e538b4567/Faxing_junce_Getty.jpg","canonical":"https://staging.business.com/categories/online-fax-services/","title":"The Best Online Fax Services of 2021","dek":"Online fax services are growing as more companies divest from conventional fax machines in favor of an automated, scalable and cost-effective option. Here's a look at some of the best online fax services on the market. ","slug":"online-fax-services","lastModified":"2021-03-02T16:07:00Z"}],"relatedSponsoredArticles":null}},"pageContext":{"displayModified":"2017-05-25T18:59:00.000Z","template":"legacy","title":"How Real are the IoT Security Concerns?","meta":{"robots":"index, follow"},"docType":"articles","slug":"maria-marinina-internet-of-things-security","canonical":"https://staging.business.com/articles/maria-marinina-internet-of-things-security/","skipTOC":false}},"staticQueryHashes":[]}