The very term Internet of Things (IoT) can sound like the buzziest of buzzwords. We all know we need to be aware of and plan for it, but sifting through all the security guidance about the IoT can be overwhelming.
Moving Beyond Buzzwords
To help cut through the noise, IBM released a new report, “Smart Things Call for Smart Risk Management,” detailing five key facts about the IoT to help security teams build IoT security into their risk management program. Users and manufacturers of connected devices and solutions can take action to reduce security risks by understanding these basic facts about the IoT.
Security technology is usually most efficient and effective when it is built in during the design and implementation phases. To ensure systems are functioning as expected, even when under attack, IoT systems can be tested with red team experts and monitored by specialized IoT platforms.
Read the complete report: Smart things call for smart risk management
The Increasing Value of IoT Security
According to Gartner, the number of connected things in use worldwide will exceed 20 billion by 2020. As the IoT becomes more ingrained into everyday business and our personal lives, we will be increasingly dependent on the data, insights and value it brings. However, it is important not to take these contributions to business and society for granted.
One particular area of potential complacency is security: As IoT adoption and value increases, it becomes even more important to secure the investments made and benefits accrued.
IoT risks and vulnerabilities vary widely, from annoying security issues to potentially apocalyptic exposures. Devil’s Ivy for example, exploited a flaw on connected cameras that enabled perpetrators to view video feeds and block access. More serious threats included unpatched vulnerabilities in radiation monitoring devices (RMDs) that could be used by attackers to endanger critical infrastructure.
The traditional approach of air-gapped security controls is also at risk as devices and solutions become more connected. Supervisory control and data acquisition (SCADA) and industrial control system (ICS) technologies are now under threat from a growing list of malicious actors. Furthermore, innovation in medical practices and the application of IoT in health care highlights the importance of protecting sensitive personal data.
Learn More
At this year’s Black Hat, IBM announced the launch of two new security testing practice areas focused on automotive security and the IoT. The announcement emphasized the importance of a multipronged approach to IoT security. Access to X-Force Red penetration testing alongside the trusted Watson IoT Platform is of paramount importance to solution developers and adopters.
To learn more about building IoT security into your risk management program, read the IBM report, “Smart Things Call for Smart Risk Management.”
Global Offering Manager, IBM Security
Executive Security Advisor, IBM Security