Tackling the threat to enterprises (or their service providers) rolling out new IoT services

Lee Munson of Comparitech.com

At its heart, the trouble with IoT is the rush to market exhibited by many manufacturers who see the business need to fill a gap or provide a useful service, but overlook the essential need to bake security in from the get-go.

For individuals adding network-enabled smart TVs, door locks, and fridges to their home networks, says Lee Munson of Comparitech.com, the risks tend to be based around home security and privacy but for the enterprise, the potential issues are far more varied and concerning.

Insecure personal devices and large scale deployments of more commercial devices, such as traffic cameras, will continue to be overtaken by botnets, intent on leveraging their power to cause disruption through huge DDoS attacks.

Less obvious devices, such as those tools used in the home to play music or dim lights via a voice command, will find their way into the enterprise where the chances of them being subpoenaed in a murder case are far less than the opportunity of being abused for corporate espionage.

Immediate concerns would surround more ‘traditional’ data breaches though.

As any information security professional would attest, connecting unprotected devices to an existing network is never a good idea, especially if additional precautions aren’t taken. And, in the case of IoT, the likelihood of that happening is much the same as in the early days of bringing your own device – employees will want to add the latest gadgets, either to make their lives easier or for the wow factor, without considering the consequences.

As a result, the opportunities for an attacker looking to penetrate an otherwise secure network will be greatly enhanced and the number of headaches faced by the security department is only going to rise.

Beyond that, the data collection abilities of IoT devices may also prove concerning for many businesses. With GDPR looming very close on the horizon, data privacy officers will be acutely aware of the need to know what personal information is being collected by the business and how and where it is being stored.

Thus, it is important that every business, whether it is using IoT services as part of its business plan, or on an ad hoc or casual basis, takes the necessary steps to secure them.

Hopefully, the first step will be in demanding secure IoT devices in the first place as this market, and its associated risks, will not change until that becomes a key part of the buying process.

Secondly, risk assessments will need to be undertaken so that vulnerabilities are identified and mitigated in an appropriate manner.

And, lastly, I believe staff needs to be educated on the inherent risks brought about through the use of such technology, both from a security point of view and a privacy standpoint.

The author of this blog is Lee Munson, senior security researcher at Comparitech.com

Comment on this article below or via Twitter: @IoTNow OR @jcIoTnow


Axiomtek launches compact DIN-rail IIOT gateway for data driven energy

Posted on: November 30, 2022

Axiomtek, a world-renowned specialist relentlessly devoted in the research, development, and manufacture of series of innovative and reliable industrial computer products of high efficiency is pleased to announce the ICO120-E3350, an extremely compact industrial IoT gateway powered by the Intel Celeron processor N3350 (codename: Apollo Lake-M). The ruggedised designs feature fanless operation, -40°C to 70°C

Read more

Semtech, AWS to create low-power IoT track and trace services with LoRa cloud geolocation

Posted on: November 30, 2022

Please replace the release with the following corrected version due to multiple revisions to the Forward-Looking and Cautionary Statements.

Read more

The IoT Adoption Boom – Everything You Need to Know

Posted on: September 28, 2022

In an age when we seem to go through technology boom after technology boom, it’s hard to imagine one sticking out. However, IoT adoption, or the Internet of Things adoption, is leading the charge to dominate the next decade’s discussion around business IT. Below, we’ll discuss the current boom, what’s driving it, where it’s going,

Read more

9 IoT applications that will change everything

Posted on: September 1, 2021

Whether you are a future-minded CEO, tech-driven CEO or IT leader, you’ve come across the term IoT before. It’s often used alongside superlatives regarding how it will revolutionize the way you work, play, and live. But is it just another buzzword, or is it the as-promised technological holy grail? The truth is that Internet of

Read more

Which IoT Platform 2021? IoT Now Enterprise Buyers’ Guide

Posted on: August 30, 2021

There are several different parts in a complete IoT solution, all of which must work together to get the result needed, write IoT Now Enterprise Buyers’ Guide – Which IoT Platform 2021? authors Robin Duke-Woolley, the CEO and Bill Ingle, a senior analyst, at Beecham Research. Figure 1 shows these parts and, although not all

Read more

CAT-M1 vs NB-IoT – examining the real differences

Posted on: June 21, 2021

As industry players look to provide the next generation of IoT connectivity, two different standards have emerged under release 13 of 3GPP – CAT-M1 and NB-IoT.

Read more

IoT and home automation: What does the future hold?

Posted on: June 10, 2020

Once a dream, home automation using iot is slowly but steadily becoming a part of daily lives around the world. In fact, it is believed that the global market for smart home automation will reach $40 billion by 2020.

Read more

5 challenges still facing the Internet of Things

Posted on: June 3, 2020

The Internet of Things (IoT) has quickly become a huge part of how people live, communicate and do business. All around the world, web-enabled devices are turning our world into a more switched-on place to live.

Read more

What is IoT?

Posted on: July 7, 2019

What is IoT Data as a new oil IoT connectivity What is IoT video So what’s IoT? The phrase ‘Internet of Things’ (IoT) is officially everywhere. It constantly shows up in my Google news feed, the weekend tech supplements are waxing lyrical about it and the volume of marketing emails I receive advertising ‘smart, connected

Read more