In a recent hearing in the House of Representatives the question was asked whether it is feasible to create one set of security standards for all IoT devices. One of the panellists said yes and the other two said no.

I was a bit puzzled by this. I would guess that it would be extremely difficult to have one standard for so many different types of products (refrigerators, cars, HVAC units, ...). I was wondering if someone familiar with the discussion could summarize the arguments for answering the question in the affirmative.

  • See Common Criteria, et al. In theory it provides a good baseline for things, but in practice it's useless because it doesn't provide a lot of tangible security benefits. – Steve Nov 23 '16 at 20:04
  • "the more you tighten your grasp the more systems will slip through your fingers" – user123931 Nov 23 '16 at 21:16
  • No. Everything related to the internet is a kind of big polite agreement which the big players comply by. IoT and security are currently at opposite extremes. – Overmind Nov 24 '16 at 7:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.