3

Are you aware of any publicly available documents that would help IoT/Connected product creators develop a systematic/programmatic approach and/or process to securing such new age devices?

2

A note about the wording of the question. You've asked about IoT but this is more of a concept than a "thing". IoT might cover many subjects from industrial controls to smart cities with home automation in between.

However, the following may be of help.

The approaches should, of course, mirror any other security driven approach. Though we have some added twists for IoT:

  • Embedded devices may not have sufficient power to maintain standard security protocols as they can't always cope with the encryption overheads.
  • Embedded devices may be difficult to upgrade making it hard or sometimes impossible to fix security issues discovered after deployment.

One area where I'm trying to make a difference is to try and get standard contracts changed to require vendors to ensure that devices can be upgraded after deployment to keep them current and to fix security issues. So we shouldn't assume that issues and fixes always have to be technical.


Just a note about this answer. Because of the question, the answer is inevitably a set of links to other information - normally frowned upon in Stack. It is likely that these links will drift over time which is why I've tried to give the titles where possible so they can be searched for.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.