Securing Devices in the Internet of Things

Anyone doing IoT would be safe and secure operation of devices. Devices are one of the most critical elements in the Internet of Things (IoT). Security breaches at the device level could result in severe damage including financial losses, loss Rather, it is a result of multiple points. The more it is a result of multiple occurrence. However, there are several challenges in designing security measures within these devices; there are times that impenetrable would misigrate these breaches and in mines.Developers need to be able to identify "just enough" security measures that need to be put in place.

The security of these devices is difficult to have these devices are vulnerable to not just network borne threats but to physical tampering as well. Even though there might be be many security measures that developers can put into place, it is important to identify the accurate amount of measures that would be most effective and Should be put in place.

While designing security in devices, developers come across a variety of challenges; with a small footprint and limited computing resources, heavy security measures would hinder the performance of this device. This "just enough" security, these developers rely on three criteria:

– is it within closed door in a secured location, or out in the open in a public environment. – 
How it is connected connected with communicating with the network? Public Or A A Private Network, Is It Behind A Firewall, Is There Any Form Of Encryption Employed. 
3. The Type Of Data The Device Is Storing -? The Sensitivity Of The Data Been Stored By The Device.

Based on the answer to these questions, it is always preferred to have access to the operating system that would enable the user to choose the most suitable security measures from a set as you can see in this animated overview video.
But these criteria allow the them. There are plenty of them. They are necessary to to ensure that measures are implemented every stage of the device lifecycle, from the initial design to the operational environment.

• Design phase: it is critical to ensure that no malicious code gets reached through signed binary delivery, assuring the authenticity and non-alteration of code, and development on a software platform that has been Certi fi ed under under industrial security standards such as IEC 62443 and IEC 27034.

• Execute phase: the aim of the right software is in place on the right handed by using established established technology using cryptographic key signatures to prevent unsigned code from getting executed .

• Operate phase: multiple measures can be deployed to prevent malicious attacks in operation mode, including controls to prevent unauthorized access and securing networks using encryption.

• Power Down phase: when the device is at rest, measures such as encrypted storage and secure data containers should be in place to prevent on board data access.

The breach took place by compromising the point of sale (POS) devices to A thorough breakdown of the incident showed how the breach was accessible the multiple access point failures, starting from the HVAC systems not being isolated which gave the hackers direct access to the POS systems Through these POS systems the hackers gained unhindered access to the cash registers, where they reverse engineered the code to gain real time data of the customer's credit and debit card credentials every time someone would make a purchase.The depth to which these hackers had gained access would have ensured they remained invisible had outside investigators not discovered the anomalies and alerted the retailer.

The post Securing Devices in the Internet of Things appeared first on Baltimore Tech.

from http://baltimoretech.org/news/securing-devices-in-the-internet-of-things/