{"id":16415,"date":"2022-02-24T23:28:08","date_gmt":"2022-02-24T23:28:08","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/02\/24\/cybersecurity-threats-securing-the-internet-of-things\/"},"modified":"2022-02-24T23:28:08","modified_gmt":"2022-02-24T23:28:08","slug":"cybersecurity-threats-securing-the-internet-of-things","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/02\/24\/cybersecurity-threats-securing-the-internet-of-things\/","title":{"rendered":"Cybersecurity Threats: Securing the Internet of Things"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

From a security operations viewpoint, hackers can hack anything linked to those billions of IoT devices. Safeguarding them is no simple feat. Today with the Ukraine situation and the Russian Aggressors \u2014 I feel kind of personal about this topic.<\/p>\n

The Internet of Things (IoT) typically refers to items and equipment that can be accessed, addressed, and controlled remotely. We\u2019ve seen how those capabilities have played out just this week.<\/p>\n

Okay \u2014 I admit it \u2014 I like the day to day conveniences of home devices<\/h3>\n

At home, and at work, I can start and operate many machine-to-machine and machine-to-human communications.<\/p>\n

These helps we have deployed in our lives include edge computing devices, household appliances, wearable technologies, and even my car that bosses me around. IoT is the fusion of the physical and digital worlds.<\/p>\n

Experts predict over 30 billion IoT connections by 2025 \u2014 which means at or above four IoT devices per person.<\/p>\n

Put another way; there are billions of sensors connected and interacting on these devices (iot-analytics.com).<\/p>\n

Every second, 127 new gadgets connect to the internet, according to McKinsey Global Institute. (Take a look at the device mapping from cars on the McKinsey dotcom media site.) From a security operations viewpoint, hackers can hack anything linked to those billions of IoT devices. That\u2019s a lot of IoT devices \u2014 and safeguarding them is no simple feat.<\/p>\n

Especially with so many different device kinds and security requirements.<\/p>\n

The IoT Security Risk<\/h3>\n

Each IoT device is a potential hacker entry point into your data. And a threat to your supply chain.<\/a>\u00a0 This is according to a Comcast report. Laptops, PCs, cellphones, tablets, networked cameras and storage devices, and streaming video gadgets are the most susceptible.<\/p>\n

I wasn\u2019t overly worried about all of our IoT Security Risks until last night when I heard the news from Ukraine and our office started pinging each other. We have wonderful devs working on everything \u2014 but now what?<\/p>\n

Insights on cyber-<\/em><\/h4>\n

Monthly threats to a household average is about 104 tries against your devices. Other than that, most IoT devices have limited processing and storage capabilities. This makes using antivirus, firewalls, and other security software<\/a> difficult.<\/p>\n

As edge computing gathers local data, it becomes a concentrated target for skilled threat actors. For instance, along with IoT hardware, ransomware may attack apps and data. For example, Check Point Research showed a 50% rise in daily average ransomware assaults in the third quarter of 2021 compared to the first half. The uptick is blamed on the pandemic.<\/p>\n

Distant work trends and remote offices<\/a> are increasing the incidence of IoT assaults. You must understand the dangerous landscape and up your game to help protect yourself.<\/p>\n

Main dangers to IoT according to US General Accounting Office (GAO):<\/strong><\/p>\n

DDoS Malware<\/a><\/p>\n

Passive<\/p>\n

Wiretapping<\/p>\n

SQL injection (controls a web application\u2019s database server)<\/p>\n

For instance, wardriving (search for WiFi networks by a person in a moving vehicle)<\/p>\n

Zero-day flaws<\/p>\n

Also, cybercriminals discuss vulnerabilities and attack hits on the Dark Web and online forums, making some of the GAO\u2019s assault tactics more complex.<\/p>\n

Threat actors include hacktivists, criminal organizations<\/a>, and nation-states. In addition to understanding threat vectors and attackers, it is critical to understand the following areas:<\/p>\n

SEC Supply Chain Vulnerabilities:<\/h3>\n

Therefore it exacerbates supply chain vulnerabilities. For example, weaving networks and gadgets together, IoT exponential connection. Meanwhile increasing endpoint integration<\/a> and a fast expanding and poorly regulated attack surface threaten the IoT. Using IoT endpoints, hackers may crash websites by flooding them with traffic requests.<\/p>\n

According to a 2017 survey by Altman Vilandrie & Company, over half of US companies employing IoT have suffered cybersecurity breaches.<\/strong><\/p>\n

However, many more companies were likely victims but did not disclose. ABFJournal stated \u2013 Nearly Half of US IoT Firms Have Security Breaches. As of now, there are 44 billion IoT endpoints worldwide, and authorities expect the figure to treble by 2025. IoT endpoints 2020: pushing industries and use cases (i-scoop.EU)
<\/em><\/p>\n

In 2017, \u201cWannaCry\u201d ransomware emerged.<\/h4>\n

WannaCry harmed governments, organizations, and networks connected to IoT. The malware<\/a> hit over 100 nations and tens of thousands of IoT devices in May of 2017.<\/p>\n

Interaction between OT and IT operating systems, especially critical infrastructure, is another security issue. Adversaries have improved their understanding of control systems and attack them with weaponized malware.<\/p>\n

Security by Design<\/h4>\n

The industrial internet of things and operational technologies have increased the attack surface. Operators of energy infrastructure should employ \u201csecurity by design.\u201d<\/p>\n

Energy Infrastructure Needs Security by Design, Says GovCon Expert Chuck Brooks (govconwire.com) However, every cyber attack approach applies to the IoT ecosystem, IT, and OT.<\/p>\n

It will need even more sophisticated security for all IoT endpoints in the future and all individuals and businesses will want to be more vigilant.<\/p>\n

The Cybersecurity Act:<\/h3>\n

The good news is that policymakers finally get it \u2014 but is it too late. A new Cybersecurity Improvement Act in Congress requires OEMs in areas including medical devices, automobiles, and critical infrastructure to design specific products to reduce susceptibility during operation.<\/p>\n

The Cybersecurity Improvement Act provides standards for IoT adoption and security vulnerability management. But like the last word says \u2014 it has to be managed, and that means by people who know what they are doing.<\/p>\n

IoT Cybersecurity Solutions and Services<\/h3>\n

Risk management is essential in every security situation, physical or digital. IoT incorporates both. Understanding the IoT landscape is critical to cyber-securing IoT.<\/p>\n

It\u2019s the most excellent feeling to know how to secure your most valuable things. Also, preventing and resolving security events and breaches is prudent. There is a range of solutions, services, and standards to analyze when a corporation or organization considers risk management architecture.<\/p>\n

Below are measures and examples of IoT security concerns that the C-Suite may employ to help solve some of the security issues. At the bare minimum \u2014 keep running this check list.<\/p>\n