The increased adoption of IoT — whether it is due to the key benefits driven by this technology or because it was necessary during the pandemic — is creating a demand for clearly-defined cybersecurity measures. The number of IoT connected devices is estimated to reach 25.2 billion in 2025, which is up from 6.3 billion in 2016. With so many connected devices sharing critical data, risk mitigation is highly crucial.
Cybersecurity has seen many iterations in protecting data and endpoints for decades. From antivirus scanners to endpoint protection platforms, the methods for guarding against viruses and malware have needed to swiftly adapt as the threats themselves have adapted.
And now, with the globe’s digital footprint on an upward trajectory, the latest trend is the cybersecurity mesh. This method is a response to the increasing number of connections that exist all around us and that have a murkier definition of network access.
According to Gartner’s Top Strategic Technology Trends for 2021, the cybersecurity mesh provides the plasticity needed to respond to the acceleration of digital business. The idea of the mesh is based on the platform that networks have no physical boundaries.
In light of this, the cybersecurity mesh is defined around a particular person, such as an individual employee within an organisation, or a thing — like an IoT device. This way, the security infrastructure can build perimeters around access points comprised of a larger ecosystem, in lieu of creating a cybersecurity perimeter around a central point and then trying to expand it to enclose all people and things within.
This also allows network management to maintain security at a differentiated level of access to the various parts of the network. With digital connections continuing to spread, as well as mission-critical data being communicated in future use cases of surgical robotics and autonomous vehicles, the need to secure each endpoint is essential.
On Dec. 4, 2020, the IoT Cybersecurity Act was signed into law to govern IoT devices leveraged by government agencies. Government regulation of IoT security helps protect against vulnerabilities in future devices utilised by the government and will ultimately prohibit non-protected devices currently in use.
This landmark legislation requires that guidelines be set forth by the National Institute of Standards and Technology (NIST). The NIST must create standards around identifying and managing security vulnerabilities, secure development, identity management, patching, and configuration management. IoT devices are categorised as hardware that can connect to the Internet and contain at least one sensor.
While this only applies to IoT devices in the government sector, this law targets manufacturers aimed at selling IoT solutions to the government. This may ultimately create a trickledown to the private sector in which all IoT device manufacturers adhere to stricter security guidelines.
It may be unclear whether the new legislation will set off a tidal wave of rigorous cybersecurity enforcement, but it sets a good precedent as the world becomes more and more connected. Security by design is an incredibly important strategy when implementing an IoT ecosystem.
Security by design covers more than just endpoints — it also encompasses the gateways, routers, data centers, as well as cloud security when creating an IoT ecosystem to help secure not just where data travels but how it travels.
With this method, security is designed at the forefront of an IoT project, which makes it easier and much more comprehensive to secure all components of an IoT stack as it is being built.
But security is an ongoing process, which is why network security as a service is becoming a popular option among IoT adopters. With insight into endpoints and the network, users have the greatest level of visibility into threats and anomalies.
KORE SecurityPro™ is an award-winning security management solution that allows for real-time traffic monitoring, rule-based alerts and actions, and endpoint management. SecurityPro detects a multitude of conditions, which allows for granular insight into a network to mitigate issues beforehand, or react in real-time if or when anomalies are flagged.
Interested in learning more? Check out our eBook “Placing Security at the Forefront of IoT” for more details on security trends and topics for 2021.
U3GM Blog Post Comments