Cyberstudy
PDF p.174 In progress

Internet of Things

Open PDF at p.174 36 flashcards

Summary

PDF p.174

The Internet of Things (IoT) refers to the network of physical devices embedded with sensors, software, and connectivity, enabling them to collect and exchange data. IoT devices communicate over the Internet, often using cloud-based systems for data analytics.

In plain words

Supplementary — not from your PDF

IoT devices have sensors and actuators and connect to the Internet, usually reporting to cloud services. They're cheap and everywhere (smart homes, cities, healthcare, agriculture), but often weak on security: little processing power, no standards, rushed to market. The Mirai botnet and a casino hacked through a smart thermometer show the risk. Frameworks from IoTSF, IIC, CSA and ETSI give best practice.

Detailed explanation

PDF p.174
  • Sensors and Actuators
    • Sensors: Detect changes in the physical environment (e.g., temperature, humidity, motion).
    • Actuators: Perform actions based on sensor data (e.g., turning on lights, adjusting thermostats).
  • IoT Communication
    • Internet Connectivity: IoT devices communicate with each other and cloud-based systems.
    • Data Exchange: Enables data collection and instruction reception.
  • IoT Examples
    • Smart Homes: Control lighting, temperature, security systems remotely.
    • Smart Cities: Manage traffic, monitor air quality, improve public safety.
    • Healthcare: Wearables and implantable devices collect and send patient data.
    • Agriculture: Sensors monitor soil conditions, weather, crop growth.
  • Factors Driving IoT Adoption
    • Cost Reduction: Decreased cost of IoT sensors and devices.
    • Connectivity Advances: Improved connectivity with 5G and low-power networks.
    • Data Analytics: New tools and techniques for analyzing IoT data.
    • COVID-19 Impact: Accelerated adoption in healthcare for remote monitoring.
  • Security Risks Associated with IoT
    • Inadequate Security Measures: Limited processing power and memory make strong security controls difficult.
    • Lack of Standardization: Compatibility issues and varying security requirements.
    • Data Volume: Increased risk of data breaches and cyberattacks.
  • Examples of IoT Security Issues
    • Mirai Botnet Attack: Infected IoT devices used for DDoS attacks.
    • Casino Hack: Smart thermometer used as a backdoor to access the network.
    • Spying: Hacked baby monitors and home security cameras.
  • Reasons for Poor IoT Security
    • Focus on Functionality: Security often overlooked in design.
    • Cost Constraints: Low-cost devices may lack robust security features.
    • Rushed to Market: Insufficient security testing.
  • Best Practice Guidance for IoT
    • Internet of Things Security Foundation (IoTSF): IoTSF
    • Industrial Internet Consortium (IIC) Security Framework: IIC Security Framework
    • Cloud Security Alliance (CSA) IoT Security Controls Framework: CSA IoT Security Controls Framework
    • European Telecommunications Standards Institute (ETSI) IoT Security Standards: ETSI IoT Security Standards

Important terms

taken from the text above
Sensors
Detect changes in the physical environment (e.g., temperature, humidity, motion).
Actuators
Perform actions based on sensor data (e.g., turning on lights, adjusting thermostats).
Internet Connectivity
IoT devices communicate with each other and cloud-based systems.
Data Exchange
Enables data collection and instruction reception.
Smart Homes
Control lighting, temperature, security systems remotely.
Smart Cities
Manage traffic, monitor air quality, improve public safety.
Healthcare
Wearables and implantable devices collect and send patient data.
Agriculture
Sensors monitor soil conditions, weather, crop growth.
Cost Reduction
Decreased cost of IoT sensors and devices.
Connectivity Advances
Improved connectivity with 5G and low-power networks.
Data Analytics
New tools and techniques for analyzing IoT data.
COVID-19 Impact
Accelerated adoption in healthcare for remote monitoring.
Inadequate Security Measures
Limited processing power and memory make strong security controls difficult.
Lack of Standardization
Compatibility issues and varying security requirements.
Data Volume
Increased risk of data breaches and cyberattacks.
Mirai Botnet Attack
Infected IoT devices used for DDoS attacks.
Casino Hack
Smart thermometer used as a backdoor to access the network.
Spying
Hacked baby monitors and home security cameras.
Focus on Functionality
Security often overlooked in design.
Cost Constraints
Low-cost devices may lack robust security features.
Rushed to Market
Insufficient security testing.
Internet of Things Security Foundation (IoTSF)
IoTSF
Industrial Internet Consortium (IIC) Security Framework
IIC Security Framework
Cloud Security Alliance (CSA) IoT Security Controls Framework
CSA IoT Security Controls Framework
European Telecommunications Standards Institute (ETSI) IoT Security Standards
ETSI IoT Security Standards
IoT Internet of Things IoTSF Internet of Things Security Foundation IIC Industrial Internet Consortium CSA Cloud Security Alliance ETSI European Telecommunications Standards Institute

Examples & real-world scenarios

Supplementary — not from your PDF
  • A smart thermostat that adjusts heating from sensor data.
  • Wearables sending patient data to a clinic.
  • Soil sensors on a farm.

Scenario

An office installs smart TVs and cameras on the main network. Putting IoT devices on their own VLAN with restricted access limits the damage if one is compromised.

Common mistakes

Supplementary — not from your PDF
  • Leaving default credentials on IoT devices.
  • Putting IoT devices on the same network as sensitive systems.

Practical skills

Supplementary — not from your PDF
  • Draw up an IoT onboarding checklist: change credentials, update firmware, segment, monitor.

What I should remember

Key Points PDF p.174
  • Sensors and Actuators: Detect changes and perform actions.
  • IoT Communication: Internet connectivity for data exchange.
  • Examples: Smart homes, cities, healthcare, agriculture.
  • Adoption Factors: Cost reduction, connectivity advances, data analytics, COVID-19 impact.
  • Security Risks: Inadequate measures, lack of standardization, data volume.
  • Security Issues: Mirai botnet, casino hack, spying.
  • Poor Security Reasons: Focus on functionality, cost constraints, rushed to market.
  • Best Practices: IoTSF, IIC, CSA, ETSI guidelines.