212
Internet of Things (IoT)
11.1 Introduction
The IoT devices and services, which are not well secured, can cater the potential entry
of cyberattacks and leave the data streams poorly protected as a result of exposing the
user data to unauthorized access. Due to the presence of interconnectivity feature of IoT
devices, also the devices that are not securely connected online affect the global security
and capacity to recover quickly from difficulties. As shown in Figure 11.1a and b, an IoT
schematic has its applications in various fields.
Looking into the ethics and principles, the developers and users of IoT systems and
devices bear a collective obligation to ensure that IoT systems and devices do not make
the Internet and other users vulnerable to any potential harm. This calls for an interconnected approach to ensure the security in order to come up with pertinent and effectual
IoT solutions. Being frequent users of the Internet, a certain level of trust over the Internet
and the connected devices is highly required, that is, because if people don’t believe the
information exchange and their connections are safe and secure from harm, it would
result in their reluctance in the use of the Internet.
Many IoT devices would be used in the circumstances that make it very difficult to
upgrade or reconfigure them. The reasons might be their deployment with longer anticipated service durability than what they are originally associated with or their upgrade
process is cumbersome or impractical. At times, they have to be abandoned as they are
left with no means of support in long terms, due to which they might outlive the company that designed them. The aforementioned scenarios indicate that the mechanisms
adopted for security that is sufficient at the time of deployment of the device or system
might not be sufficient to check the evolving and upcoming security threats for its full
lifespan. This could lead to the long-term and persistent vulnerabilities. Whenever the
manufacturer provides an update, there could be a change in functions as well without
any notification, which leaves the user vulnerable to whatever changes the manufacturer makes. In this way, the management and support of IoT is a prevailing security
challenge in longer terms.
In some cases, the IoT devices hold very little or no visibility into the internal function of the device or the data streams they produce. This makes the device vulnerable in
such a way that it leads the user to believe an IoT device is performing certain functions
when it might be undergoing undesirable data collection which the user does not intend
to provide.
Previous models of IoT would be the products of large private or public technology
enterprises, but in the future, the technologies with customized features and the ones
built by the users themselves would be more prevalent as mentioned by Raspberry Pi60
and Arduino developer communities. These technologies may or may not take the industry
security standards into consideration.
The technology that we consume today is going to create a major disruption where
people absolutely connect things and are becoming connected; we are going to see some
fundamental changes in how we interact with the world, for example, People will be moving from the Internet to Consumption of things through Internet. The way the IoT is currently
set up where huge content on the Internet is generated, people request for data over the
Internet from uploading videos, writing, or whatever we are doing. There is a lot of really
interesting second- and third-order effects to this—for one, it means that the Internet does
not have any kind of objective view of the world—at best, it has an amalgamated set of
subjective views, from which it can tease out what the real world is like.
Internet of Things (IoT)
11.1 Introduction
The IoT devices and services, which are not well secured, can cater the potential entry
of cyberattacks and leave the data streams poorly protected as a result of exposing the
user data to unauthorized access. Due to the presence of interconnectivity feature of IoT
devices, also the devices that are not securely connected online affect the global security
and capacity to recover quickly from difficulties. As shown in Figure 11.1a and b, an IoT
schematic has its applications in various fields.
Looking into the ethics and principles, the developers and users of IoT systems and
devices bear a collective obligation to ensure that IoT systems and devices do not make
the Internet and other users vulnerable to any potential harm. This calls for an interconnected approach to ensure the security in order to come up with pertinent and effectual
IoT solutions. Being frequent users of the Internet, a certain level of trust over the Internet
and the connected devices is highly required, that is, because if people don’t believe the
information exchange and their connections are safe and secure from harm, it would
result in their reluctance in the use of the Internet.
Many IoT devices would be used in the circumstances that make it very difficult to
upgrade or reconfigure them. The reasons might be their deployment with longer anticipated service durability than what they are originally associated with or their upgrade
process is cumbersome or impractical. At times, they have to be abandoned as they are
left with no means of support in long terms, due to which they might outlive the company that designed them. The aforementioned scenarios indicate that the mechanisms
adopted for security that is sufficient at the time of deployment of the device or system
might not be sufficient to check the evolving and upcoming security threats for its full
lifespan. This could lead to the long-term and persistent vulnerabilities. Whenever the
manufacturer provides an update, there could be a change in functions as well without
any notification, which leaves the user vulnerable to whatever changes the manufacturer makes. In this way, the management and support of IoT is a prevailing security
challenge in longer terms.
In some cases, the IoT devices hold very little or no visibility into the internal function of the device or the data streams they produce. This makes the device vulnerable in
such a way that it leads the user to believe an IoT device is performing certain functions
when it might be undergoing undesirable data collection which the user does not intend
to provide.
Previous models of IoT would be the products of large private or public technology
enterprises, but in the future, the technologies with customized features and the ones
built by the users themselves would be more prevalent as mentioned by Raspberry Pi60
and Arduino developer communities. These technologies may or may not take the industry
security standards into consideration.
The technology that we consume today is going to create a major disruption where
people absolutely connect things and are becoming connected; we are going to see some
fundamental changes in how we interact with the world, for example, People will be moving from the Internet to Consumption of things through Internet. The way the IoT is currently
set up where huge content on the Internet is generated, people request for data over the
Internet from uploading videos, writing, or whatever we are doing. There is a lot of really
interesting second- and third-order effects to this—for one, it means that the Internet does
not have any kind of objective view of the world—at best, it has an amalgamated set of
subjective views, from which it can tease out what the real world is like.