Security in IoT or IoE space for that matter in any system has to be seen at system level.
When we start looking at security at individual phase and component it will complicate and makes things messy.
For the system we need to
1. First identify assets in the system and understand the risks of all assets
2. Threats and vulnerabilities to be addressed based on RISK management planned for the system and residual RISK for all assets
3. Define proper identities and access process into the system
4. Analyze the networks, components and configurations to introduce threat management levels which if sufficient for the system to be safe
5. Need to have well thought out system development process with security aspect in focus, right from requirements analysis to maintenance stage.
After these need to have clear operation part of security assessment and management.
On the outset what can be stated is security is not aspect to be brought into system whenever we want to bring in.
It's has to be thought as integral part of system life cycle management and build the system with good security.
------------------------------
Venkata Reddy
Sasken Technologies Limited
M:+91 73497 02841
------------------------------
Original Message:
Sent: 08-29-2017 02:22
From: karthik s
Subject: Security of IoT devices
To answer specifically on the security aspect of IoT devices.
Every product has to be built in with IDS(Intrusion detection system).The question is to deploy a Intrusion prevention system for IoT devices, as most of the IoT products have developed recently, the attacks on these devices are yet to be seen.
It's a vulnerable stage, as the IoT solutions are touching the end consumer products deployed in smart cities , automation and monitoring systems.
Security is a concern area in IoT, and I would still say its far from secure at this stage, as most of the systems doesn't carry IPS or IDS inbuilt and it's a concern.
Rgs//Karthik
Presales and Solutions Team.
TCTS, Chennai.
Mob:+91-8939001877
Fixed:+91-44-66674349
Original Message------
We have learnt that security of IoT devices is a critical element in terms of IoT mass adoption, but its 2017 end already, and still there are not many dedicated fraud and security offerings or solutions in the market built specifically for IoT mass market – What is the opinion of the TM Forum's community around the same ?
------------------------------
Abhijeet Singh
BICS
------------------------------