Practical Internet of Things Security

By : Russell, Van Duren

4 (1)

Buy this Book

Practical Internet of Things Security

4 (1)

By: Russell, Van Duren

Buy this Book

Overview of this book

With the advent of the Internet of Things (IoT), businesses have to defend against new types of threat. The business ecosystem now includes the cloud computing infrastructure, mobile and fixed endpoints that open up new attack surfaces. It therefore becomes critical to ensure that cybersecurity threats are contained to a minimum when implementing new IoT services and solutions. This book shows you how to implement cybersecurity solutions, IoT design best practices, and risk mitigation methodologies to address device and infrastructure threats to IoT solutions. In this second edition, you will go through some typical and unique vulnerabilities seen within various layers of the IoT technology stack and also learn new ways in which IT and physical threats interact. You will then explore the different engineering approaches a developer/manufacturer might take to securely design and deploy IoT devices. Furthermore, you will securely develop your own custom additions for an enterprise IoT implementation. You will also be provided with actionable guidance through setting up a cryptographic infrastructure for your IoT implementations. You will then be guided on the selection and configuration of Identity and Access Management solutions for an IoT implementation. In conclusion, you will explore cloud security architectures and security best practices for operating and managing cross-organizational, multi-domain IoT deployments.

Preface

Who this book is for

What this book covers

To get the most out of this book

Get in touch

Free Chapter

A Brave New World

Defining the IoT

Cybersecurity versus IoT security

The IoT of today

The IoT ecosystem

The IoT of tomorrow

Summary

Vulnerabilities, Attacks, and Countermeasures

Primer on threats, vulnerability, and risks

Primer on attacks and countermeasures

Today's IoT attacks

Lessons learned and systematic approaches

Summary

Approaches to Secure Development

The Secure Development Life Cycle (SDLC)

Handling non-functional requirements

The need for software transparency

Summary

Secure Design of IoT Devices

The challenge of secure IoT development

Secure design goals

Summary

Operational Security Life Cycle

Defining your security policies

Defining system roles

Configuring gateway and network security

Bootstrapping and securely configuring devices

Setting up threat intelligence and vulnerability tracking

Managing assets

Managing keys and certificates

Managing accounts, passwords, and authorizations

Managing firmware and patching updates

Monitoring your system

Training system stakeholders

Performing penetration testing

Managing compliance

Managing incidents

Performing end-of-life maintenance

Summary

Cryptographic Fundamentals for IoT Security Engineering

Cryptography and its role in securing the IoT

Cryptographic module principles

Cryptographic key management fundamentals

Examining cryptographic controls for IoT protocols

Future-proofing IoT cryptography

Summary

Identity and Access Management Solutions for the IoT

An introduction to IAM for the IoT

The identity life cycle

Authentication credentials

IoT IAM infrastructure

Authorization and access control

Summary

Mitigating IoT Privacy Concerns

Privacy challenges introduced by the IoT

Guide to performing an IoT PIA

Privacy by design

Privacy engineering recommendations

Summary

Setting Up an IoT Compliance Monitoring Program

IoT compliance

A complex compliance environment

Summary

Cloud Security for the IoT

The role of the cloud in IoT systems

The concept of the fog

Threats to cloud IoT services

Cloud-based security services for the IoT

Summary

IoT Incident Response and Forensic Analysis

Threats to both safety and security

Defining, planning, and executing an IoT incident response

Detection and analysis

IoT forensics

Summary

Other Books You May Enjoy

Leave a review - let other readers know what you think

Customer Reviews

4 (1)

5 star

4 star

100%

3 star

2 star

1 star

Handling non-functional requirements

Non-functional requirements handle the aspects of the system that are not directly related to the functionalities of the system. SEBOK—the systems engineering body of knowledge maintained jointly by INCOSE and the IEEE computer society (https://www.sebokwiki.org/wiki/Non-Functional_Requirements_(glossary))—defines them as follows:

Quality attributes or characteristics that are desired in a system, that define how a system is supposed to be.

Non-functional requirements include security, performance, availability, resilience, safety, reliability, dependability, scalability, sustainability, portability, and interoperability.

IoT systems will require different variations of these requirements, depending on the context in which the system is designed to operate (C. Warren Axelrod, Engineering Safe and Secure Software...