IoT Security by Sanjay Kumar

Editor's Notes

• #4: The Internet of Things (IoT, sometimes Internet of Everything) is the network of physical objects or "things" embedded[1] with electronics, software, sensors[2] and connectivity to enable it to achieve greater value and service by exchanging data with the manufacturer, operator and/or other connected devices. Each thing is uniquely identifiable through its embedded computing system but is able to interoperate within the existing Internet infrastructure. Experts estimate that the IoT will consist of almost 50 billion objects by 2020.[3] The term “Internet of Things” was first documented by a British visionary, Kevin Ashton, in 1999.[4] Typically, IoT is expected to offer advanced connectivity of devices, systems, and services that goes beyond machine-to-machine communications (M2M) and covers a variety of protocols, domains, and applications.[5] The interconnection of these embedded devices (including smart objects), is expected to usher in automation in nearly all fields, while also enabling advanced applications like a Smart Grid.[6] Things, in the IoT, can refer to a wide variety of devices such as heart monitoring implants, biochip transponders on farm animals, electric clams in coastal waters,[7] automobiles with built-in sensors, or field operation devices that assist fire-fighters in search and rescue.[8] These devices collect useful data with the help of various existing technologies and then autonomously flow the data between other devices.[9] Current market examples include smart thermostat systems and washer/dryers that utilize Wi-Fi for remote monitoring. A thing, in the Internet of Things, can be a person with a heart monitor implant, a farm animal with a biochip transponder, an automobile that has built-in sensors to alert the driver when tire pressure is low — or any other natural or man-made object that can be assigned an IP address and provided with the ability to transfer data over a network. So far, the Internet of Things has been most closely associated with machine-to-machine (M2M) communication in manufacturing and power, oil and gas utilities. Products built with M2M communication capabilities are often referred to as being smart.
• #5: Every one of those sensor and control points is generating data. Often, it's very informative and very private data. Systems are needed to help those devices talk to each other, manage all that data, and enforce proper access control.
• #7: The carefully-regulated climate in your office can conceal the fact that to criminals your data is hot. Remotely programmable thermostats are just as vulnerable to attack as anything else, particularly if you’re using a third-party contractor to manage the office HVAC system (a la Target’s breach). But even if it’s a company-managed remote thermostat, it’s probably not smart to leave the temperature-setting to just anyone, especially a hacker.
• #8: Take a look at your co-workers’ wrists, and it’s likely that one of them is wearing a smart watch or a fitness monitor, like a FitBit or Garmin VivoFit. And while your co-workers are being reminded to walk around the office to stay in shape, the devices themselves – particularly if they’re syncing to the Internet via a device on your network or even using your company’s Wi-Fi – are making your security strategy flabby.
• #9: Smart Cars: Bluetooth, Car Ignition, Aircondition Smart Biometrics: Attacker can get hack into the system and steal personal identities & also can feed his/her data into system to gain access Implanted Device: http://www.forbes.com/sites/singularity/2012/12/06/yes-you-can-hack-a-pacemaker-and-other-medical-devices-too/