32 iot security justifying your customers trust

32
IoT Security
Justifying your customers' trust through securing their privacy
The Internet of Things (IoT) is a new
paradigm that’s changing the world. It could
make our world safer, improve our health,
save us time and money, reduce waste and
add a new dimension to production control
and life in general.
Cybersecurity has traditionally been
associated with the security of personal data.
In the IoT era, however, this has transformed
into the security of privacy. Violations of
user privacy such as remote surveillance via
smart home cameras, multimedia or baby
monitors; interference in the functioning of
household devices; unexpected shutdowns
and the failure of everyday services – all of
this is unacceptable to the end user.
At the same time, the Internet of Things
provides tremendous opportunities for
device manufacturers (including hardware
components and software), telecom service
providers and the systems integration
market. A lack of trust in IoT solutions among
end-users could block or significantly
slow down realization of these potential
opportunities. That’s why end-to-end
security of IoT solutions is a top priority for
all those involved.
As things stand, IOT edge devices and telecoms equipment provided to customers can
easily incorporate cybersecurity violations. Hardware may fail to control the integrity of
the firmware, and devices are sometimes shipped with preinstalled passwords, including
administrator passwords. Weak network security settings or the use of old and vulnerable
software can also be issues. Add to that a lack of software update processes, meaning that
vulnerable devices can work for years without updates, and it’s clearly just a matter of time
before the device is successfully attacked.
The principle of a chain of trust forms the basis for guaranteeing the secure functioning of
an IoT device. Including edge devices and infrastructure elements (gateways). This principle
begins with the use of a root of trust at hardware level.
Guarantees of trust at device level

33
This technology carries out a trusted
boot of an operating system, including
the integrity of OS image checking,
applying cryptography and mechanisms of
hardware-assisted secure storage for key
information. Trusted boot is crucial for key
IoT infrastructure devices such as gateways,
ensuring the operating system is booted
from predefined media and only after the
equipment has successfully passed specific
integrity checks.
The next important element in the chain of
trust is a secure operating system capable of
ensuring the proper execution of software
that is not considered to be trusted. Recent
developments in computer technology make
it possible to implement an environment at
OS level that restricts the behavior of applica-
tions that cannot be considered trusted.