Lifecycle IoT Security for Engineers

219 Pages·2021·1.892 MB·English

by  Kaustubh Dhondge

Lifecycle IoT Security
for Engineers
77000088__DDhhoonnddggee__VV33..iinndddd 11 88//1199//2211 1100::0022 AAMM
For a complete listing of titles in the
Artech House Computer Security Library,
please turn to the back of this book.
77000088__DDhhoonnddggee__VV33..iinndddd 22 88//1199//2211 1100::0022 AAMM
Lifecycle IoT Security
for Engineers
Kaustubh Dhondge
artechhouse.com
77000088__DDhhoonnddggee__VV33..iinndddd 33 88//1199//2211 1100::0022 AAMM
Library of Congress Cataloging-in-Publication Data
A catalog record for this book is available from the U.S. Library of
Congress.
British Library Cataloguing-in-Publication Data
A catalog record for this book is available from the British Library.
ISBN-13: 978-1-63081-803-6
Cover design by Charlene Stevens
© 2021
Artech House
685 Canton Street
Norwood, MA 02062
All rights reserved. Printed and bound in the United States of America.
No part of this book may be reproduced or utilized in any form or by any
means, electronic or mechanical, including photocopying, recording, or by
any information storage and retrieval system, without permission in writing
from the publisher.
All terms mentioned in this book that are known to be trademarks or
service marks have been appropriately capitalized. Artech House cannot
attest to the accuracy of this information. Use of a term in this book should
not be regarded as affecting the validity of any trademark or service mark.
10 9 8 7 6 5 4 3 2 1
77000088__DDhhoonnddggee__VV33..iinndddd 44 88//1199//2211 1100::0022 AAMM
Dedicated to you, the reader.
Thank you for building a better-connected world with IoT
and for caring to keep it secure.
77000088__DDhhoonnddggee__VV33..iinndddd 55 88//1199//2211 1100::0022 AAMM
77000088__DDhhoonnddggee__VV33..iinndddd 66 88//1199//2211 1100::0022 AAMM
Contents
Foreword 11
Preface 13
Acknowledgments 15
1
Introduction to IoT and Its
Applications 17
1.1 Defining the IoT 20
1.2 Classifying Industrial, Enterprise, and
Consumer IoT Applications 24
1.3 Why IoT Needs Securing 28
1.4 Summary 30
2
Lifecycle of IoT Security 33
2.1 IoT Security Implementation 35
2.2 Integrating the Security Measures
into IoT Services 39
7
77000088__DDhhoonnddggee__VV33..iinndddd 77 88//1199//2211 1100::0022 AAMM
8 Lifecycle IoT Security for Engineers
2.3 Operation of the IoT Services 43
2.4 Maintaining the IoT Infrastructure 47
2.5 Planned Degradation and Discontinuation
of the IoT Services 52
2.6 Summary 53
3
Vulnerabilities in IoT Security 57
3.1 Insufficient Physical Hardening 58
3.2 Insecure Cloud and Network Services 61
3.3 Device-Level Vulnerabilities
and Mismanagements 64
3.4 Poor Password Practices and
Identity Management 67
3.5 Inappropriate Cryptographic Measures 70
3.6 Weak Update Protocols 73
3.7 Summary 76
4
IoT Security Attack Vectors and Actors 79
4.1 Understanding the Motivations
to Attack IoT Systems 80
4.2 Actors Involved in IoT Security and Attacks 85
4.3 IoT Device-Level Attacks 90
4.4 IoT Network Attacks 94
4.5 Cloud Service Attacks 96
4.6 Summary 100
5
Preventive and Defensive Measures to
Counter IoT Security Threats 103
5.1 Secure by Design 104
5.2 IoT Device-Level Security 107
77000088__DDhhoonnddggee__VV33..iinndddd 88 88//1199//2211 1100::0022 AAMM
Contents 9
5.3 IoT Network Security 110
5.4 Cloud Service Security 115
5.5 Summary 117
6
Detection and Identification of
IoT Security Attacks 119
6.1 Setting Up IoT Security Incident Protocols 121
6.2 Establishing Security Incident
Response Teams 125
6.3 Monitoring and Penetrating IoT Services 130
6.4 Summary 134
7
Practical Challenges in Implementing
Appropriate Level of Security 137
7.1 Challenges of Inherent Heterogeneity 138
7.2 Interoperability Between
Diverse Stakeholders 140
7.3 The Human Factor Forming a Weak
Link in IoT Security 141
7.4 Commercial and Performance-
Oriented Factors 145
7.5 Summary 147
8
Regulatory Guidance for the
IoT Industry 149
8.1 Need for Regulatory Guidance on IoT
Security and Its Global Directions 150
8.2 Internet Research Task Force Request
for Comments 8576 160
77000088__DDhhoonnddggee__VV33..iinndddd 99 88//1199//2211 1100::0022 AAMM