nach oben

Erschienen in:

2018 | OriginalPaper | Buchkapitel

28. Securing the Internet of Things: Best Practices for Deploying IoT Devices

verfasst von : Bryson R. Payne, Tamirat T. Abegaz

Erschienen in: Computer and Network Security Essentials

Verlag: Springer International Publishing

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config

KI-gestützte Suche

Aus

Abstract

The Internet of Things (IoT) has brought a wealth of new technologies both in homes and businesses onto IP networks not natively designed to securely support such myriad devices. Networks once hosting only computers and printers now routinely contain payment systems, Wi-Fi and mobile/wearable devices, VoIP phones, vending machines, sensor and alarm systems, servers, security cameras, thermostats, door locks and other building controls, just to name a few. This chapter analyzes current best practices for securing computer networks with special attention to IoT challenges, discusses selected major IoT security incidents, details selected IoT cyber attacks as proofs of concept, and presents a framework for securely deploying IoT devices in the enterprise and at home.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Vorheriges Kapitel Design of a Secure Framework for Session Mobility as a Service in Cloud Computing Environment

Nächstes Kapitel Cognitive Computing and Multiscale Analysis for Cyber Security

ASD Australian Signals Directorate. (2014). Strategies to mitigate targeted cyber intrusions. http://www.asd.gov.au/infosec/top-mitigations/top-4-strategies-explained.htm. Accessed 5 December 2016.

Charney, S. (2010). Collective defense: Applying public health models to the Internet. White paper. Redmond, Wash: Microsoft Corporation. http://www.microsoft.com/security/internethealth. Accessed 30 December 2016.

Coldewey, D. (2016). ‘Smart’ locks yield to simple hacker tricks. TechCrunch.https://techcrunch.com/2016/08/08/smart-locks-yield-to-simple-hacker-tricks/. Accessed 8 January 2017.

Cyber Risk Report. (2016). HPE security research. https://www.thehaguesecuritydelta.com/media/com_hsd/report/57/document/4aa6-3786enw.pdf. Accessed 5 January 2017.

Franceschi-Bicchierai, L. (2016a). Hacker claims to push malicious firmware update to 3.2 million home routers. Motherboard.com . http://motherboard.vice.com/read/hacker-claims-to-push-malicious-firmware-update-to-32-million-home-routers. Accessed 3 January 2017.

Franceschi-Bicchierai, L. (2016b). Hackers make the first-ever ransomware for smart thermostats. Motherboard.com . http://motherboard.vice.com/read/internet-of-things-ransomware-smart-thermostat. Accessed 2 January 2017.

Gartner. (2015). Gartner says 6.4 billion connected “things” will be in use in 2016, Up 30 Percent from 2015. http://www.gartner.com/newsroom/id/3165317. Accessed 3 January 2017.

Greene, C., Stavins, J. (2016). Did the target data breach change consumer assessments of payment card security? (Research Data Reports No. 16-1). Federal Reserve Bank of Boston.

ISO. (2015). IT-security techniques-storage security (ISO/IEC Standard No. 27040). Retrieved from https://www.iso.org/obp/ui/#iso:std:iso-iec:27040

10.

ISTR: Internet Security Threat Report. (2016). https://www.symantec.com/content/dam/symantec/docs/reports/istr-21-2016-en.pdf. Accessed 5 January 2017.

11.

Krebs, B. (2016a). Hacked cameras, DVRs powered today’s massive internet outage. https://krebsonsecurity.com/2016/10/hacked-cameras-dvrs-powered-todays-massive-internet- outage/. Accessed 20 December 2016.

12.

Krebs, B. (2016b). Who makes the IoT things under attack. http://krebsonsecurity.com/2016/10/who-makes-the-iot-things-under-attack/. Accessed 3 January 2017.

13.

Level 3 Research Labs. (2016). How the grinch stole IoT. http://blog.level3.com/security/grinch-stole-iot/. Accessed 2 January 2017.

14.

MalwareTech. (2016). Mapping mirai: A botnet case study. https://www.malwaretech.com/2016/10/mapping-mirai-a-botnet-case-study.html. Accessed 31 December 2016.

15.

Morgan, S. (2016). Cyber crime costs projected to reach $2 trillion by 2019. http://www.forbes.com/sites/stevemorgan/2016/01/17/cyber-crime-costs-projected-to-reach-2-trillion-by-2019/#216e8d33bb0c. Accessed January 09 2017.

16.

Nichols, O., Yang, L., & Yuan, X. (2016, October 4). Teaching security of internet of things in using raspberry Pi. In KSU conference on cybersecurity education, research and practice.

17.

O’Harrow, Jr. R. (2012, June 3). Cyber search engine Shodan exposes industrial control systems to new risks. The Washington Post, 6.

18.

OWASP (2016). Manufacturer IoT security guidance. Open web application security project. https://www.owasp.org/index.php/IoT_Security_Guidance. Accessed 5 January 2017.

19.

Pauli, D. (2016). IoT worm can hack Philips Hue lightbulbs, spread across cities. The Register. http://www.theregister.co.uk/2016/11/10/iot_worm_can_hack_philips_hue_lightbulbs_ spread_across_cities/. Accessed 5 January 2017.

20.

Schneier, B. (2016). We need to save the internet from the internet of things. Motherboard. https://motherboard.vice.com/read/we-need-to-save-the-internet-from-the-internet-of-things. Accessed 7 January 2017.

21.

Shields, K. (2015). Cybersecurity: Recognizing the risk and protecting against attacks. North Carolina Banking Institute, 19, 345.

22.

Simon, K. (2016, November 14). Vulnerability analysis using google and shodan. In International conference on cryptology and network security (pp. 725–730). Springer International Publishing.

23.

Slay, J., & Miller, M. (2007, March 19). Lessons learned from the maroochy water breach. In Conference on critical infrastructure protection (pp. 73–82). New York: Springer.

24.

Smith, M. (2016). EZ-Wave: A Z-Wave hacking tool capable of breaking bulbs, abusing Z-Wave devices. Network World. http://www.networkworld.com/article/3024217/security/ez-wave-z-wave-hacking-tool-capable-of-breaking-bulbs-and-abusing-z-wave-devices.html. Accessed 8 January 2017.

25.

Vernon, P. (2016). The Mirai botnet: what it is, what it has done, and how to find out if you’re part of it. HackRead.com . https://www.hackread.com/mirai-botnet-ddos-attacks-brief/. Accessed 2 January 2017.

26.

Wheatley, S., Maillart, T., & Sornette, D. (2016). The extreme risk of personal data breaches and the erosion of privacy. The European Physical Journal B, 89, 1–2.CrossRef

27.

Woolf, N. (2016). DDoS attack that disrupted internet was largest of its kind in history, experts say. The Guardian. https://www.theguardian.com/technology/2016/oct/26/ddos-attack-dyn-mirai-botnet. Accessed 20 December 2016.

Titel: Securing the Internet of Things: Best Practices for Deploying IoT Devices
verfasst von: Bryson R. Payne
Tamirat T. Abegaz
Verlag: Springer International Publishing
Buch: Computer and Network Security Essentials
Print ISBN: 978-3-319-58423-2

Electronic ISBN: 978-3-319-58424-9

Copyright-Jahr: 2018
DOI: https://doi.org/10.1007/978-3-319-58424-9_28

Neuer Inhalt

Bildnachweise

VDI-Icon, Profil Icon, inhalt2, Springer Professional Modul/© Springer Fachmedien Wiesbaden GmbH, Nachhaltigkeitsaward Key Visual/© Cometis AG/Global ESG Monitor | Daniel Rupp | Generiert mit KI, Search Icon, Banner Hanser, Arbeitszeit/© granata68 / Fotolia, E-Autos im Fuhrpark: Lohnt sich das noch?/© Petair / stock.adobe.com, Kryptowährungen/© gopixa / Getty Images / iStock, Zeitschrift Wissensmanagement Cover, PatentFit-Logo/© Springer Fachmedien Wiesbaden GmbH, Sustainibility Finance/© Robert Kneschke / stock.adobe.com / Springer Fachmedien Wiesbaden GmbH, Zukunftswerkstatt Sales Excellence 2024/© AndreyPopov / Getty Images / iStock, 2023_Antrieb/© supervisuell

Springer Professional

Abstract

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"

Neuer Inhalt

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.