The Best Offense vs Defense for IoT Security
As Super Bowl Sunday nears I’m reminded of the old argument – what wins championships, offense or defense? You might jump to say defense right away, and while you would be statistically right, it’s not by much. See this interesting analysis from Freakonomics a number of years ago on the topic.
Why am I talking about football on an IoT blog? Let me get to that right away. You might have guessed this isn’t a commentary on NFL teams and who I think will win the big game (I just hope it’s a good game this year). It’s more about preparing for the bigger game of IoT security in 2017. Adopting both a good offense AND a good defense are necessary for your strategy. Here’s what I mean…
• IoT security standards aren’t going to be ready for your next IoT project to hit the market. You need to proactively figure out how to select a security solution that fits what you need, not the other way around
• Find out what’s involved with DIY open source tools to build in your own security – is this worth the time, money and effort for your development team? At the end will you really have a secure solution for your IoT product?
• Attend key trade conferences on IoT to meet directly with industry experts and vendors on what can help you with IoT security. Beware the companies with re-packaged enterprise solutions that don’t give you what you really need
• Figure out what you need to protect the most: endpoints and data are key elements to secure for offensive hackers
• Define what type of encryption you will employ for data as it travels and as it rests on devices and the Cloud
• How will you protect the data traffic and storage?
• How will you manage and protect the massive volume of encryption keys?
Enjoy your journey of figuring out IoT security in 2017. I hope you employ the right game plan for success!
Thanks for reading,
About the Author James Salter is the Director of Marketing at CENTRI. James has 20 years of experience in software and technology marketing and enjoys sharing his insights on the Internet of Things, data security, enterprise issues and driving value from solutions. Connect with James on LinkedIn.