Threat Modeling and IoT Attack Surfaces

Abstract

According to NIST, “IoT involves the connection between humans, non-human physical objects, and cyber objects, enabling monitoring, automation, and decision making.” In today’s world, IoT and cloud are ruling the world of automation. Internet of Things is otherwise known by the name of the Internet of Everything. The IoT device refers to web-enabled computing devices and capability sensing, collecting, and sending data using sensors and communications hardware processors embedded in the machine. The IoT device types have been categorized as implanted on natural, Man-made or machine-made objects and can communicate over the network. Security of the IoT devices and data traveled between IoT devices are more vulnerable to attacks. This chapter covers the real-time security tools and techniques to attack the IoT devices to defend against them by building a holistic view of the aggregated analytics layer. The secure reference architecture presents various layers in it, which can be followed by best practices that how weakness must rectify in constraint devices. The next aspect is the vulnerability security management of IoT environment. Network fencing is a complex issue to ensure end-to-end communication, which should not deviate from the security standards. Exploitation can be performed to steal the data or make outage of the large enterprise comprehensive data protection and stringent access mechanism to protect the devices from malicious attacks.