The distinctive risks.
WHAT MAKES IT HARDER
Devices are physically accessible They are numerous and long-lived They are constrained, limiting defences They are frequently unattended Updating them is difficult
WHAT THE CONSEQUENCE OF COMPROMISE IS
Beyond data: physical actions, in some systems.
WHY THAT CHANGES THE CALCULATION
A compromised sensor leaks information; a compromised actuator causes events.
WHAT THE HISTORY SHOWS
Large numbers of devices compromised through default credentials and unpatched software, used to attack others.
WHAT THAT MEANS
Your devices are a risk to others, not only to you.
WHAT TO ASSUME
The device will be obtained and examined Firmware will be extracted Communications will be intercepted The network it sits on is hostile
WHAT FOLLOWS
No shared secrets across devices No security depending on obscurity No trust in what a device reports without verification
WHAT THE LIFESPAN PROBLEM IS
Devices outlasting the software they run, and the company that made them.
WHAT TO PLAN
A stated support period, and behaviour after it.
WHAT REGULATION INCREASINGLY REQUIRES
Unique credentials, update capability, and disclosure processes.
