All right, security and IoT enabled environments.
With no or inadequate folks in IoT
security by manufacturers, security measures to harden are often insufficient.
You've got, again, not a lot of security planning that goes into it, and then
patching and maintenance may or may not even happen.
You should use a multi layered management
approach, which is again a reference to defense in depth.
Then also have written policy for managing your IoT devices.
Again, policy goes a long way, procedures
to ensuring that activities are carried out consistently.
Then also definitely segregation of your
IoT systems that should be put on a guest or separate subnet.
Iot system management involves the devices
themselves, user management and security monitoring.
That's really no different than any other discussion we've had in this course.
Stack wise, IoT security principles, excuse me.
The service secure device layer, secure
communication layer, secure cloud layer, secure process layer, not really much
different than the previous model we looked at.
Some of your IoT framework security considerations.
Edge, Gateway, Cloud platform, and Mobile.
Again, communications, encryption,
storage, encryption, some of the recommendations.
Again, this is not much different than discussions we've had in previous modules.
At the end of the day, there are little computing devices.
You're still protecting data at rest in transit.
Not so much in use on a low processing power device.
Gateway's cloud platform, secure the
communication, secure the authentication, encrypted the storage.
Then mobile, again, account lockouts, multifactor authentication.
Those are all things we've already talked about in mobile.
Iot device management.
Your IoT management systems, again, we'll catalog or archive, may have some direct
interaction with, but helps in supporting IoT solutions by software tools and
process onboarding latest devices securely and promptly.
One example is Azure IoT Central.
Iot security best practices, disabled
guest and demo user accounts, use the lockout for invalid login attempts,
implement strong authentication, locate control system networks and devices behind
firewalls, implement an IPS and IDS in the network, implement end to end encryption,
use VPN, deploy security as a unified integrated system.
Really not much different on that slide
that we haven't discussed in previous modules.
Okay, Bevy Wise IoT Simulator.
You'll be playing with this in the lab.
Intell Simulation tool to simulate tens of thousands of MQTT clients in a single box.
Again, you got a pretty cool lab on that.