Book Image

Practical Internet of Things Security - Second Edition

By : Brian Russell, Drew Van Duren
Book Image

Practical Internet of Things Security - Second Edition

By: Brian Russell, Drew Van Duren

Overview of this book

With the advent of the Internet of Things (IoT), businesses have to defend against new types of threat. The business ecosystem now includes the cloud computing infrastructure, mobile and fixed endpoints that open up new attack surfaces. It therefore becomes critical to ensure that cybersecurity threats are contained to a minimum when implementing new IoT services and solutions. This book shows you how to implement cybersecurity solutions, IoT design best practices, and risk mitigation methodologies to address device and infrastructure threats to IoT solutions. In this second edition, you will go through some typical and unique vulnerabilities seen within various layers of the IoT technology stack and also learn new ways in which IT and physical threats interact. You will then explore the different engineering approaches a developer/manufacturer might take to securely design and deploy IoT devices. Furthermore, you will securely develop your own custom additions for an enterprise IoT implementation. You will also be provided with actionable guidance through setting up a cryptographic infrastructure for your IoT implementations. You will then be guided on the selection and configuration of Identity and Access Management solutions for an IoT implementation. In conclusion, you will explore cloud security architectures and security best practices for operating and managing cross-organizational, multi-domain IoT deployments.

Related Content you might be interested in

Current Title:

Small book image
Practical Internet of Things Security - Second Edition
Brian Russell | Drew Van Duren
Nov, 2018 | 382 pages
Small book image
Practical Industrial Internet of Things Security
Sravani Bhattacharjee
Jul, 2018 | 324 pages
Small book image
Automotive Cybersecurity Engineering Handbook
Dr Ahmad MK Nasser
Oct, 2023 | 392 pages
Small book image
Internet of Things for Architects
Perry Lea
Jan, 2018 | 524 pages
Table of Contents (19 chapters)
Title Page
Title Page
Copyright and Credits
Copyright and Credits
Dedication
Dedication
About Packt
About Packt
Contributors
Contributors
Preface
Preface
Free Chapter
1
A Brave New World
A Brave New World
Defining the IoT
Cybersecurity versus IoT security
The IoT of today
The IoT ecosystem
The IoT of tomorrow
Summary
2
Vulnerabilities, Attacks, and Countermeasures
Vulnerabilities, Attacks, and Countermeasures
Primer on threats, vulnerability, and risks 
Primer on attacks and countermeasures
Today's IoT attacks
Lessons learned and systematic approaches
Summary
3
Approaches to Secure Development
Approaches to Secure Development
The Secure Development Life Cycle (SDLC)
Handling non-functional requirements 
The need for software transparency
Summary
4
Secure Design of IoT Devices
Secure Design of IoT Devices
The challenge of secure IoT development
Secure design goals
Summary
5
Operational Security Life Cycle
Operational Security Life Cycle
Defining your security policies
Defining system roles 
Configuring gateway and network security
Bootstrapping and securely configuring devices
Setting up threat intelligence and vulnerability tracking
Managing assets 
Managing keys and certificates
Managing accounts, passwords, and authorizations
Managing firmware and patching updates
Monitoring your system
Training system stakeholders
Performing penetration testing
Managing compliance
Managing incidents
Performing end-of-life maintenance
Summary
6
Cryptographic Fundamentals for IoT Security Engineering
Cryptographic Fundamentals for IoT Security Engineering
Cryptography and its role in securing the IoT
Cryptographic module principles
Cryptographic key management fundamentals
Examining cryptographic controls for IoT protocols
Future-proofing IoT cryptography
Summary
7
Identity and Access Management Solutions for the IoT
Identity and Access Management Solutions for the IoT
An introduction to IAM for the IoT
The identity life cycle
Authentication credentials
IoT IAM infrastructure
Authorization and access control
Summary
8
Mitigating IoT Privacy Concerns
Mitigating IoT Privacy Concerns
Privacy challenges introduced by the IoT
Guide to performing an IoT PIA
Privacy by design
Privacy engineering recommendations
Summary
9
Setting Up an IoT Compliance Monitoring Program
Setting Up an IoT Compliance Monitoring Program
IoT compliance
A complex compliance environment
Summary
10
Cloud Security for the IoT
Cloud Security for the IoT
The role of the cloud in IoT systems 
The concept of the fog
Threats to cloud IoT services
Cloud-based security services for the IoT
Summary
11
IoT Incident Response and Forensic Analysis
IoT Incident Response and Forensic Analysis
Threats to both safety and security
Defining, planning, and executing an IoT incident response
Detection and analysis
IoT forensics
Summary
Other Books You May Enjoy
Other Books You May Enjoy
Leave a review - let other readers know what you think
Index
Index

Copyright and Credits

Practical Internet of Things Security Second Edition

Copyright © 2018 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author(s), nor Packt Publishing or its dealers and distributors, will be held liable for any damages caused or alleged to have been caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

Commissioning Editor: Gebin GeorgeAcquisition Editor: Prachi BishtContent Development Editor: Deepti Thore, Dattatraya MoreTechnical Editor: Varsha ShivhareCopy Editor:Safis EditingProject Coordinator: Jagdish PrabhuProofreader: Safis EditingIndexer: Mariammal ChettiyarGraphics: Jisha ChirayilProduction Coordinator: Jyoti Chauhan

First published: June 2016 Second edition: November 2018

Production reference: 1291118

Published by Packt Publishing Ltd. Livery Place 35 Livery Street Birmingham B3 2PB, UK.

ISBN 978-1-78862-582-1

www.packtpub.com

Previous Section
Next Chapter