{"id":605,"date":"2018-02-15T00:57:43","date_gmt":"2018-02-14T21:57:43","guid":{"rendered":"http:\/\/kusuaks7\/?p=210"},"modified":"2025-05-15T10:54:20","modified_gmt":"2025-05-15T10:54:20","slug":"a-method-to-the-madness-how-to-think-about-security-and-privacy-for-iot","status":"publish","type":"post","link":"https:\/\/www.experfy.com\/blog\/iot\/a-method-to-the-madness-how-to-think-about-security-and-privacy-for-iot\/","title":{"rendered":"A method to the madness: How to think about security and privacy for IoT"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tReady to learn Internet of Things? Browse courses<\/a>\u00a0like\u00a0Cyber Security for the IoT<\/a> developed by industry thought leaders and Experfy in Harvard Innovation Lab.<\/em><\/strong>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tAs we enter a new year \u2014 a year in which IoT is expected to continue its\u00a0explosive adoption trend\u00a0\u2014 it is important to continue to be mindful of the basic tenets of how to build and deploy connected devices in ways that deliver robust considerations of both security and privacy. It is also important to keep in mind that these are distinct concepts, even though they are often conflated:\u00a0Privacy<\/em>\u00a0is the decision about who can or cannot access data, while\u00a0security<\/em>\u00a0is the integrity of decisions about access being carried out effectively.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tHere are some practical and implementable actions that both manufacturers and purchasers of connected devices can follow in an effort to deploy resilient systems. It is imperative, however, to keep in mind that the security architecture around your device will be very much dependent on your use case, and those unique aspects should heavily influence all decision-making you do around both security and privacy.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Security: Ways of thinking<\/strong><\/h3><\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tThe most\u00a0effective security model<\/a>\u00a0around any given device or architecture will be very much dependent on use case. In that vein, below are some methods for how to approach security, rather than a prescriptive framework. As an outcome of the below domains, both buyers and vendors should thereby be best suited to deploy an IoT strategy that successfully accounts for security; this article defines such organizations as\u00a0effective security organizations<\/em>.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t1. Think strategically<\/u><\/strong>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tFirst and foremost, effective security organizations understand that to be effective requires strategy. Strategy then informs the tactical execution. To best pursue this mindset, effective organization should consider a collection of concepts that support the ability to think strategically about security.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\ta. Adopt a security mission<\/strong>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tEffective security starts with making it a priority. While this sounds simple in concept, it is often very difficult in practice. Historically, the most successful security organizations are defined by executive buy-in to a well-articulated, well-defined, well-communicated security mission. Effective security organizations define the purpose behind\u00a0why<\/em>\u00a0security matters to them,\u00a0what<\/em>they do to pursue those objectives and\u00a0how<\/em>\u00a0they pursue the mission.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tContrary to conventional wisdom, effective security is not achieved via solely a collection of products, or through satisfying only the basics of some sort of compliance framework. Rather, security is a combination of people, process and products, all strategically resourced and deployed in the context of a security mission.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\nTo be effective in this domain, organizations should:\n