Steps to Implementing Security by Design for IoT
Chris Francosky of KORE Wireless emphasizes that effective IoT security measures should be established well before production begins. He advocates for a five-step process centered around threat modeling. These steps help identify and prioritize threats to IoT systems efficiently.
This story was produced through MarketScale. See how Industrial IoT teams put it to work with AI Visibility (GEO).
Key takeaways
Implement IoT security measures early in the product development process.
Use threat modeling as a core strategy with steps like defining assets, identifying threats, and prioritizing them.
STRIDE is a useful acronym for identifying types of security threats in IoT systems.
Get featured
Want to get featured in MarketScale Industrial IoT?
Create a free MarketScale workspace and get your company's expertise featured across our Industrial IoT coverage. No credit card, no demo required.
IoT security by design might seem like a buzzword in that it’s not well-defined in the consumer landscape, but KORE Wireless’s Chris Francosky said the most effective security measures are put in place well before production even begins.
Host Shelby Skrhak sat down with Francosky on this episode of the Industrial IoT podcast, brought to you by MarketScale.
“I’m evangelizing this idea of a five-step process centered around threat modeling, which is at the heart of security by design,” Francosky said.
5 Step Process for Threat Modeling
- Define your assets – not only devices, but the data, as well.
- Decompose that application through an architecture diagram so you can see clearly how the application is broken up.
- Look at each area of the decomposed application and identify threats.
- Document threats.
- Rate and prioritize threats
How do you recognize threats? In the late 1990s, Microsoft devised an acronym that summarizes the kinds of threats to look for, and it’s still useful today, Francosky said.
The acronym STRIDE stands for Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service and Escalation of Privilege. These aspects serve as guideposts to help you identify the types of threats you’re looking for.
KORE Wireless offers tool suites to help make IoT security a part of a consistent process.
For the latest news, videos, and podcasts in the IoT Industry, be sure to subscribe to our industry publication.
Follow us on social media for the latest updates in B2B!
Twitter – @MarketScale
Facebook – facebook.com/marketscale
LinkedIn – linkedin.com/company/marketscale
Your experts belong here
Every story in MarketScale Industrial IoT starts with a company putting its controls engineers, plant-floor specialists, and integration partners on the record. Buyers are already reading this topic. The only question is whose experts they find.
Plant and controls buyers research deep before contact, and your engineers get to shape that research.
About the author
