\tLIVE FROM MOBILE 360 SECURITY FOR 5G, THE HAGUE: Keynote speakers discussed the challenges of securing the IoT, with device makers a key focus in terms of ensuring products are safeguarded at the point of manufacture.<\/p>\n
So-called security by design was cited as a critical element in protecting what Evangelos Ouzounis, head of EU cybersecurity agency ENISA\u2019s secure infrastructure and services unit (pictured), said is a potentially \u201chuge\u201d attack surface in terms of the sheer number of IoT devices.<\/p>\n
He pointed to sectors including transportation, medical and even consumer devices as areas of concern, noting \u201csecurity isn\u2019t a big priority\u201d for many small sensor and device manufacturers, particularly those at the start-up stage which are keen to keep production costs down.<\/p>\n
\u201cWe encourage the companies to become better, to actually invest more on security,\u201d he said. However, he acknowledged it can prove difficult for companies to implement such moves due to a lack of guidelines and directions regarding what security should look like.<\/p>\n
[1]For the manufacturers of consumer IoT devices, there is a clear incentive to work with bodies like ENISA to establish that direction. In a separate presentation during the session, PA Consulting principal consultant Leo Whyte (pictured, right) highlighted a growing reluctance among consumers to buy connected devices due to security concerns.<\/p>\n
Whyte also argued the case for security by design, noting it is a means to increase the credibility of IoT: \u201cEnterprise clients and telcos, the two need to come together if we\u2019re going to foster wide-scale IoT\u201d.<\/p>\n
[2]Later in the session, Jose Ramon Monleon Martinez, corporate CISO at Orange Spain (pictured, left), called for harmonisation of the certification processes to ensure the sheer multitude of devices connecting to operator networks are secure.<\/p>\n
\u201cWe need one entity, one certification, something that helps us in all of this work\u201d, he said, adding that operators are increasingly exposed to threats because of the many devices which can be bought independently which connect to, and so could impact security of, the network.<\/p>\n
Beyond design
\nSecurity by design is a key starting point, but Ouzounis explained there are several other factors needed to protect the IoT. Customers require help on how to update the firmware on devices to ensure vulnerabilities are kept in check, while the industry must address a skills shortage in terms of staff with the ability to take a holistic view of IoT and security.<\/p>\n
\u201cThere are issues with the liabilities as well,\u201d he noted, pointing to IoT sensors and devices deployed in mission critical services. He added technology sometimes fails and, if it does, it must be clear who is liable.<\/p>\n[1] https:\/\/www.mobileworldlive.com\/wp-content\/uploads\/2019\/05\/PAConsulting_principal_consultant_LeoWhyte.jpg
\n[2] https:\/\/www.mobileworldlive.com\/wp-content\/uploads\/2019\/05\/OrangeSpain_CISO_JoseMartinez.jpg<\/p>\n","protected":false},"excerpt":{"rendered":"
LIVE FROM MOBILE 360 SECURITY FOR 5G, THE HAGUE: Keynote speakers discussed the challenges of …<\/p>\n
The post Experts set out IoT device security goals<\/a> appeared first on Mobile World Live<\/a>.<\/p>\n