This is a summary of an article written for IoT Agenda by Jonathan Nguyen-Duy, Vice President, Global Field CISO Team, Fortinet. The entire article can be accessed here.
The hyper-connected, global marketplace of the 21st century has shifted the landscape for networking and security. Two prevalent trends in this area—cloud adoption and the rise of the Internet of Things (IoT)—are seemingly two different components of digital transformation, with separate purposes and scope. However, they actually work together, fueling one another in the digital ecosystem. This symbiotic relationship has important implications when it comes to deploying, using, and securing cloud services and the IoT.
As the number of IoT devices grows, so does the amount of data that they generate. This is in addition to the massive stores of data that are already being amassed by businesses, governments, and even individuals – data that must be collected, processed, mined, and stored. Take, for example, the use of sensors in warehouses where inventory can be tracked. This technology provides managers with essential data on purchasing trends so they are better equipped to manage inventory, especially on fast-selling items. Similar devices in retail locations provide information not just about inventory, but everything from temperatures in refrigeration units to customer purchasing trends.
IoT sensors installed on manufacturing equipment provide production managers with critical information. Environmental data from these sensors signal evidence of wear and tear on expensive equipment, alerting managers about maintenance before that equipment fails and costs the organization millions of dollars in lost productivity.
As a result of these and other use cases, organizations are finding that in order to keep up with the massive amounts of data they are amassing, they need to act fast and build out their data management resources. For many, this comes in the form of a standard, two-pronged solution: easily scalable cloud data centers and high-performing infrastructures developed to support data mining for critical information.
One of the top challenges associated with IoT adoption is security. Botnets are the most common IoT cyber threat, causing Distributed Denial of Service (DDoS) attacks like the notorious Mirai, which infected tens of thousands of IoT devices before causing massive disruption.
When compromised, IoT devices may do the following:
According to research conducted by the team at FortiGuard Labs, IoT devices were involved in half of the top 12 exploits last year. This is due primarily to the fact that most IoT devices are designed with fault code, no built-in security measures, and an inability to be updated even when network managers identify a vulnerability.
Every IoT device is potentially another cloud connection, and every connection to the network represents yet another security vulnerability. So, what does this mean for your organization? As you develop new IoT assets and move to the cloud, your security strategies for both need to be in sync with one another. When an IoT device is compromised, your public and private clouds are at risk, and this can eventually affect your core network and even your customers.
There are six key considerations when it comes to securing IoT and cloud environments:
To maximize the benefits of digital transformation, organizations must employ effective security strategies for IoT devices and the cloud. A unified strategy that addresses both the cloud and IoT using advanced threat intelligence and automation is vital. This will secure critical connections moving forward and set your organization up for success in the modern marketplace.
Learn how Fortinet’s dynamic cloud security solutions provide increased visibility and control across cloud infrastructures, enabling secure applications and connectivity from data center to cloud.