The internet of things (IoT) has risen as one solution to the demands that have emerged because of the worldwide pandemic. The IoT, with its key characteristic of minimizing human interaction in performing a myriad of functions, seems a perfect fit in a world of remote setups and social distancing. But it is thanks to cloud computing that enterprises can smoothly make large-scale deployments of the IoT.
The integration of the IoT and cloud computing — as prominently manifested in the profusion of cloud services that power the IoT, collectively known as the IoT cloud — poses a new frontier for how industries are run. It is thus important not to overlook their respective security risks and the implications of these risks when the two technologies converge.
With regard to the security of IoT-cloud convergence, it would be best to understand how the IoT and cloud computing work together. The IoT by itself works on a diverse selection of devices that fit into the requirements of different industries or settings. Cloud computing, on the other hand, involves storing and accessing data, applications, or services over the internet — that is, in the cloud — instead of in physical servers or mainframes.
The cloud helps IoT environments by all but removing their defining limitations, such as their processing and storage capacities. The IoT, meanwhile, connects the cloud to physical or real-world devices. Figure 1 shows an example of a cloud-based IoT infrastructure.
Figure 1. An example of a cloud-based IoT infrastructure
The following are some of the other advantages of IoT-cloud convergence:
While it is true that the cloud offers solutions that can address some of the security gaps of the IoT, the integration of the two does not instantly solve the threats both technologies face. In some ways, IoT-cloud convergence elevates the urgency of these security risks as IoT-related weaknesses could cause more complicated problems in the cloud ecosystem, and vice versa.
The following are some of the challenges enterprises might face in creating secure IoT-cloud environments:
Figure 2 illustrates the impact of these challenges if left unaccounted for, mapped to the top 10 web application security risks according to the Open Web Application Security Project (OWASP).
Many of these issues are discussed in a publication by the European Network and Information Security Agency (ENISA). Our discussion on cloud-based IoT solutions also details the advantages and disadvantages of IoT-cloud ecosystems and highlights other attack vectors.
Based on the security challenges discussed, ensuring secure IoT-cloud implementation already minimizes the risks that could arise from the integration of the two technologies. Enterprises can also apply additional technologies and take steps to make sure that their entire ecosystem is secure, from the cloud to the IoT endpoints.
The following are a few other pointers that enterprises can follow to ensure the security of their IoT-cloud integration:
Enterprises can refer to the V-Model, which is a well-known guide for software development, especially with regard to the last two pointers. The model has been used to describe software development in publications on securing industrial automation (ISO/IEC 62443) and the automotive industry (ISO 21434 and ISO 26262), which shows its applicability to the IoT.
The main takeaway from these pointers is to ensure that all the layers in the IoT-cloud ecosystem are accounted for, with security and monitoring measures present from end to end. Our IoT and cloud resource pages provide further information on current threats and how to secure systems against them.
Present times have shown the capabilities of IoT and cloud technologies. Grappling with the rapid changes caused by the Covid-19 pandemic, enterprises have had to innovate and lean on available technologies to continue their operations despite restrictions on their workforce. The IoT, with help from the cloud, has emerged as one of the technologies well suited for the job.
Businesses have accelerated their adoption of the IoT in an effort to maintain their operations and comply with health protocols. Many enterprises may lean on the cloud to make the most of their IoT environments. Security measures need to keep up with these changes lest enterprises risk threats that would endanger both their IoT and cloud ecosystems.
Reviewing and fortifying security measures for IoT and cloud ecosystems not only is in line with current trends, but also prepares enterprises for future innovations granted by these two technologies. The convergence of the IoT and the cloud redefines the IoT’s scalability for future expansions and gives the cloud an avenue for creating new services and boosting capabilities.
With additional insights from Shin Li.
Like it? Add this infographic to your site:
1. Click on the box below. 2. Press Ctrl+A to select all. 3. Press Ctrl+C to copy. 4. Paste the code into your page (Ctrl+V).
Image will appear the same size as you see above.