Amit Rao’s Post

🚀 Join Us for the IoT Security Foundation Bangalore Chapter Meetup 📅 Date: 27th July 2024, Saturday   🏢 Sponsored by: Honeywell   🎯 Theme: Future-proofing Industrial IoT Security There has been a 400% increase in IoT malware attacks, with the manufacturing sector being a primary target. This surge is driven by the increasing adoption of IoT devices, which often lack adequate security measures. Future-proofing #Industrial #IoT involves integrating advanced security measures that not only adapt to modern threats but also ensure long-term #resilience. By adopting resilient security strategies for #manufacturing, companies can safeguard against emerging #cyberthreats and operational disruptions. Building resilient manufacturing security not only fortifies defences but also provides a competitive edge in the rapidly evolving market. During the meetup, we will delve into critical topics such as Securing #Edgecomputing, Post-Quantum Cryptography #PQC, and #SupplyChainSecurity. Additionally, there will be a session on the #IIC #IoT #Security #MaturityModel, followed by a panel discussion on Resilient Security Strategies for Manufacturing. 📅 Registration opens on 10th July! We invite you to join us and engage in these crucial discussions. Let's come together to build a more secure and resilient future for Industrial IoT! #IoT #Security #IndustrialIoT #FutureProofing #CyberSecurity #Honeywell #IoTSFBangalore #ManufacturingSecurity #EdgeComputing #PostQuantumCryptography

🔒 Don't Miss Out on the IoT Security Foundation webinar on Cyber Resilience & NIS2 Requirements 🔒 As we navigate the evolving landscape of #OT #cybersecurity, it's crucial to stay ahead of the curve, especially with the implementation of #NIS2 (Network and Information Security Directive). The NIS Directive is the first piece of EU-wide legislation on cybersecurity, and its specific aim was to achieve a high common level of cybersecurity across the Member States. While it increased the Member States' cybersecurity capabilities, its implementation proved difficult, resulting in fragmentation at different levels across the internal market. To respond to the growing threats posed with digitalisation and the surge in cyber-attacks, the Commission has submitted a proposal to replace the NIS Directive and thereby strengthen the security requirements, address the #supplychainsecurity, streamline #reporting obligations, and introduce more stringent #supervisory measures and stricter enforcement requirements, including #harmonised sanctions across the EU. The proposed expansion of the scope covered by NIS2, by effectively obliging more entities and sectors to take measures, would assist in increasing the level of cybersecurity in Europe in the longer term. IoT Security Foundation #Cyberresilience #

We are thrilled to announce that Device Authority’s KeyScaler-as-a-Service (#KSaaS) has been awarded the prestigious 2024 #IoT #HealthTech Innovation Award. This accolade recognizes exceptional advancements in IoT technologies that significantly improve patient care and #datasecurity in the HealthTech sector. Device Authority is committed to advancing IoT technologies in HealthTech by ensuring secure and scalable management of IoT devices. They aim to protect #patientdata and #deviceintegrity, support technology rollout for patient care, and enhance trust in #digitalhealth solutions. By automating device #authentication and #dataencryption, KeyScaler enables personalized and timely interventions, significantly improving patient outcomes. #FDA #IMDRF #HIPAA # #HealthcareIoT #IoTSecurity #HealthTech #Cybersecurity #MedicalDevices #DigitalHealth #HealthcareIT #DataPrivacy #HealthcareTechnology #CyberHealth #PHI https://lnkd.in/gZAKg7cQ

Are you deploying #IoT systems that need protection now but are projected to be in the field for more than 10 years? This applies to the majority of OEMs in the #Industrial, #Automotive, #Healthcare, #CriticalInfrastructure, #PublicServices, #Defense, and #Space domains. These systems are likely to be vulnerable to attacks due to advances in #computing capabilities. By 2031, #quantumcomputing is expected to have advanced to the point where it can effectively break our battle-tested #publickey #cryptography, such as #RSA and #ECC (#Asymmetric, #PKI, #KEM).  The “Post Quantum Event” will significantly impact the modern #cybersecurity landscape. Also consider that adversaries are engaging in Harvest Now, Decrypt Later (#HNDL) #Dataexfiltration today that can lead to #quantumexposure tomorrow. The Quantum exposure affects embedded #RoT, #deviceidentity, and #firmwareintegrity. Quantum-Safe Algorithms like #KYBER (KEM FIPS 203), #DILITHIUM (DS FIPS 204), #SPHINCS+ (DS FIPS 205), #FALCON will need to be leveraged. For now modern enterprises must take in the short and medium term to prepare for this event and embrace #Cryptographicagility. Cryptographic Agility is not just about algorithms. It involves: - Find: Inventory certificates and #cryptoassets across your organization. - Control: Centrally manage policy, issuance, and access to public and #privatecertificates and keys. - Automate: Orchestrate deployment and manage the #lifecycle of certificates and keys. This highlights a compelling "Better Together" story for Entrust and Device Authority. Learn more about Entrust's hybrid approach to transitioning to #QuantumSafe protection from Andrew Sheedy. This strategy includes using #hybridcertificates or #compositecertificates to ensure protection through both classic and #quantumresistant #cryptographicalgorithms. #IoT #QuantumComputing #CyberSecurity #PKI #QuantumSafe #Encryption #OEM #DataProtection #AI #ML #QuantumExposure #CyberThreats #HybridCertificates #PostQuantumReady #PKIaaS #QuantumResistant #TechInnovation https://lnkd.in/gTUwWP53?

🚀 Exciting Developments in IoT Security! 🚀 TEC - Telecom Engineering Center, under the aegis of Department of Telecommunications ( DOT ) ,organized a crucial workshop on the National #Trust Center (NTC) for #IoT/ #M2M in Bangalore. The event saw participation from a diverse range of industry stakeholders, including #devicemanufacturers, #serviceproviders, #platformproviders, and #telecomservice providers, all coming together to deliberate on the development and implementation of the NTC. I had the honour of being a keynote speaker at this event, representing both the industry and the IoT Security Foundation. My talk, "Navigating the #Regulatory Landscape of #IoTSecurity and Charting India's Way Forward," covered several critical areas: - UK #PSTI enforcement - Developments in the EU regarding #RED, #CRA, and #NIS2 - The US IoT security #labelling initiative, "#CyberTrust Mark" - India IoT security certification & labelling scheme MATCOF/ITSAR, IOTSCS - Urgent need for unitary global #cybersecurity strategy The session sparked discussions highlighting the necessity of collaboration, #harmonizedstandards, and leveraging Mutual Recognition Agreements (#MRA). The presentation also emphasized on the importance of industry input for the "National Trust Center" initiative driven by the @Government of India and implemented by Center for Development of Telematics (C-Do T). This pioneering pilot aims to provide a unique identity for devices, manage device and vendor registration, and ensure #lifecyclemanagement services including #secureupdates, #threatdetection and #vulnerabilitymanagement. The IoT Security Foundation Bangalore Chapter will actively support this initiative and contributing insights to ensure it aligns with emerging standards and regulations. Together, we're shaping a secure and innovative future for IoT in #India! #IoTSecurity #Telecom #Cybersecurity #NTC #TEC #CDoT #Innovation #FutureProofing #IndustryCollaboration #IoT #India #Standards #Regulations Feel free to connect and share your thoughts! 🌐

Join us at the Device Authority Virtual Summit on May 14-15, 2024, where we'll explore cutting-edge strategies to navigate the dynamic #IoT and #connecteddevice ecosystem. In this pivotal event, we'll delve into the core theme of #ZeroTrust in the era of #AI, empowering you to proactively #secure your systems and stay at the forefront of #innovation." We will be hosting distinguished speakers from our partner ecosystem - PTC, Microsoft, Entrust, Cumulocity IoT, Argus Cyber Security Ltd., CyberArk, VIPC | Virginia Innovation Partnership Corporation, Digital Catapult Crossroads Innovation Group (XIG). Register Here: https://hubs.ly/Q02wPTvv0 #zerotrustforIoT #IoTsecurity #SecureAI #bettertogether #VirtualSummit #IndustryExperts #RSAC2024 #RSAConference #CyberSecurity #InfoSec #TechConference #CyberSecExperts #Innovation #RSAHighlights #CyberDefense #RSAInsights #DataProtection #PrivacyTech #CyberAwareness

Great article outlining the #cybersecurity requirements and potential solutions for #automotive #ECUs. The rise of #connectedvehicles has heightened the importance of #security throughout the #automotivesupplychain. Over-the-air updates (#OTA), #remotediagnostics, and advanced driver assistance systems (#ADAS) necessitate robust security measures to protect #safety and #personaldata. Trends driving #automotivesecurity: 𝐒𝐡𝐢𝐟𝐭 𝐟𝐫𝐨𝐦 𝐃𝐨𝐦𝐚𝐢𝐧 𝐭𝐨 𝐙𝐨𝐧𝐚𝐥 𝐀𝐫𝐜𝐡𝐢𝐭𝐞𝐜𝐭𝐮𝐫𝐞: Traditional domain architecture, where electronic control units (ECUs) were networked in independent domains, is being replaced by #zonal architecture. Zonal architecture consolidates functions into centralized #controllers, reducing complexity and costs but requiring higher security standards due to shared #communication networks among ECUs. 𝐑𝐞𝐠𝐮𝐥𝐚𝐭𝐨𝐫𝐲 𝐒𝐭𝐚𝐧𝐝𝐚𝐫𝐝𝐬 𝐃𝐫𝐢𝐯𝐢𝐧𝐠 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲: Government agencies and international standards bodies are mandating new standards like #ISO/ #SAE #21434 and regulations such as #UNECE #WP.29 #R155/ #R156 to address #vehiclecybersecurity. These regulations require the implementation of Cybersecurity Management Systems (#CSMS) covering the vehicle's lifetime and necessitate OTA firmware updates (#SUMS) 𝐒𝐨𝐟𝐭𝐰𝐚𝐫𝐞 𝐚𝐧𝐝 𝐇𝐚𝐫𝐝𝐰𝐚𝐫𝐞 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐌𝐞𝐚𝐬𝐮𝐫𝐞𝐬: #Secureboot and firmware update processes are crucial for establishing #trust and ensuring #authenticity and #integrity in ECUs. Hardware Security Modules (#HSMs) paired with security-enabled microcontrollers (#MCUs) or Digital Signal Controllers (#DSCs) are recommended for implementing robust security features. 𝐒𝐮𝐩𝐩𝐥𝐲 𝐂𝐡𝐚𝐢𝐧 𝐂𝐨𝐥𝐥𝐚𝐛𝐨𝐫𝐚𝐭𝐢𝐨𝐧 𝐚𝐧𝐝 𝐄𝐜𝐨𝐬𝐲𝐬𝐭𝐞𝐦 𝐒𝐮𝐩𝐩𝐨𝐫𝐭: Cybersecurity efforts extend across the automotive supply chain, requiring collaboration between OEMs and component vendors. Development tools, rapid prototyping hardware, and graphical configurators simplify security implementation. Additionally, support for AUTomotive Open System ARchitecture (#AUTOSAR) and ISO #26262 #functionalsafety standards is essential for comprehensive security solutions. Addressing #supplychain security remains a challenge, particularly in securely programming keys and confidential data into Hardware Security Modules (HSMs) during the product stage without risking exposure of sensitive information. The IoT Security Foundation has been actively addressing this issue, offering valuable insights in their white paper titled 'Securing the IoT Supply Chain.' You can access the publication for further details : https://lnkd.in/gPs5VgPu