-: IoT considerations. 2 2
In this lesson, 3 3
we're going to discuss how you can best secure 4 4
your Internet of Things devices, 5 5
when you connect them to your network. 6 6
When it comes to IoT, 7 7
I believe there are many things you should be doing 8 8
within your organization to best protect yourself. 9 9
First, you need to understand your endpoints. 10 10
Each new IoT device brings with it, new vulnerabilities. 11 11
So you need to understand your endpoints 12 12
and what their security posture is. 13 13
If you're adding a new wireless camera 14 14
or a new smart thermostat, 15 15
each one of those brings different vulnerabilities 16 16
that you need to consider before connecting those devices 17 17
to your network. 18 18
Second track and manage your IoT devices. 19 19
You need to be careful and don't just let anyone connect any 20 20
new IoT device to your network. 21 21
Instead, 22 22
you need to ensure you have a good configuration management 23 23
for your network and follow the proper processes to test, 24 24
install, and operate these IoT devices, 25 25
when you connect them. 26 26
Third, patch vulnerabilities. 27 27
IoT devices can be extremely insecure. 28 28
If you're deploying a device, 29 29
you need to understand the vulnerabilities 30 30
and patch them the best you can. 31 31
After that, 32 32
you're still going to be left with some residual risk here, 33 33
but there may not be a bug fix or security patch available 34 34
for that IoT device. 35 35
If that's the case, 36 36
you need to conduct some risk management 37 37
and determine if you're willing to accept the risk, 38 38
or if you need to put additional mitigation in place, 39 39
like putting them on a separate VLAN. 40 40
Fourth, conduct test and evaluation. 41 41
Before you connect any IoT device to your network, 42 42
you should fully test it and evaluate it, 43 43
using penetration testing techniques. 44 44
It is not enough to trust your manufacturer when they say 45 45
their devices are secure because many of these devices 46 46
are not. 47 47
Therefore always conduct your own assessments 48 48
of their security by conducting it on a test network 49 49
or lab before you attach it to your production network. 50 50
Fifth, change default credentials. 51 51
Just like network devices, 52 52
each IoT device has a default username and password 53 53
that allows you to connect to it and configure it. 54 54
These default credentials present a huge vulnerability. 55 55
So they have to be changed before you allow the IoT device 56 56
to go into production on your network. 57 57
Sixth, using encryption protocols. 58 58
IoT devices are inherently insecure. 59 59
So it's important that you utilize encryption protocols 60 60
to the maximum extent possible to better secure the data 61 61
being sent and received by these IoT devices. 62 62
Seventh, segment IoT devices. 63 63
The Internet of Things devices should be placed 64 64
in their own VLAN and their own sub-net 65 65
to ensure they don't interfere 66 66
with the rest of your production network. 67 67
If you can afford it, 68 68
you may even want to have a separate IoT only network 69 69
to provide physical isolation, as well. 70 70
As you can see, 71 71
there are lots of different considerations 72 72
that you need to think about when it comes 73 73
to connecting Internet of Things, devices to your network. 74 74
(dramatic music)