IoT drives cyber security to radical change

The Internet of Things as well as emerging technologies like "wearables" are facing an entirely new set of  threats. Tranditional cyber security methodology such as depending on finding known signatures is no longer sufficient and will not work.

This week, a report from internet security platform 'freebuf' has exposed vulnerabilities in 'ciming' physical examination website. Patients's personal examination info can be easily hacked. As the continuous growth in interconnected market, data security becomes a top priority for organizations of all sizes. In the past, cyber threats has existed in two dimensions: behind the firewall and beyond. But with the IoT, cyber risk now stretches across a third dimension. BYOD users are expanding cyber attack surface to enterprise IT management. A compromised wearable device or a rooted connected vehicle will increase cyber risk for organizations. Companies should broaden defenses ecosystems for the IoT movement.

A proactive defense is a better proactive. Real-time intelligence and thread assessment data can be used to shape decision making and preempt threats. As internet connectivity touches everything from hue bulbs to vehicles and electric stoves, cyber security and risk management must be accounted for when designing and producing products. Strong embedded security is now an undeniable requirement, which can differentiate a company and its products in a competitive market.

An explicit role responsible across all facets of the organization can be more efficient. So maybe the CIO or CISO should be assigned this job. It can also break down the barrier between different silos.

IoT  BYOD boost potential productivity gains while the enterprises should keep the data secured. This is a good era for security vendors which can provide comprehensive security control management services like SAAS, but also a bad era for those being a step behind.

人介绍：

Samsung Electronics VD IoT Platform高级工程师，在物联网，云计算，移动通讯，网络安全和消息传递基础构架领域拥有超过9年的专业知识和经验。拥有丰富的企业消息传递基础构架开发，物联网、云、设备联接解决方案开发，以及成熟的管理软件和解决方案，如敏捷和DevOpts的开发经验。在国内首次提出SDT(software-defined Things)的IOT概念，拥有3项专利(一份正评审中)。

是三星、英特尔、戴尔所成立智能家居设备标准联盟开放互联联盟(OIC)的代码贡献者(https://gerrit.iotivity.org/gerrit/p/iotivity.git)

https://www.iotivity.org/documentation/iotivity-services/protocol-plug-manager

经常参与云计算,物联网等开源社区(Vmware,ECUG失效云计算用户组)交流讨论，关注开源社区技术动态