DHS releases guide on cybersecurity related to Internet of Things

The U.S. Department of Homeland Security (DHS) recently issued a guide for Internet of Things (IoT) cybersecurity to equip stakeholders with the knowledge to make risk-based decisions as they design, manufacture and use internet-connected devices and systems.

DHS issued the set of strategic principles for bolstering IoT security as network-connected devices, systems and services become increasingly integrated and relied upon by critical infrastructure in the United States.

The characteristics of the IoT ecosystem also result in multiple opportunities for bad actors to manipulate the flow of information to and from network connected devices, DHS noted.

“The growing dependency on network-connected technologies is outpacing the means to secure them,” DHS Secretary Jeh Johnson said.

Johnson said the guide is a first step to motivate and frame conversations about positive measures for IoT security among developers, manufacturers, service providers and the users who purchase and use their products.

“We increasingly rely on functional networks to advance life-sustaining activities, from self-driving cars to the control systems that deliver water and power to our homes.  Securing the Internet of Things has become a matter of homeland security. The guidance we issued today is an important step in equipping companies with useful information so they can make informed security decisions,” Johnson said.

The principles focus on a few key areas including incorporating security in the design phase, advancing security updates and vulnerability management, building on proven security practices, prioritizing security based on potential impacts, promoting transparency in the IoT ecosystem and connecting carefully.