![\"IoT](\"https:\/\/solutionsreview.com\/endpoint-security\/files\/2018\/03\/cybersecurity-report-sonicwall-mod.png\")
<\/p>\n<\/p>\n
Do you remember the Mirai botnet attack? <\/span><\/p>\n If your enterprise had any online presence on October 12, 2016, then you most likely do\u2014and with a shudder at that. The IoT<\/a> botnet attack brought down huge parts of the Internet, especially on the east coast of the U.S.A. Thankfully, we haven\u2019t seen an IoT botnet attack on the same scale since that fateful day, but enterprises are adding fuel to a potential fire by fostering the growing IoT market. According to a Ponemon study, 16,000 IoT devices connect to the average enterprise\u2019s network every day. \u00a0<\/span><\/p>\n That\u2019s where IoT Endpoint Security<\/a> Best Practices come in: to secure what seems on the surface inherently insecure. <\/span><\/p>\n By definition, an IoT device<\/a> refers to any non-computer electronic device that possesses processing power and an internet connection. Devices can include cameras, smart watches, routers, voice-activated assistant devices, etc. <\/span><\/p>\n The problem with these devices connecting to your enterprise\u2019s network is that IoT devices are most often run on firmware that is difficult to patch if not outright impossible. Additionally, if they have come with administrative passwords on their processor, they are usually incredibly easy to guess or crack. Consumer-facing IoT devices often have their specs and firmware published by manufacturers online, accessible to anyone and therefore easily reverse-engineered to reveal security vulnerabilities. <\/span><\/p>\n 97% of enterprises, according to a Ponemon study, believe they will suffer a catastrophic IoT-related data breach in the near future. 81% of enterprises say that an unsecured IoT device<\/a> will cause a data breach in their enterprise over the next two years. \u00a0<\/span><\/p>\n Put another way, IoT devices are a growing attack surface in your enterprise\u2019s IT environment. Yet it can be challenging to even evaluate how many IoT devices are connecting to your enterprise\u2019s network. Only 45% of enterprise respondents to Ponemon believe it is possible for them to keep an inventory of all of their IoT devices. 88% said that the absence of a centralized control dashboard as the primary reason for this challenge. \u00a0<\/span><\/p>\n In order to fight against letting IoT devices becoming an unguarded attack vector in your network, follow these IoT endpoint security best practices: <\/span><\/p>\n Prevention is a critical aspect of cybersecurity and endpoint security in particular, but the sad truth is that no system can protect against 100% of threats. When a threat does inevitably break through your preventative measures, you need to make sure that employees and IT security team members can recognize the threat and know what to do to contain it and alert relevant parties. <\/span><\/p>\n This may seem like an odd point to be included in a list of IoT endpoint security best practices, but it\u2019s actually important to recognize that your own selection process is a factor in your security. <\/span><\/p>\n If you are selecting a new IoT device, make sure that device can be remotely updated. If you have older IoT devices, see if they have been updated recently and if they are even still receiving updates. If they can\u2019t be updated, or are no longer receiving updates, it is time to disconnect it from your network. Find a new device that does the same functions, and keep all of your devices updated. \u00a0<\/span><\/p>\n Common sense? Yes. But it\u2019s still a good step to enforce in your employees\u2019 everyday behavior. And when you turn IoT devices off, also take a moment to deliberately disconnect them\u2014many IoT devices continue to function while \u201coff.\u201d \u00a0<\/span><\/p>\n This means separate on the network\u2014behind its own firewall and monitored network if possible\u2014 but also out of reach from employees\u2019 physical reach. Unless absolutely necessary, employees should haven\u2019t access to IoT devices. They can easily change the password on these items and increase the risk of insider threats. \u00a0<\/span><\/p>\n Always, always encrypt your IoT devices when possible. If you can, only connect IoT devices with encryption.<\/span><\/p>\n Further, your IT security team should be monitoring the network traffic stemming from and going to your IoT devices. This can help detect suspicious activity and DDoS attacks before they occur. \u00a0<\/span><\/p>\n These are all good places to start, but for optimal success make sure that IoT endpoint security best practices are incorporated into your business processes and employees\u2019 behavior. Your security is dependent as much on your teams as it is on your solutions. Work with your solution, not against.<\/span><\/p>\n Do you remember the Mirai botnet attack? If your enterprise had any online presence on October 12, 2016, then you most likely do\u2014and with a shudder at that. The IoT botnet attack brought down huge parts of the Internet, especially on the east coast of the U.S.A. Thankfully, we haven\u2019t seen an IoT botnet attack […]<\/p>\n","protected":false},"author":41,"featured_media":1142,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[2],"tags":[31,75,22,13,30,161,20,84],"acf":[],"yoast_head":"\n\t\t\t![\"Download](\"https:\/\/solutionsreview.com\/endpoint-security\/files\/2019\/01\/endpoint-security-speedbump-cta.jpg\")
<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\nThe Context for IoT Endpoint Security<\/b><\/h3>\n
IoT Endpoint Security Best Practices<\/b><\/h3>\n
Initiate An Incident Response Plan<\/span><\/h4>\n
Deploy Only Appropriate IoT Devices <\/span><\/h4>\n
Turn Off The Devices You Aren\u2019t Using. <\/span><\/h4>\n
Keep IoT Devices \u201cSeparate\u201d <\/span><\/h4>\n
Encrypt and Monitor <\/span><\/h4>\n
\t\t\tGartner MQ for Endpoint Protection Platforms: What’s Changed?<\/a><\/strong>![\"Solutions](\"https:\/\/solutionsreview.com\/endpoint-security\/files\/2018\/03\/123-e1522249821940.png\")
<\/a><\/div><\/p>\nGARTNER: Magic Quadrant for Endpoint Protection Platforms<\/a>
\n<\/strong>![\"Download](\"https:\/\/solutionsreview.com\/identity-management\/files\/2016\/06\/Gartner-IDaaS-Magic-Quadrant.png\")
<\/a><\/div><\/p>\n
\n<\/a>![\"\"](\"https:\/\/solutionsreview.com\/endpoint-security\/files\/2018\/03\/2018-endpoint-security-buyers-guide-clip-art.png\")
<\/a><\/div><\/div><\/div>\n<\/div>\n\t\t<\/div><\/div><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"