• Search for:
    27Feb, 2023
    NIST Picks Ascon Algorithms to Protect Data on IoT, Small Electronic Devices

    The National Institute of Standards and Technology (NIST) has selected a group of cryptographic algorithms called Ascon as the lightweight cryptography standard to protect data flowing through IoT devices.

    Following a multi-year effort that included security code reviews, NIST announced the Ascon family of algorithms will soon be the standard to protect data created and transmitted by the Internet of Things (IoT), including its myriad tiny sensors and actuators. 

    The Ascon algorithms, developed in 2014 by a team of cryptographers from Graz University of Technology, Infineon Technologies, Lamarr Security Research and Radboud University, are designed for miniature technologies such as implanted medical devices, stress detectors inside roads and bridges, and keyless entry fobs for vehicles. 

    According to NIST, these tiny devices need “lightweight cryptography” — protection that uses the limited amount of electronic resources they possess

    The Ascon family was selected in 2019 as the primary choice for lightweight authenticated encryption in the final portfolio of the CAESAR competition, a sign that Ascon had withstood years of examination by cryptographers, NIST said in a note announcing the choice.

    “The world is moving toward using small devices for lots of tasks ranging from sensing to identification to machine control, and because these small devices have limited resources, they need security that has a compact implementation,” said NIST computer scientist Kerry McKay.  “These algorithms should cover most devices that have these sorts of resource constraints.”

    The standards body expects Ascon to power two of the most important tasks in lightweight cryptography: authenticated encryption with associated data (AEAD) and hashing. 

    The Institute made it clear that the new algorithms are not intended to be used for post-quantum encryption.  

    “One of the Ascon variants offers a measure of resistance to the sort of attack a powerful quantum computer might mount. However, that’s not the main goal here,” McKay said. “Post-quantum encryption is primarily important for long-term secrets that need to be protected for years. Generally, lightweight cryptography is important for more ephemeral secrets.” 

    Resource : https://www.securityweek.com/nist-picks-ascon-algorithms-to-protect-data-on-iot-small-electronic-devices/

    16Feb, 2023
    Top 10 Careers in Science

    For most people, a job in science is profitable, fulfilling, innovative, and demanding. It allows you to expand and increase your information while also assisting you in comprehending your surroundings and the people around you. Knowing about various science occupations might help you make the best career decision. This article will look at several science occupations, critical tasks, and average salaries to help you choose the correct path and careers in science.

    Top Science Careers to Look For in 2022

    Science is a multi-disciplined field with a significant potential for progress. It offers a dynamic work atmosphere and an extensive learning and exploration area.  Let’s explore various careers in science now.

    Physicist

    Physics researchers look into the qualities of matter, energy, and time. A few physicists usually conduct further theoretical research to find out more about how the universe actually works. In contrast, others run applied research to apply theoretical knowledge to actual processes or devices to improve the technology we use. 

    Physics helps in answering vital issues like how the universe came into existence and what are the natural principles that govern the interactions between energy and matter.  Physics research may be utilized to develop new communication systems, alternative energy sources, and more sophisticated medical technologies.

    Chemist

    A chemist can also be regarded as a scientist who studies the characteristics and reactions of chemicals. They examine a variety of chemical substances, both organic and inorganic. They experiment with chemical substances to better understand their behavior, produce new compounds, or improve current ones. Their key responsibilities include doing quality control checks on chemical experiments and providing reports on the test and analysis findings and conclusions.

    Astronomer

    Astronomers investigate space structures such as stars, planets, galaxies, and black holes. They study these items’ features, movements, and compositions, recording and analyzing data meticulously. This is another science that requires the ability to do complex mathematical calculations. Astronomers employ telescopes and other ground-based equipment and equipment that has already been launched into space, such as the Hubble Space Telescope, to conduct their research.

    Spacetech

    While doctors, engineers, biologists, and pharmacists are unquestionable employment alternatives for scientific students, young individuals’ interest in space sciences is slowly growing. Nonetheless, as technology becomes more integrated into practically every field of study, space technology is gaining traction.

    To work in the space technology industry, you’ll need a bachelor’s degree in space sciences and mechanical engineering. However, for those interested in unraveling the secrets of space. Also, this is quite an exciting career option for people who are interested in space.

    The ones who work in space technology and science can earn a few thousand to a few lakhs per month. The scope of this discipline is still expanding, creating limitless chances for advancement.

    Geology

    Geology is for you interested in rocks, Earth, soil, and land. Geologists are scientists who specialize in Earth and soil science. These experts examine a region and foresee probable threats such as earthquakes and volcanoes. Based on this research, they produce designs for builders and construction businesses to build structures.

    Geology is a vital yet underappreciated and unusual science. A four-year bachelor’s degree in geology can be combined with a master’s or PhD for further specialization to become a geologist. The income is not as high as the professions indicated above because it is a relatively underestimated and unorthodox topic of study. However, because this is a passion-driven job, earnings increase as expenses increase. Starting salaries might range from INR 3.5 lakh to INR 5 lakh per year.

    Geoscientists

    Do you prefer to study something closer to home? Geoscientists examine the structure, composition, processes, and physical qualities of the Earth. By understanding more about the Earth, these scientists can better appreciate its history and predict future changes. Geology, geochemistry, geophysics, petroleum geology, seismology, oceanography, paleontology, and engineering geology are all disciplines within the geosciences subject. Which geosciences profession is best for you? It depends upon what you want to learn and how you want to apply your knowledge. 

    Geoscientists investigate everything from rock formation to earthquakes, and their job can range from theoretical studies to utilizing their knowledge to find petroleum deposits for drilling. Diverse types of geoscientists may pursue quite different objectives. Some people work to protect the environment or restore it, while others look for petroleum or other natural resources.

    Data Analyst

    A data analyst collects and organizes disparate data to produce a valid result. They create databases and data collection systems and deploy them. Their primary responsibility is to find, analyze, and interpret data trends and patterns from a large quantity of data. They collect insightful data and establish company plans using statistical techniques and various data analysis technologies. 

    A data analyst requires an advanced understanding of several data analysis tools, statistics, math, and communication skills. To become a data analyst, you can study computer modeling, analytics, or related disciplines in your bachelor’s or master’s degree.

    Atmospheric Researchers

    Do you have a wish to become a weather forecaster? Why not look into climate change? Atmospheric scientists are experts who study the atmosphere to understand better and solve problems ranging from severe storms and air pollution to droughts and climate change impacts. Atmospheric scientists collect temperature, humidity, pressure, and wind speed. 

    They use mathematical and computer models to examine the information. Atmospheric scientists utilize their meteorological data to convey present weather conditions and – and perhaps more crucially – to forecast future weather conditions, both in the immediate and long term. 

    Atmospheric scientists issue a public warning if severe weather risks injury or property damage. Weather balloons, satellites, radar systems, and computer software are among the equipment used by atmospheric scientists in their studies.

    Zoology

    Animal anatomy, physiology, development, and categorization are all studied in zoology, a branch of biology that examines animals and animal life. A zoologist is a scientist who specializes in the study of animals.

    Biotechnology

    A Biotechnology course will pique your interest if you are interested in biology and are fascinated by the dynamics of technology. Furthermore, combining Nanotechnology and Biotechnology courses opens up many professional options, particularly in research and academia. To advance in this sector, you can pursue a BSc in Biotechnology or a BTech in Biotechnology.

    Resource : https://www.simplilearn.com/careers-in-science-article

    10Jan, 2023
    The Top 4 Internet Of Things Trends In 2023

    The Internet of Things (IoT) is a term that’s come to be used to describe the ever-growing networks of physical objects that are online, connected, and capable of communicating and sharing information with us and with each other.

    Computers and then smartphones were the first devices that were connected to the internet. Over the past decade, our homes have become filled with smart TVs, connected kitchen appliances such as kettles and fridges, and smart alarm systems, cameras, and lightbulbs. At the same time, we have become used to working alongside smart machinery in workplaces, driving smart cars, and even living in smart cities.

    In 2023, it’s predicted that there will be more than 43 billion devices connected to the internet. They will generate, share, collect, and help us to make use of data in all manner of ways. So, here’s an overview of some of the key trends that will affect how we use and interact with these devices during the coming year.

    Digital Twins and the Enterprise Metaverse

    This is a convergence of two very important tech trends that will define how technology is used across industry and enterprise during 2023. For business, one of the most valuable applications of the metaverse will be bridging the gap between the real and virtual worlds. By using data from IoT sensors, it will be possible to build increasingly realistic digital twins of many different systems – from manufacturing facilities to shopping malls. Business users will then be able to step inside these digital twins using experiential metaverse technology like VR headsets to get a better understanding of how they work and how adjusting individual variables is likely to influence business outcomes.

    We are already seeing applications of this technology convergence in retail, where store planners can monitor footfall in real-time and make adjustments to displays and promotions to monitor how this impacts customer behavior and, ultimately, revenue generation. In industrial settings, it allows designers of factories and manufacturing plants to experiment with different machinery configurations, as well as to highlight potential safety issues and predict when breakdowns might occur.

    IoT Security

    IoT devices make our lives easier and more convenient, but they also leave us open to new and varied forms of cyberattack. To put it simply, the more connected devices we have in our environments, the more doors and windows are potentially open to attackers. As the number of devices explodes during 2023 and beyond, businesses, device manufacturers, and security experts will step up the fight to keep “malicious actors” at bay, minimizing their chances of getting their hands on our valuable data.

    In the US, the White House National Security Council has stated that it hopes to have standardized security labeling in place for consumer IoT device manufacturers by early 2023. These will help buyers to understand what risks might be posed by specific devices they introduce into their homes. Many basic attacks, such as phishing attacks, rely on social engineering – tricking users into divulging access details – and can be thwarted by taking basic precautions. The UK is also expected to introduce its own Product Security and Telecommunications Infrastructure (PTSI) bill.

    For those involved in IoT – particularly in the consumer space where networks can be the only barrier between thieves and hugely sensitive personal data – spending on security measures is forecast to hit $6 billion during 2023.

    The Internet of Healthcare Things

    Healthcare is a huge area of opportunity for IoT technology, and the value of the market for IoT-enabled health devices is set to hit $267 billion by 2023.

    One of the biggest gamechangers is the use of wearables and in-home sensors to enable healthcare professionals to monitor the condition of patients outside of the hospital or doctor’s surgery. This enables 24/7 care while freeing up valuable resources for patients who need immediate and direct care. In 2023 more of us will become familiar with the concept of the “virtual hospital ward”, where doctors and nurses will oversee the monitoring and treatment of patients in their own homes thanks to sensors and telemedicine.

    On the consumer side, wearable devices allow everyone to gain better insights into their own health and fitness, which again will help reduce the strain on existing healthcare systems by allowing us to seek help earlier when something is wrong, as well as gain a better understanding of how diet and exercise impact our health. Smartwatches featuring ECG and Sp02 sensors are now commonplace, and over the next year, we can expect to see more products, such as wearable skin patches. We may even see devices from Elon Musk’s Neuralink, which is creating implants that read neurological signals – one of the first applications being targeted could help people with paralysis regain control of their bodies.

    Governance and regulation in the IoT Space

    During 2023, the EU is expected to introduce legislation requiring manufacturers and operators of smart devices to follow stricter rules about how data can be collected, where it can be stored, and what they need to do to protect against breaches. This is just one piece in a raft of new legislation that we can expect to be implemented around the world. This means that 2023 may very well be the year that governments start to get to grips with the legal and social ramifications of an ever-expanding IoT. EU legislation is also expected to address issues around edge computing, which utilizes devices designed to process data at the point where it is collected rather than sending it back to centralized cloud servers to be analyzed. Meanwhile, in Asia, 2023 marks the culmination of a three-year plan by the Chinese government to put policies in place to allow the widespread adoption of IoT technology across the country. In China, as elsewhere in the world, the IoT is seen as having the potential to drive massive business growth, but there is an understanding that it needs to be grown in a managed way to avoid potential clashes with privacy issues and personal rights.

    To stay on top of the latest on the latest business and tech trends, make sure to subscribe to my newsletter, follow me on Twitter, LinkedIn, and YouTube, and check out my books ‘Tech Trends in Practice’ and ‘Business Trends in Practice, which just won the 2022 Business Book of the Year award.

    Resource : https://www.forbes.com/sites/bernardmarr/2022/11/07/the-top-4-internet-of-things-trends-in-2023/?sh=a2baf5d2aea1

    29Dec, 2022
    Top 10 Best IoT Security Tools – 2023

    Top 10 Best IoT Security Tools

    • AWS IoT Device Defender
    • Appknox
    • Palo Alto Network
    • Azure Sphere
    • Microsoft Defender for IoT
    • Forescout Platform
    • Verizon IoT Security
    • Verimatrix
    • Trustwave
    • Armis

    1. AWS IoT Device Defender

    An easy-to-perform audit that scans an entire group of AWS IoT devices to find any type of gap in your IoT network.

    one of the best Traffic monitoring IoT Security Tools that can be run using ML models or your own defined actions against malicious IPs.

    It helps you implement consistent security policies across your AWS IoT device fleet and makes it easier to respond to attacks.

    The AWS IoT Security Team continuously updates its knowledge base of security best practices. All data is also implemented into the tool to provide the best possible solution to IoT network vulnerabilities.

    ProsCons
    Integration with APIIntegration with API is a little difficult

    2. Appknox

    Appnox and IoXt have partnered to bring security to IoT devices. All users must follow ioXt security promises to keep their devices safe.

    The eight principles are:

    Do not set a default password on the device (i.e. change the default password).

    Interface security is provided by the manufacturer against security attacks. Authentication methods are stricter.

    Encryption is implemented on the device and many layers of encryption are performed to keep your connection and data secure. Device certification profiles are checked for basic security measures.

    The latest updates for your device from the manufacturer are sent to you and updated for known vulnerabilities.

    It has an automatic security update feature that makes security updates available to users, and the manufacturer is responsible for security updates, validation, and deployment.

    Manufacturers must have good vulnerability reports and act appropriately (that is, patch all vulnerabilities) according to the vulnerabilities found in the reports.

    The time when the security update will be fixed and users will be notified of the expiration date.

    ProsCons
    Easy and scalable.High Cost
    Industry standards test cases and good security.you have to update your tool with other test cases
    Api  Scans need improvement

    3. Palo Alto Network

    Palo Alto Network is the industry’s first complete IoT security solution, providing a machine-learning approach to detect any anomaly.

    This tool uses a zero-trust system and policy based on risks for your IoT network to prevent any kind of blind spots in your network.

    The unique combination of the NGFW and IoT visibility enables context-aware network segmentation as a result of which the risk exposure is reduced.

    ProsCons
    very high throughput and low latencyIt is costly
    Very easy for establishing a VPN and implementing allow/deny rules.logs are saved for one week, which can be improved

    4. Azure Sphere

    The Azure Sphere IoT Security Tool is a high-level application platform that provides security for internet-connected devices (IoT devices).

    The Azure Sphere has an MCU (microcontroller unit). It is a custom, high-level Linux-based operating system, and cloud-based security service that provides continuous, updatable security.

    I am using the Azure Sphere security service from Azure Sphere. Connectivity to the cloud and web is secured to the MCU.

    This service ensures that devices are only booted with genuine, genuine software and also provides a channel through which operating system updates are automatically performed. Protection against many possible errors.

    ProsCons
    One Stop ShopMonitoring Response is Slow
    Low-cost option with high-quality security

    5. Microsoft Defender for IoT

    Microsoft Defender for IoT is an integrated security solution for identifying IoT (Internet of Things) and OT (operational technology) devices, vulnerabilities, and threats. And all of this can be centrally managed with the help of Microsoft Defender for IoT.

    Microsoft Defender for IoT can be deployed in a hybrid environment connected to Azure or completely on-premises.

    Microsoft Defender for IoT also provides lightweight micro-agents that support standard IoT operating systems such as Linux and RTOS for IoT device makers. It also helps ensure that security is built into IoT devices.

    ProsCons
    They have a good UI and the features are very useful.Setting Up is a little difficult
    Easy to Use.
    Easily binds with cloud-based IoT network.

    6. Forescout Platform

    A unified platform that discovers all devices on the network (IoT, IoMT, OT, or IT devices) whenever they connect to the network.

    It also classifies and segments all devices based on a three-dimensional taxonomy (device type, operating system, and model).

    Takes automatic action on every red light and eliminates time spent resolving alarms.

    Proven scalability with multiple deployments of over 2 million devices and over 1,000 locations.

    ProsCons
    User management is very easy with this tooldue to the license the cost gets higher.
    Good Visibility in the toolservice are chargeable every time

    7. Verizon IoT Security

    IoT Security Credentialing platform of Verizon provides a comprehensive approach to the security of Iot Devices.

    IoT Security Credentialing offers three layers of protection, with an over-the-top layer of security for devices and apps, data encryption, and trusted user and device authentication.

    The ThingSpace platform provides tools to test and manage the devices and apps on the Verizon Platform. You can also scale a prototype you want to implement on an enterprise level, with the help of ThingSpace.

    Verizon IoT Security provides a lot of different approaches to IoT Security such as:

    IoT Security Credentialing

    ThingSpace for IoT

    IoT Marketplace

    IoT for small business

    ThingSpace Marketplace provides one place solution for any IoT solution. You can purchase, activate and manage your devices as your solution and business grow.

    IoT for small businesses from its name itself shows that it is made by keeping small businesses in mind they provide two functionalities as follows:

    • Fleet and Mobile Worker Management
    • Critical Asset Tracking
    ProsCons
    On-Site SupportTypes of Software/Services
    Highly ScalableRemote Support is not that good
    On-Premise

    8. Verimatrix

    This IoT Security Tool Verimatrix software features a shield suite consisting of Code Protection, Whitebox, and App Shield tools that integrate with your IoT device infrastructure to provide comprehensive security.

    Verimatrix provides end-to-end security for a wide range of IoT devices including medical devices, smart home devices, and connected cars.

    This will also prevent an increase in threats from 5G networks.

    With the help of verimatrix Whitebox, your team can design their own custom architecture based on cryptography. This protects your data even if it falls into the wrong hands.

    Code Shield Stops and disrupt hackers with the most demanding, market-proven, patented, intelligent, and automated security tools. App Shield injects the solution directly into your app without affecting your application’s functionality.

    ProsCons
    Open Source Component MonitoringSupport is slow to respond

    9. Trustwave

    Trustwave’s Managed IoT Security helps you scan your network and retrieve asset details.

    Trustwave Managed IoT Security can scan APIs, servers, and cloud clusters to better protect your IoT devices.

    Trustwave provides database monitoring for implementers and manufacturers who can implement security directly.

    With the help of the Digital Forensic and Incident Response Team, organizations can proactively prevent attacks of all kinds.

    ProsCons
    Easy to UseTakes longer to Compile
    Has Advanced FeaturesA little complicated for a non-technical person
    Large user community

    10. Armis

    This IoT Security Tool is the first enterprise-class agentless security platform to address the emerging threat landscape of unmanaged IoT devices.

    Armis provides security for all managed and unmanaged devices. 1000s of fortune companies trust Armis for out-of-band sensing technology.

    Armis CIPP Services enable you to quickly leverage Armis Intelligence data for recommended policy changes, incident response, operations management, and remediation.

    It also monitors connecting devices in the airspace using peer-to-peer protocols ignored by traditional security products.

    Allows automatic disconnection/quarantine of all devices that fail to match the base-level security policy.

    ProsCons
    Create Dashlets in DashboardA little expensive
    Managing alerts is very easyMaking Policies right according to your need takes a little time.

    Resource : https://cybersecuritynews.com/iot-security-tools/

    23Dec, 2022
    Researchers Develop AI-powered Malware Classification for 5G-enabled IIoT

    The global industrial internet of things (IIoT) market reached an all-time high in 2022 and, by many accounts, it is expected to continue to grow. It is estimated the market will reach $106.1bn by 2026, according to MarketsandMarkets. Meanwhile, Data Bridge Market Research mentions a global value of $541bn by 2029 and Future Markets Insight expects it to reach $1.3tn by 2032.

    This surge comes in a context where there are very few IoT standards and regulations, let alone IIoT specific standards. This poses a significant security risk, leaving devices used in critical applications such as healthcare, safety systems, or utilities, vulnerable to cyberattacks.

    To start addressing the problem, a team of multinational researchers led by Professor Gwanggil Jeon from Incheon National University, in South Korea, have developed a deep learning-based malware detection and classification system. Their work was published online on September 9, 2022 in the journal IEEE Transactions on Industrial Informatics.

    The system developed by the team first uses a deep learning network to analyze the malware, and then applies a multi-level convolutional neural network (CNN) architecture to a malware classification method known as ‘grayscale image visualization’.

    This technique consists of transforming the raw bytes of malware into grayscale images and extract the malware texture features for classification. The team also integrated this security system with 5G, which allows for low latency and high throughput sharing of real-time data and diagnostics.

    Groundwork For Advanced Security Systems

    The first results are staggering: “Compared to conventional system architectures, the new design showed an improved accuracy that reached 97% on the benchmark dataset,” the paper reads. The team of researchers also discovered that the reason behind such high accuracy is the system’s ability to extract complementary discriminative features by combining multiple layers of information.

    According to the researchers, this novel malware detection and classification method can be used “to secure real-time connectivity applications such as smart cities and autonomous vehicles [and] provides solid groundwork for the development of advanced security systems that can curb a wide range of cybercrime activities.”

    “Our system harnesses the power of AI to enable industries to recognize miscreants and prevent the entry of unreliable devices and systems in their IIoT networks,” Jeon said.

    Resource : https://www.infosecurity-magazine.com/news/ai-malware-classification-for-5g/

    15Dec, 2022
    Top 12 Emerging IoT Technologies
    IoT Technology in India | NASSCOM Community | The Official Community of Indian IT Industry

    According to Gartner, wireless IoT connectivity will be outpaced by low-power short-range networks by 2025, by far outnumbering connections build using the wide-area Internet of Things (IoT) networks.

    For businesses to gain and adopt the full value of IoT technologies, significantly more investment is required in training and hiring professionals. Developing Internet of things will demand a huge range of new skills and technologies, including platforms, new hardware, operating systems, cloud services, high-volume data processing, as well as standards and ecosystems. This post will explore the top 12 emerging IoT technologies that can be utilized for IoT application development.

    IoT Security

    Security technologies will be necessary to safeguard IoT platforms and devices from cyberattacks and physical manipulation, encrypt their communications and handle novel problems like impersonating “things” or battery-draining denial-of-sleep attacks. The fact that many “things” employ basic processors and operating systems that might not be able to handle advanced security techniques will make IoT security more difficult to implement.

    Security technologies will be needed to protect IoT platforms and devices from physical and digital threats, scramble their communications, and handle new challenges.

    For instance, assuming the identity of “things” or engaging in battery-draining attacks against sleep. The fact that many “things” use basic CPUs and operating systems that do not support contemporary security techniques would complicate IoT security.

    IoT Device Management

    The next emerging technology in IoT will be enabling those technologies that are location, context, and state-aware while at the same time remains consistent with data and knowledge taxonomies. IoT device management will allow an IoT development company to break all the boundaries of traditional data management and create a new data structure, that is capable of learning and flexing to requirements of unique inbound data over time.

    IoT Analytics

    Analytics in IoT requires creating new algorithms, data structures, architectures, and approaches to machine learning if businesses are going to get the full value for the data captured, and knowledge created. Distributed analytics architecture will allow IoT development companies to use secure IoT network architectures, grab on pervasive that will actually become knowledge-sharing networks.

    Low-Power Short-Range IoT Networks   

    Low-power short-range IoT networks will dominate wireless IoT connectivity by the year 2025. This will outnumber all the connections that are using wide-area IoT networks currently. Therefore, IoT development companies should use this in order to develop new IoT applications for their clients.

    Low-Power Wide-Area Networks

    According to a recent survey by Gartner, modern cellular networks are not able to deliver the proper combination of operational costs and technical features for the IoT applications that require wide-area coverage in combination with good battery life, low bandwidth, high connection density, low hardware and operating costs.

    IoT Operating Systems

    Small operating systems will gain momentum in IoT application development by 2020 because traditional large-scale operating systems like Mac and Windows are complex in nature and requires resources for the majority of IoT applications. People have experienced that these operating systems are excellent and event-driven tasks. Therefore, businesses can be benefited a lot by it and don’t have to spend extra resources on IoT application development on traditional operating systems.

    IoT Ecosystems and Standards

    Although ecosystems and standards are not considered as technologies, they are eventually prepared as APIs(Application Programming Interfaces). Standards and all the APIs associated are important because IoT devices need to integrate and communicate. Many IoT business models usually rely on sharing data between multiple businesses and devices. For that, you need to hire app developers who are familiar with all the ecosystems and standards of IoT.

    Event Stream Processing

    Some Internet of Things (IoT) applications generate extraordinarily high information rates that need to be monitored constantly. Systems that perform numerous times per second are common, and an enormous number of times per second may occur under certain conditions.

    Distributed stream computing platforms have emerged to meet these needs. These systems process extremely high-rate information streams and perform real-time analytics and pattern recognition tasks.

    Mesh Sensors

    Future wearables will be able to track the precise movement of the body in addition to heart rate, exercise, and sleep quality measurements. Mesh sensors play a huge role in this. A wireless network of sensors makes up the technology and the sensors that may be incorporated into clothing and collect infinite data points.

    An app can use those data points to calculate the body’s position in 3D space. This is the precise strategy employed by one mesh sensor company, Cipher Skin, whose BioSleeve monitors are appropriate for various applications, including rehabilitation programs and extremely strenuous exercise routines.

    Containers for MCU Devices

    The use of containers for microcontroller units, or MCUs, tiny, low-power circuits that power tens of millions of IoT devices, from connected washer machines to heat sensors in oil refineries, is an area that hasn’t received as much attention as other areas of container technology.

    An approach for distributing application containers to MCU devices with real-time operating systems has been created by a vendor by the name of Nubix. According to the company, these solutions will increase IoT device creation, maintenance agility, and scalability.

    Battery-Free Sensors

    Imagine the effects of sensors being able to generate their power: battery replacements would no longer be a concern, which is significant when sensor deployments reach the hundreds, if not thousands, or tens of thousands over numerous sites.

    The Eversensor, developed by a Santa Clara,  to the manufacturer, Eversensors can operate without regular maintenance for 20 years.

    California-based firm called Everactive, incorporates a range of sensor types and draws power from various sources, including thermal, indoor solar, and vibration energy. According

    Network Slicing IoT Applications

    Companies are looking to network slicing to separate connections for IoT devices with various requirements for latency, stability, and capacity, among other things, as 5G networks go live worldwide.

    According to Ericsson, one telecommunications company that has made the technology accessible for 5G networks using its equipment, network slicing can be used to ensure, for example, that mission-critical IoT deployments have a low-latency, high-bandwidth connection.

    According to the company, this can let enterprises develop new business models across various “slices” of their 5G networks while enhancing infrastructure effectiveness.

    Final Thoughts about IoT Technologies

    The IoT market is expected to grow by 18% to 14.4 billion active connections by the end of 2022. There will likely be about 27 billion linked IoT devices by 2025 as supply limitations loosen and demand accelerates.

    However, only one percent of IoT data is used and analyzed. All these technologies are going to take IoT to a whole new level. Each of these developments will advance IoT to previously unheard-of heights.

    Therefore, if you are still getting familiar with IoT application development, then you should hire IoT app developers or you should look to hire an IoT app development company that can guide you in developing your IoT business project.

    Resource : https://www.pixelcrayons.com/blog/top-8-emerging-iot-technologies/

    5Dec, 2022
    7 Emerging IoT Tech Trends
    Matthew Margetts, Director of Smarter Technologies takes a look at the burgeoning world of IoT by highlighting seven use-cases where we’re already seeing the tech proliferate.

    The Internet of Things (IoT) is becoming a household name – and one that has found unique applicability in not only our homes, but in our businesses, workplaces, and cities. The number of installed IoT devices is expected to surge to around 30.9 billion units by 2025. The myriad of different forms of technology has the potential to provide incredible business value.

    They are vital tools for digital transformation and datafication – and their power lies in performance improvements, as well as problem-solving capabilities. IoT’s importance as a technology trend this year and into the future is the role it plays in the successes of other technologies. For business owners looking to drive evolution, keeping a finger on the pulse of the latest IoT trends is important for agility into 2023 and beyond.

    What is IoT?

    Broadly speaking, IoT is the ecosystem of internet-connected smart devices and technologies in our homes, cities, and workplaces that continuously collect data.

    IoT facts and figures in 2022 and beyond:

    ●There are more than seven billion connected IoT devices currently in operation.

    ●By 2030, 75% of all devices are expected to be IoT.

    ●Worldwide IoT spending is anticipated to reach $1 trillion and this growth rate is predicted to continue in 2023 and beyond.

    Why is IoT Important?

    A quick view of the benefits of IoT in business:

    ●IoT solutions help to build resilient supply chains

    ●Improved health, wellbeing, safety, and security

    ●Optimised asset usage and maintenance

    ●Reduced overheads

    ●Improved communication and engagement

    ●Meaningful sustainability and environmental advances

    Seven IoT Tech Trends

    1. Remote Monitoring

    According to McKinsey, the Covid-19 pandemic accelerated the adoption of digital technologies by seven years. Off the back of global lockdowns, this naturally includes the requirement for remote monitoring and the move towards automated systems. These IoT-based technologies are being adopted to transform everything from building monitoring and machine performance to building occupancy and machine learning.

    2. Modular Smart Technologies Solutions

    The preference for individual devices performing multiple functions has given way to networks of devices. This network of devices creates a modular system of individual utilities and processes. The result is a granular view of whole operations, which works toward holistic network benefits.

    3. Data Analysis

    Data is arguably one of the top strategic tools for businesses. High-quality data plays a role in designing business strategy (what can be monitored can be more effectively managed) and ensuring the integrity of supply chains. Through alerts around deviations from “normal” data sets, real-time action is also inspired, which can avert disaster and save costs.

    Data also has the ability to inspire high-level compliance, machine learning, customer service, maintenance schedules, safety and security. Additionally, it gives invaluable insights for the purposes of gauging return on investment and preventing wastefulness.

    4. Artificial Intelligence, Machine Learning, and Visual Inspection

    The concepts of artificial intelligence, machine learning, visual inspections, and automation are becoming increasingly commonplace. These functions are all best guided by data insights – removing the unpredictability and margin of error from human processes.

    5. Advanced Networks

    As IoT technologies evolve, so too do the networks around them. Improved speed, security, and reliability of networks and connectivity infrastructure are the precursor to IoT sensors, wearables, smart cities and homes.

    6. Smart Buildings, Smart Cities

    IoT and smart technologies are being used to optimise various functions within the city environment. This is being done as a means of creating a more engaged public and improving everything from public transport systems to responsible and environmentally conscientious resource utilisation.

    IoT technologies and smart technology solutions have also found their way into businesses, buildings, healthcare, retail, agriculture, and manufacturing. IoT technologies stand to have a bearing on many different facets of these different sectors.

    This includes vaccination cold chains, predictive maintenance for enhanced equipment management, transport and logistics. The applications are endless – and are easily tailored to the specifics of a project or long-term strategic objective.

    7. Digital Twins

    Digital twins are virtual replicas of a physical product, process, or system that bridge the physical and digital worlds. Today’s digital twins use sensors to collect real-time data about a physical item, which is used to create a virtual duplicate of the item. The digital duplicate can be optimised, manipulated and analysed to test different scenarios in a risk-free environment.

    What are the Challenges for IoT?

    According to Kaspersky research published in the first quarter of 2022, 43% of businesses have unprotected IoT infrastructure – and cybersecurity concerns remain a barrier to IoT systems implementation (as reported by 57% of surveyed businesses).

    As IoT devices become more prevalent – and as our reliance on them increases – so security concerns take on renewed importance. Gartner reports that 20% of organisations have experienced cyber attacks on IoT devices over the past three years.

    The supply of semiconductor chips for IoT solutions has been put under strain by the high demand in recent times, resulting in a chip shortage. This is expected to limit IoT growth by 10-15% in 2022. The good news is that public and private sector efforts by the European Union are designed to meet the challenges of the shortage and make way for achieved growth potential.

    Traditionally, the optimal effectiveness and speed of data transmission of IoT technologies has hinged on bandwidth capabilities. Network advances will ensure not only that data is transmitted in real time as required by many applications, but also that this process is done securely.

    Resource : https://www.digit.fyi/7-emerging-iot-tech-trends/

    28Oct, 2022
    Comprehensive lithium battery solutions for smart security

    Under the rapid development trend of the IoT and artificial intelligence industry, smart security has gradually replaced traditional security and become the main development mode of the industry. EVE is committed to creating a safer and more reliable lithium battery solution.

    Relying on long-term research on application modes such as Bluetooth, LoRa, Wi-Fi, NB-IoT, and ZigBee, EVE’s products are widely used for smart motion sensors, smart door sensors, flammable gas detectors, smart smoke detectors, smart fire extinguishers, smart door locks, and so on.

    Power supply requirements for different applications:

    Advantages of lithium manganese dioxide batteries

    Lithium manganese dioxide batteries have the advantages of high energy density, no voltage delay, high power output capacity, low self-discharge rate, ultra-wide working temperature range and good environmental adaptability.

    • Low self-discharge rate

    The annual self-discharge rate of a CR2/3AL cell, measured by microcalorimeter, was less than 1% at 25℃. The ultra-low annual self-discharge rate can effectively ensure long battery life.

    • Excellent installed performance of smart smoke detector (CR2/3AL)

    EVE-CR2/3AL battery is installed in a smart smoke detector and perform weekly press tests to confirm that the detector is functioning properly.

    Load voltage variation trend of battery following installation of the smart smoke detector.

    After 10 years of installation, the load voltage of the battery is higher than 2.60V, which is typically used to determine low battery.

    • High capacity and current pulse discharge capability (CR123AH)

    The discharge capacity of the EVE-CR123AH battery is 1800mAh, which is a leading level of the industry.

    The EVE-CR123AH battery has the capability of continuous discharge more than 2000 times of 900mA pulse at 20℃.

    • Cylindrical lithium manganese battery series

    A fully automatic production line together with various inspection equipment (SEM, GC-MS, BET, ICP, and UL1642 and IEC60086 testing equipment etc.) can guarantee the quality of product. For the application of IoT devices, EVE has developed a series of industrial Li/MnO₂ batteries.

    Industrial Li/MnO₂ battery products:

    Conclusion

    Based on reliable design, advanced manufacturing technology, comprehensive testing, and standardized control, EVE gives full play to its technical advantages to produce lithium batteries for Smart Security. The CR battery solution has more than 11 years of industry application experience, can satisfy the standard of UL217 in smart Smoke Detectors Industry and IEC62368, with characteristics of high reliability and safety, long lifespan, low self-discharge rate, high pulse capability throughout the cycle life.

    Resource : https://www.iottechnews.com/news/2022/oct/10/comprehensive-lithium-battery-solutions-for-smart-security/

    26Oct, 2022
    Security experts targeted with malicious CVE PoC exploits on GitHub

    Researchers discovered thousands of GitHub repositories that offer fake proof-of-concept (PoC) exploits for various flaws used to distribute malware.

    A team of researchers at the Leiden Institute of Advanced Computer Science (Soufian El Yadmani, Robin The, Olga Gadyatskaya) discovered thousands of repositories on GitHub that offer fake proof-of-concept (PoC) exploits for multiple vulnerabilities.

    The experts analyzed PoCs shared on GitHub for known vulnerabilities discovered in 2017-2021, some of these repositories were used by threat actors to spread malware.

    The experts pointed out that public code repositories do not provide any guarantees that any given PoC comes from a trustworthy source.

    “We discovered that not all PoCs are trustworthy. Some proof-of-concepts are fake (i.e., they do not actually offer PoC functionality), or even malicious: e.g., they attempt to exfiltrate data from the system they are being run on, or they try to install malware on this system.” reads the research paper published by the experts.

    The team focused on a set of symptoms observed in the collected dataset, such as calls to malicious IP addresses, encoded malicious code, or included Trojanized binaries. The boffins analyzed 47313 repositories and 4893 of them were malicious repositories (i.e. 10.3% of the studied repositories have symptoms of malicious intent).

    “This figure shows a worrying prevalence of dangerous malicious PoCs among the exploit code distributed on GitHub.” continues the paper.

    GitHub malicious repositories PoC exploits

    The researchers analyzed a total of 358277 IP addresses, 150734 of them were unique IPs and 2864 were blacklisted. 1,522 IP addressed were labeled as malicious by Virus Total, and 1,069 of them were listed in the AbuseIPDB database.

    Of the 150,734 unique IPs extracted, 2,864 matched blacklist entries. 1522 were detected as malicious in AV scans on Virus Total, and 1069 were present in the AbuseIPDB database.

    Most of the malicious detections are related to vulnerabilities from 2020.

    During their research the experts found multiple examples of malicious PoC developed for CVEs and shared some case studies.

    One of the examples is related to a PoC developed for the CVE-2019-0708, also known as BlueKeep.

    “This repository was created by a user under the name Elkhazrajy. The source code contains a base64 line that once decoded will be running. It contains another Python script with a link to Pastebin28 that will be saved as a VBScript, then run by the first exec command. After investigating the VBScript we discovered that it contains the Houdini malware.” continues the paper.

    Another example detailed by the experts is related to a malicious PoC designed to gather info about the target. In this case the URL to the server used for data exfiltration was base64-encoded.

    The boffins explained that their study has several limitations. For example the GitHub API proved unreliable and not all repositories corresponding to the used CVE IDs were collected.

    Another limitation is related to the use of heuristics for detecting malicious PoCs. Experts explained that the approach can miss some malicious PoCs in their dataset.

    “However, this approach cannot detect every malicious PoC based on source code, since it is always possible to find more creative ways to obfuscate it. We have investigated code similarity as a feature to help identifying new malicious repositories. Our results show that indeed malicious repositories are on average more similar to each other than non-malicious one.” conclude the experts. “This result is the first step to develop more robust detection techniques.”

    The researchers have shared their findings with GitHub and some of the malicious repositories have yet to be removed.

    Resource : https://securityaffairs.co/wordpress/137527/hacking/malicious-github-repositories.html

    22Oct, 2022
    Network and IoT security in a zero trust security model

    You can never be too careful when it comes to network and IoT security. With a rapidly growing number of disparate devices being connected to corporate and industrial infrastructures, it’s better to be safe than sorry.

    For network administrators it is no longer only about protecting laptops and PCs, but rather about managing a network comprised of a colorful palette of connected hardware including mobile and low-cost IoT devices. But how can you possibly keep your network secure when every device plays by its own rules? The answer is (relatively) simple: TRUST NO ONE!

    This is where the concept of a “zero trust architecture” comes in, which is a security concept based on not trusting a device by default simply because it is part of your network. Instead, every device needs to authenticate itself for every connection it wants to establish. Given that any possible connection involves at least two parties, the authentication that is required here is called mutual authentication.

    There are different communication protocols that make use of mutual authentication, such as SSH and TLS. But what these protocols have in common is that the authentication is based on unique device certificates. Without such a certificate, a device cannot authenticate itself.

    How does a device get a certificate?

    It all starts with the device having its own unique public-private keypair. To generate a certificate, the first step is sharing the public key from this pair with a Certificate Authority (CA). The CA will verify that the public key belongs to this device, by sending it a challenge. Only the device that possesses the corresponding private key will be able to successfully respond to this challenge. Now the CA knows that the public key belongs to the device, and it will create a certificate for it.

    Once created, the certificate can be sent to the device, which is now able to use it in future authentication protocols on networks that consider the specific CA that has created the certificate a trusted source. This is something that makes the term “zero trust” a bit misleading. Even when you don’t trust the devices, there is something that you need to trust. In this case, the trust is based on the certificates and on the authority that provides them.

    But there is another aspect that is important to consider: the private key. The private key is the foundation on which all the security is built. It’s what ties the certificate to the device because anyone who wants to check the authenticity of the certificate can do this by challenging the private key. And because this private key is so important, it should always be stored securely inside the device.

    An attacker should never be able to read, alter or copy this private key, as that compromises the security of the entire network that the device is connected to. Keeping the private key private should be any device’s highest priority. And the network needs to trust (there’s that word again…) the device to be able to do so.

    How is the private key stored securely on the device?

    There are a few ways to do this, starting with the traditional use of secure hardware, like a Secure Element or a Trusted Platform Module. These are both secure chips that need to be added to the device and that take care of creating and securely storing keys. This is an acceptable solution for expensive devices such as phones and laptops but does not usually solve all security issues since limited parties have access to it. However, for low-cost IoT devices adding a secure chip to the bill of materials adds too much cost.

    A more affordable solution is storing the key pair in the memory of one of the chips the device already needs anyway, like a microcontroller. In this case the key pair can be externally provisioned during manufacturing, or it can be internally generated (if the chip has an internal random number generator). The major downside of this option is that chips for IoT devices are not designed for securely storing keys. This means that there is a serious risk of the private key being compromised by a determined attacker with access to the device. On top of this, when keys are injected from the outside, the party that injects those keys is another entity that needs to be trusted to keep the secrets secret.

    There is yet another an alternative to these traditional methods for generating and storing secret keys, and it’s based on physical unclonable functions (PUFs).

    PUFs use deep submicron variations in the manufacturing process of chips to create device unique identifiers. This means that PUFs can generate cryptographic keys (like the key pair we require) from the silicon of chips. These keys are unique for every chip, and they never have to be stored in memory – they are simply (re-)generated every time they are needed. This eliminates the need for externally provisioning keys as well as for using dedicated hardware for protecting stored keys.

    This is why the deployment of PUFs is gaining traction rapidly, especially for low-cost IoT devices. Using PUFs to create and protect the keys needed to generate device certificates provides the kind of trust that a zero-trust architecture requires.

    Conclusion

    Now that we have seen all different building blocks that are required to securely connect devices in a network, we can take a step back and see what we have learned.

    It all starts on the device level, where the foundation of a zero-trust architecture is established by selecting the right way to provision the device with the keys that are the basis for its unique certificate. The method of choice will vary depending on the hardware of individual devices.

    Different approaches provide different levels of security, but one thing that they all have in common is that they need to instill the appropriate level of trust that they will keep the private key private. When a device is equipped with a public-private key pair, a CA can provide the next piece of the puzzle by generating a certificate for the device. Once a device has this unique certificate, it is ready for the mutual authentication that is required to be allowed entrance in a secure way to a network built on a zero-trust architecture.

    Combining the assurance that is provided by the way cryptographic keys are stored with the trust that needs to be placed in the CA, it is safe to state that, at least in this case, there is no “zero trust” without trust.

    Resource : https://www.helpnetsecurity.com/2021/10/25/network-iot-security/?web_view=true