Windows 10: IoT: Finding a way out of the security nightmare

Brink · Feb 29, 2016

The Internet of Things will bring many benefits, but it's also creating a security nightmare for which few are prepared.

The horror stories have already started.

The baby monitors transmitting a live feed onto the internet for all to see -- and the smart teddy bear that could be hijacked. The car that allows hackers to take control of systems remotely. The power grid knocked offline by attackers accessing industrial control systems.

The rise of the Internet of Things (IoT) will bring with it huge benefits to businesses and consumers, but right now it is also creating a security nightmare.

"There isn't any category of devices that has not been hacked to some degree: we're talking anything from lightbulbs to nuclear power stations. As soon as you connect something to the internet then it's hackable and it's a target," says Duncan Brown, research director at analyst firm IDC.

As sensors and connectivity have become cheaper, it has become more viable to add them to a far wider range of devices than ever before. So the 'things' in the IoT can range from consumer goods like baby monitors, thermostats and cars through to industrial systems.

There are plenty of good reasons to connect such devices to the internet: a connected thermostat allows you to warm up the house before you get home, while a factory could reduce downtime if sensors warn that a critical machine is about to overheat.

The number of things being attached to the internet is vast: one estimate is that there will be 6.4 billion connected things in use worldwide in 2016, with more than five million new devices being added every day. That number could reach 20 billion (or 40, or 50 billion, depending on who you are talking to) by 2020.

But connecting them also introduces new risks. For consumers there is a risk to privacy as these devices will record vast amounts of data about their daily lives that could be pieced together to create a deeply intimate portrait of their existence. For businesses, each of these new devices is a potential gateway into their network for hackers to exploit, and potentially allow them access to not just data but also the controls to physical systems where they could do real damage...
Click to expand...

Read more: Internet of Things: Finding a way out of the security nightmare | ZDNet

:)

IoTGirl · Feb 29, 2016

Windows 10 Enterprise IoT

Hi David,

Embedded Mode can be set in Windows Enterprise and Windows Mobile versions. For target options please see the definitions at

https://www.microsoft.com/en-us/WindowsForBusiness/windows-iot From that page:

Windows 10 IoT Enterprise

Windows 10 IoT Enterprise is a full version of Windows 10 that delivers the enterprise manageability and security of Windows 10 Enterprise to IoT solutions. It is designed for powerful industry devices used in retail, manufacturing, healthcare, and other
industries. Windows 10 IoT Enterprise runs crucial line of business applications and performs specialized functions in a secure, reliable and streamlined way to support mission-critical devices.

LEARN MORE ABOUT MANAGING AND UPDATING WINDOWS 10 IOT

*Note that Windows 10 IoT Enterprise is a binary equivalent to Windows 10 Enterprise

Windows 10 IoT Mobile

Windows 10 IoT Mobile brings the full functionality of Windows 10 Mobile to the Internet of Things. That includes instantaneous application access, native support for barcode scanning, and other peripherals, as well as enhanced productivity for a variety
of mobile scenarios.

The Mobile Enterprise editions also offer capabilities such as ARM support, multiple user profiles, and advanced lockdown to enable scenarios across retail, healthcare, manufacturing and other vertical industries.

LEARN MORE ABOUT WINDOWS 10 IOT MOBILE

*Note that Windows 10 IoT Mobile is a binary equivalent to Windows 10 Mobile Enterprise

Windows 10 IoT Core

Windows 10 IoT Core is optimized for small-footprint, low-cost IoT devices that bring intelligence to the edge. It is designed to power purpose-built devices like gateways that enable IoT solutions. Windows 10 IoT Core also brings enterprise-grade security,
manageability, and connectivity of Windows to a new class of devices.

Below are the steps to bring your IoT Core powered devices to life:

Click to
Download IoT Core

Learn more about how to create applications and build proof of concepts and leverage step-by-step instructions, sample
code, documentation, community projects and more…

Ready to sell your product?
Commercialize your device or
Find your local distributor.

Actually, IoT Core does not have a menu, that is the default application that comes installed on the sample image from Microsoft. When you create your device you would replace that default experience with the purpose driven application for your solution.
As for securing an IoT device, it really depends on its purpose and environment but for information on IoT Core you can find documentation at WindowsOnDevices.com. Specifically

https://developer.microsoft.com/en-us/windows/iot/docs/buildingsecuredevices

Sincerely,

DavidKochkerian · Feb 29, 2016

Windows 10 Enterprise IoT

Hi IoTGirl,

Thank you for the help!

so IoT enterprise =
embedded mode?

does this also have a menu like IoT core? how do I check if I'm running Iot?

And finally, do you know if any documentation exists on this process and how to secure the IoT?

Thanks,

David

lehnerus2000 · Mar 1, 2016

I can't believe that it has taken this long for so-called tech types to see that IoT is an existential threat to Democracy and Personal Liberty:

Republicans will use it to hunt down Democrats

Democrats will use it to hunt down Republicans

Paedophiles and Stalkers will use it against their victims

Criminals and Terrorists will use it against everyone

Any and all breaches must be punished by "existential" fines against the BoD of the companies responsible (i.e. forfeiture of all assets and jail, unless they can prove that it was caused by external interference).

Cr00zng · Apr 4, 2018

The same could be said for operating systems and networks in general. From the dawn of the digital age, the lack of built-in security had been constant, impacting every aspect of our life. Weather we are off or on the "grid", the impact is the same.

IoT just follows the established pattern. Convenience, ease of use and "coolness" had always overrode security, why is that news now? Most, if not all of the security vulnerabilities are related network protocols and programming errors. IPv6 doesn't offer much help and it's doubtful, if programming errors will disappear anytime soon. Based on their past history, these vulnerabilities are here to stay. Be that OS, applications, networks protocols, it does not seem to matter if the latest implementation called Windows 10, OSX, Linux "any distros", Bluetooth, IoT, etc... Security patches are the fact of life...

Windows 10: IoT: Finding a way out of the security nightmare

IoT: Finding a way out of the security nightmare

IoT: Finding a way out of the security nightmare

IoT: Finding a way out of the security nightmare

IoT: Finding a way out of the security nightmare - Similar Threads - IoT Finding security

WINDOWS NIGHTMARE

OneDrive Nightmare

Nightmare

Any way to find out what the updates are about?

Is there a way to find out which key was used for activation?

Win 10 Backup Nightmare - I Cant Find A Way To Restore ISO (fat32) usb

Way to find out what activated my cmd window?

Photos nightmare.....

Building Secure Apps for Windows IoT Core