IGF 2023 WS #41 Internet of Things Security: concerns and trends

Description:

The workshop will address two issues related to the security of the Internet of Things. The first part will show the technical aspects related to this topic - threats, vulnerabilities, ways to ensure the security of devices, while the regulatory part will address the efforts of institutions from around the world to establish and improve security in IoT applications and devices.
One of the many issues faced by users, manufacturers or network owners and those who deal with cybersecurity on a daily basis, such as CSIRT team members, is the issue of vulnerabilities in Internet of Things devices. Although the most popular vulnerabilities are often presented to a large audience, still the vast majority of them are only known to cybersecurity professionals and not to the users who have the vulnerable device. Therefore, it is the users who are most likely to be at risk. It is therefore advisable to increase user awareness of the dangers of owning and using unsecured devices, as well as providing access to information about vulnerabilities. This is why a database of information on vulnerabilities and exploits in IoT has been created, in which this information has been collected, aggregated and correlated. The database is publicly available:https://www.variotdbs.pl/
While academia and industry advance the technical aspects, proposing solutions to identify and mitigate security issues, governments, regulatory agencies, and technical communities (e.g., ITU and ETSI) propose recommendations and regulations to minimize the possibility of security problems. Once regulations are established, these institutions can gather efforts to generate guidelines for solution providers and device manufacturers, specifying the minimum security requirements they must adopt and how to validate them.
The presence of speakers from industry, CERT and academia is intended to encourage discussion on how manufacturers should approach cyber security solutions.