{"id":28194,"date":"2018-07-30T15:30:31","date_gmt":"2018-07-30T14:30:31","guid":{"rendered":"http:\/\/www.intelligentcio.com\/me\/?p=28194"},"modified":"2018-08-06T10:01:31","modified_gmt":"2018-08-06T09:01:31","slug":"sans-survey-findings-reveal-confusion-over-industrial-iot-security","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/me\/2018\/07\/30\/sans-survey-findings-reveal-confusion-over-industrial-iot-security\/","title":{"rendered":"SANS survey findings reveal confusion over Industrial IoT security"},"content":{"rendered":"<p>Organisations hold disparate and unrealistic views on protecting the Industrial Internet of Things (IIoT).<\/p>\n<p>This is according to the findings of the\u00a0<em>2018 SANS Industrial IoT Security Survey report,\u00a0<\/em>which examined the security concerns around the rapidly growing use of IIOT and found that endoints\u00a0are considered to be the most vulnerable aspect of IIOT\u00a0\u2013 despite confusion over what actually constitutes an endpoint.<\/p>\n<p>IIoT is the subset of the Internet of Things that focuses specifically on the industrial application of connected physical devices within critical infrastructure such as electricity, manufacturing, oil and gas, transportation and healthcare. The installed base of IoT devices is forecast to triple from 23.14bn in 2018 to 75.44bn in 2025.<\/p>\n<p>\u201cThe industrial and manufacturing organisations in the Middle East are aligned with the global trend of leveraging IIoT to drive innovation in areas such as data analytics, process optimisation, automation and artificial intelligence. What\u2019s more, because they are not hindered by legacy IT infrastructures, they have a greater ability to innovate at a faster pace. What organisations must not fail to do is to understand and evaluate the security implications of IIoT, as the effects of poor IIoT security could be far reaching,\u201d said Ned Baltagi, Managing Director, Middle East and Africa at SANS.<\/p>\n<p>The SANS report found that most organisations globally are forecasting 10 to 25% growth in their connected devices. This growth rate will cause the systems connected to IIoT devices to double in size roughly every three to seven years. This will ultimately result in increased network complexity as IT and OT become more connected, there is more demand for bandwidth and the need for personnel skilled in best security practices related to the design, build and operation of IIoT systems.<\/p>\n<p>Of more than 200 respondents surveyed, more than half reported the most vulnerable aspects of their IIoT infrastructure as data, firmware, embedded systems, or general endpoints. At the same time, however, the survey revealed an ongoing debate over the definition of an endpoint.<\/p>\n<p>Doug Wylie, Director of the Industrials and Infrastructure Business Portfolio at SANS Institute, said: \u201cThe discrepancy in defining IIoT endpoints is the basis for some of the confusion surrounding responsibility for IIoT security.<\/p>\n<p>\u201cMany practitioners likely are not adequately identifying and managing the numerous assets that in some way connect to networks \u2013 and present a danger to their organisations.<\/p>\n<p>\u201cFor this reason, it is important for company IT and OT groups to agree to a common definition to help ensure they adequately identify security risks as they evolve their systems to adapt to new architectural models.\u201d<\/p>\n<p>Other concerns around IIoT security include:<\/p>\n<ul>\n<li>\u00a0A total of 32% of IIoT devices connect directly to the internet, bypassing traditional IT security layers<\/li>\n<li>\u00a0Almost 40% said identifying, tracking and managing devices represented a significant security challenge<\/li>\n<li>\u00a0Only 40% reported applying and maintaining patches and updates to protect their IIoT devices and systems<\/li>\n<li>\u00a0A total of 56% cited difficulty in patching as one of the greatest security challenges<\/li>\n<\/ul>\n<p>The survey also uncovered a wide gap between the perceptions of IIoT security by OT, IT and management, with only 64% of OT departments claiming to be confident in their ability to secure IIoT infrastructure, compared to 83% of IT departments and 93% of business leaders.<\/p>\n<p>\u201cThe report highlights a real disparity across organisations in the level of confidence as to how secure the IIoT really is,\u201d said Barbara Filkins, SANS Analyst Programme Research Director and survey report author.<\/p>\n<p>\u201cThis disparity represents the need for a major cultural change in how industrial organisations must approach the security risks in a world of IIoT.\u201d<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Organisations hold disparate and unrealistic views on protecting the Industrial Internet of Things (IIoT). This is according to the findings of the\u00a02018 SANS Industrial IoT Security Survey report,\u00a0which examined the security concerns around the rapidly growing use of IIOT and found that endoints\u00a0are considered to be the most vulnerable aspect of IIOT\u00a0\u2013 despite confusion over [&hellip;]<\/p>\n","protected":false},"author":28,"featured_media":28347,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1173,54,13],"tags":[6212,6213,6214,6215,6216,6217,562,5626,6218,6219,352],"class_list":["post-28194","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-manufacturing","category-research","category-top-stories","tag-2018-sans-industrial-iot-security-survey-report","tag-barbara-filkins","tag-director-of-the-industrials-infrastructure-business-portfolio","tag-doug-wylie","tag-iiot","tag-industrial-iot","tag-middle-east","tag-ot","tag-researcg","tag-sans-analyst-programme-research-director","tag-sans-institute"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts\/28194","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/comments?post=28194"}],"version-history":[{"count":2,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts\/28194\/revisions"}],"predecessor-version":[{"id":28198,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts\/28194\/revisions\/28198"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/media\/28347"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/media?parent=28194"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/categories?post=28194"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/tags?post=28194"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}