Information Technology Security - Lecture 2

Information Technology Security - Lecture 2

• The lecture is about Information Technology Security and the Internet of Things (IoT).
• The learning objective is to explain information systems security and its effect on people and businesses.
• Key concepts explored include the evolution of IoT from the late 1990s, its impact on human and business life, the transformation of brick-and-mortar businesses into e-business models using e-commerce and IoT strategy, how IP mobility influences IoT, and the new challenges introduced by IoT.
• Social media platforms like Facebook, Twitter, LinkedIn, Pinterest, Snapchat, and Instagram are examples of social media mediums.
• Voice over Internet Protocol (VoIP), instant messaging (IM) chat, audio conferencing, video conferencing, collaboration tools, and digital media are mediums for communication.
• Drivers for IoT include IP-based networking, connectivity, smaller and faster computing, cloud computing, and data analytics.
• The evolution of IoT includes internet service providers (ISPs), radio frequency identification (RFID), application service providers (ASPs), and software as a service (SaaS).
• The internet and TCP/IP transform lives by connecting homes, schools, banks, government buildings, corporate buildings, stores, and factories.
• IoT impacts human life by changing day-to-day activities, including personal, social, and professional aspects. Users utilize the internet for tasks like checking weather, news, social media, and business emails.
• Communication can be real-time or store-and-forward.
• IoT's impact on humans includes healthcare monitoring, home security, online calendars, near-real-time tracking, online banking, and e-commerce.
• IoT's impact on businesses encompasses retail stores, virtual workplaces, remote sensors, traffic monitoring, B2C service delivery, and "anything as a service" IoT applications.
• E-commerce entails the sale of goods and services online (B2C) and between businesses (B2B). PCI DSS protects customer data.
• E-business strategy elements involve e-commerce solutions, internet marketing strategies, e-customer service delivery, and payment processing.
• Businesses need Internet and IoT marketing strategies to remain competitive.
• IP mobility depends on powerful personal communication devices and mobile phones, including cell phones, smartphones, and PDAs. Lightweight portable devices like tablets, smartphones, and netbooks are important.
• Bring Your Own Device (BYOD) involves employees using personal devices to connect to office networks, bringing network, usability, and security issues.
• Mobile applications have limitations due to web browsers that can't run traditional applications, bad interface design, and multiple user domains. Medical apps can successfully utilize mobile applications.
• 4G networks enable true IP communications, and Mobile IP allows users to move between LAN segments without interruptions.
• IP mobile communications involve Mobile Nodes (MN), Home Agents (HA), Foreign Agents (FA), Care of Addresses (COA), and Correspondent Nodes (CN).

Key Concepts of IP Mobile Communications

• Mobile node (MN) connects to the foreign agent (FA).
• FA assigns a Care of Address (COA) to the MN.
• FA sends COA to the home agent (HA).
• Correspondent node (CN) sends a message to the MN, it first goes to HA, then forwarded to COA, then finally to FA.

Challenges of IoT

• Security, privacy, interoperability, legal and regulatory compliance, and e-commerce and economic development issues are all challenges created by IoT.
• Specific IT device security challenges include deployment in large quantities, their ubiquity, lack of maintenance/updates leading to vulnerabilities and the difficulty in distributing and deploying upgrades. Devices lack visibility into how they connect to the internet, and are often not physically secure, allowing for readings and measurements to be captured publicly.
• Privacy challenges involve establishing privacy policy statements, defining data types, metadata, and analytical data usage, and providing user consent to manufacturers or application service providers. Determining the domain of privacy is also important.
• Interoperability challenges arise due to proprietary IoT devices and solutions and high implementation costs. The time-to-market concerns and a lack of interoperability standards for IoT devices pose a risk of creating an environment of unreliable IoT devices.
• Legal and regulatory issues involve proper handling of sensitive data, data privacy subject to state laws, and security control requirements and data protection laws imposed upon IoT vendors or solution providers. Furthermore, questions regarding data collection, behavior patterns, sales, and liabilities must be addressed.
• E-commerce and economic development issues concern the need for foundational investments, infrastructure resources, technical and industry development, and policies and regulatory definitions.