IoT-Armor: An IoT Secure-by-Default Educational Toolkit

IoT-Armor：物联网默认安全教育工具包

• 批准号: 10100465
• 金额: $ 7.64万
• 依托单位: THE UNIVERSITY OF WEST LONDON
• 依托单位国家: 英国
• 项目类别: Collaborative R&D
• 财政年份: 2023
• 资助国家: 英国
• 起止时间: 2023 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=10100465
• 关键词: IoT; Armor; Secure; Default; Educational

IoT devices have become ubiquitous in our environment, becoming an integral part of our daily routines. The sheer quantity of these devices has surged, from 3.8 billion in 2021 to an estimated 30.9 billion by 2025\. This proliferation has brought with it a significant rise in vulnerabilities, with estimated annual losses reaching a staggering $116 billion by the close of 2023\.These vulnerabilities can be largely attributed to the simplified architecture of IoT devices and the limited grasp of security principles by both device manufacturers and application developers. The IoT Security Foundation has pinpointed the root cause of these issues as the absence of sound security design principles. These findings closely align with the UK Government's Code of Practice for Consumer IoT Security, which underscores the imperative of incorporating Security-by-Default principles during the manufacturing of such devices. Yet, despite the clear identification of this problem, there remains a conspicuous knowledge gap in effectively implementing these Security-by-Default principles.Enter IoT-Armor, aimed at filling this void. We have pioneered an innovative solution that bridges this market gap by providing comprehensive training materials, equipping individuals to not only comprehend but also adeptly apply Security-by-Default principles. What sets our approach apart is our utilisation of readily available hardware, complemented by our custom firmware. This ensures that our training resources are universally applicable and free from dependence on specific hardware. Moreover, our meticulous alignment of training content with the Code of Practice for Consumer IoT Security guarantees that our clients remain in compliance with potential government guidelines, regulations, or standardisation. In essence, this means our customers can confidently navigate evolving security requirements knowing that they are well-prepared.

物联网设备在我们的环境中已经无处不在，成为我们日常生活中不可或缺的一部分。这些设备的绝对数量激增，从 2021 年的 38 亿台增加到 2025 年的估计 309 亿台。这种扩散带来了漏洞的显着增加，预计到 2023 年底，每年损失将达到惊人的 1160 亿美元。这些漏洞很大程度上归因于物联网设备架构的简化以及双方对安全原则的掌握有限。设备制造商和应用程序开发商。物联网安全基金会指出这些问题的根本原因是缺乏健全的安全设计原则。这些发现与英国政府的《消费者物联网安全实践守则》密切相关，该守则强调了在此类设备的制造过程中纳入默认安全原则的必要性。然而，尽管清楚地识别了这个问题，但在有效实施这些默认安全原则方面仍然存在明显的知识差距。物联网装甲的出现，旨在填补这一空白。我们开创了一种创新的解决方案，通过提供全面的培训材料来弥合这一市场差距，使个人不仅能够理解而且能够熟练地应用默认安全原则。我们的方法与众不同之处在于我们利用现成的硬件，并辅以我们的定制固件。这确保了我们的培训资源普遍适用，并且不依赖于特定硬件。此外，我们将培训内容与《消费者物联网安全实践准则》进行精心调整，确保我们的客户始终遵守潜在的政府指导方针、法规或标准化。从本质上讲，这意味着我们的客户可以自信地应对不断变化的安全要求，因为他们知道自己已经做好了充分的准备。