IoT: how to make security effective across connected devices
The Internet of Things (IoT) is just that, it is the connectivity of ordinary things.
The connectivity of the internet (IPv6), the move to the cloud and big data analytics, combined with the emergence of processing power at the edge, have all allowed products to become connected and smart. From phones, to connected watches, cars to fridges, IoT has had a disruptive impact on our everyday lives. With the ability to replenish our fridges autonomously, to monitoring our daily activity levels, our lives have been influenced and simplified as we know it.
Devices monitoring our every step and heart beat are physically impacting a consumer’s daily decisions and have been a key contributor to what is now a massive IoT ecosystem. According to new research by the Centre for Economics and Business Research (Cebr) big data analytics and the IoT are expected to add some £322 billion to the UK economy between 2015 and 2020. This is twice the size of the combined education, NHS and defence budgets for 2014-15, and 22 percent of the UK’s net public debt (circa. £1.5 trillion in 2014-15). This goes to show the enormity and impact IoT has had upon the UK’s digital revolution.
Consumers now expect everyday objects to be connected and have the ability to think autonomously. This has meant that traditional hardware manufacturers have had to keep pace by embracing this IPisation of products and in essence, morphing themselves into software providers. This presents a drastic change of approach for the hardware manufacturing industry, as they have had to adopt a completely new way of thinking and working.
Additional pressures from the IoT revolution
Hardware manufacturers are having to change their strategy and start building hardware around software, rather than treating it as a traditional add on later down the line. IoT also has the added layer of complexity of the device often needing to be able to communicate across a variety of different platforms, such as 5G, Wi-Fi and Bluetooth. This has forced hardware companies to think more like IT professionals than manufacturers, encouraging the adoption of a ‘software first’ approach.
Need to embrace robust security measures into product life cycles
Companies, traditionally built around the physical manufacturing of their products, already have knowledge of how to test them from a hardware perspective, for example testing a braking system on a car. However, they are not used to having to test software processes that integrate with the hardware, other software from their supply chain and external data sources.
The alternative to releasing untested software onto the market is, at best, embarrassing, but at worst could be catastrophic. Just last year, automotive giant Tesla was forced to issue a software update twice in a month after two researchers found a way to subvert its on-board system.
Need to embrace robust software Test and Validation into product life cycles
Japanese car maker Subaru was another to fall foul, and was forced to recall 72,000 vehicles with the company's Eyesight Driver Assist system, following identification of a software problem that could cause the automatic braking system to fail. It turns out that the dependency between the brake light switch and the automatic braking system had not been considered, leading to potential failure of two vital elements of the vehicle.
Luckily, these examples were both caught in time but they highlighted the need to embrace robust software quality and security measures into traditional physical product life cycles. Even something as seemingly innocuous as a connected lightbulb have a MAC and IP address, meaning that a once disposable commodity could potentially be cloned and used to access a network without sufficient security measures in place.
With this mind, many hardware manufacturers faced with embracing a software first approach may have their priorities confused and have become caught up in worrying about delivering functionality and monetisation, when it is information security that should be at the forefront of their minds.
Many updates for connected IoT products are provided over the air, however, this has presented additional challenges for the testing industry, as it has been the first time that they’ve been tasked with testing things on the move rather than in a controlled environment. This demand has resulted in third party specialists needing to modify their offering to assist with the unique agility of the IoT market.
Whilst software is omni-present in our increasingly connected lives, time and again traditional hardware companies have shown that they still have a lot to learn. There is no turning back. This is exemplified by recent collaborations between automotive companies and IT firms. For example, the pioneering partnership between Google and Fiat Chrysler; a move that bridges the technological unknown in a bid to manufacture the next generation of connected car.
The opportunity that IoT presents, particularly to the hardware manufacturing industry, is too big to miss out on and security measures must be put in place to not only safeguard consumers, but to protect brand reputation and avoid losing out to competitors.
By Colin Bull, Principal Consultant Manufacturing and Product Development at SQS
Read the July EURO 2016 issue of Business Review Europe magazine.
GfK and VMware: Innovating together on hybrid cloud
GfK has been the global leader in data and analytics for more than 85 years, supplying its clients with optimised decision inputs.
In its capacity as a strategic and technical partner, VMware has been walking GfK along its digital transformation path for over a decade.
“We are a demanding and singularly dynamic customer, which is why a close partnership with VMware is integral to the success of everyone involved,” said Joerg Hesselink, Global Head of Infrastructure, GfK IT Services.
Four years ago, the Nuremberg-based researcher expanded its on-premises infrastructure by introducing VMware vRealize Automation. In doing so, it laid a solid foundation, resulting in a self-service hybrid-cloud environment.
By expanding on the basis of VMware Cloud on AWS and VMware Cloud Foundation with vRealize Cloud Management, GfK has given itself a secure infrastructure and reliable operations by efficiently operating processes, policies, people and tools in both private and public cloud environments.
One important step for GfK involved migrating from multiple cloud providers to just a single one. The team chose VMware.
“VMware is the market leader for on-premises virtualisation and hybrid-cloud solutions, so it was only logical to tackle the next project for the future together,” says Hesselink.
Migration to the VMware-based environment was integrated into existing hardware simply and smoothly in April 2020. Going forward, GfK’s new hybrid cloud model will establish a harmonised core system complete with VMware Cloud on AWS, VMware Cloud Foundation with vRealize Cloud Management and a volume rising from an initial 500 VMs to a total of 4,000 VMs.
“We are modernising, protecting and scaling our applications with the world’s leading hybrid cloud solution: VMware Cloud on AWS, following VMware on Google Cloud Platform,” adds Hesselink.
The hybrid cloud-based infrastructure also empowers GfK to respond to new and future projects with astonishing agility: Resources can now be shifted quickly and easily from the private to the public cloud – without modifying the nature of interaction with the environment.
The gfknewron project is a good example – the company’s latest AI-powered product is based exclusively on public cloud technology. The consistency guaranteed by VMware Cloud on AWS eases the burden on both regular staff and the IT team. Better still, since the teams are already familiar with the VMware environment, the learning curve for upskilling is short.
One very important factor for the GfK was that VMware Cloud on AWS constituted an investment in future-proof technology that will stay relevant.
“The new cloud-based infrastructure comprising VMware Cloud on AWS and VMware Cloud Foundation forges a successful link between on-premises and cloud-based solutions,” says Hesselink. “That in turn enables GfK to efficiently develop its own modern applications and solutions.
“In market research, everything is data-driven. So, we need the best technological basis to efficiently process large volumes of data and consistently distill them into logical insights that genuinely benefit the client.
“We transform data and information into actionable knowledge that serves as a sustainable driver of business growth. VMware Cloud on AWS is an investment in a platform that helps us be well prepared for whatever the future may hold.”