<html> <iframe src="https://www.youtube.com/embed/Ohfip99riqo"></iframe> <p> <br/>The U.S. is exploring the idea to establish cybersecurity labels on IoT devices and software, in hopes it will both inform consumers of risks and motivate manufacturers to improve the security for the flood of new products entering the market.</p> <p>Internet-of-Things (IoT) devices number in the billions, some estimates are as high as 46 billion, and continue to emerge at a quickening pace with consumers and across industrial uses. Yet they often are weak when it comes to being hacked, which creates growing risks to consumersโ privacy, security, and even safety.</p> <p>The U.S. has indicated a desire to adopt some kind of labeling and has kicked off discussions with manufacturers. The National Institute of Standards and Technology (NIST), within the U.S. Dept of Commerce, is leading the effort and is soliciting input from IoT manufacturers and the public.</p> <p>Given the self-interest involved, I am somewhat skeptical of what the manufacturing industry will recommend or voluntarily implement when it comes to Cybersecurity Labels for IoT devices. The core problem is that the industry itself is not putting forth the effort to implement basic cybersecurity functionality into its product architecture and designs. This group is now being asked to develop a label standard to help consumers and I expect the results to be less than stellar.</p> <p>On the upside, I do applaud the creative concept of security labeling as an out-of-the-box idea and involving the private sector, but this path has significant weaknesses when it comes to how the relevant content of the disclosures will be decided and the challenges for meaningful absorption by the consumer.</p> <p>There are many efforts, by security, overseas governments, and academic organizations, which show promise but also have challenges.</p> <p>The CyLabs team out of Carnegie Mellon University has developed a very comprehensive label, but I think it is far too complex for consumers to understand.</p> <p><img src="https://cdn-images-1.medium.com/max/800/1*-5GudKx0n3foercXmBN4Ng.png"/></p> <p>Symantec has developed a scaled-down version of what CyLabs proposes, but the data does not readily translate to something meaningful to the average consumer.</p> <p><img src="https://cdn-images-1.medium.com/max/800/1*SOvh0gWxQa-hF8ACGV6loA.png"/></p> <p>The city-state of Singapore strikes a balance between independent verification and self-reporting, but overall, it is overly simplistic to convey a meaningful risk picture.</p> <p><img src="https://cdn-images-1.medium.com/max/800/1*gquLbvHszu4j1HKgn0a_SQ.png"/></p> <p>I would rather the government foster the development of an independent rating scale that gives simple scores for compliance to basic hardening configurations, resistance to compromise, exposure risk to other systems, privacy, and trust of the vendorโs ethics consistency.</p> <p><img src="https://cdn-images-1.medium.com/max/800/1*8FF_MIb5DVWg7TtPUEjwWA.png"/></p> <p>Combined with allowances to support the economics of manufacturers self-reporting, but with limited scores and only for some of the categories. An approved independent body would be required for the ratings of some categories and access to higher scores. Finally, the results must be presented in simple icons for consumers with perhaps some plain English that highlights the result</p> <p>For comprehensiveness, labeling should be made a requirement to encourage competitiveness by vendors to deliver meaningful security for IoT products.</p> <p>Label information must also be clear and meaningful to convey the risks to consumers. To make sure the ratings are consistent and not manipulated, independent verification will occur at a minimum in some areas, such as vendor trust, and for any area where a rating is higher than average.</p> <p>I also caution letting the IoT manufacturing industry take the lead for any type of labeling, we risk either very complex labels, which wonโt be comprehended by consumers, or overly simplistic labels that barely scratch the aspects necessary to understand the relevance of the security posture for the device or software.</p> <p>IoT devices are easily compromised and then either used against the owner or are herded into botnets that can attack other systems on the Internet. Cybercriminals and hackers realize that the vast number of unsecured IoT devices is an excellent resource to leverage in pursuit of their goals.</p> <p>If we are going to go down this path of security labeling, we must do it correctly for it to become a catalyst of enhanced security for these products.</p> <p>A rational system must be proposed, where clear goals are defined which benefit consumers. Otherwise, it is a wasted effort and an unfortunate delay in addressing the systemic problem of IoT security.</p> <p> <br/> <br/></p> </html> Posted with [STEMGeeks](https://stemgeeks.net)
| author | mrosenquist |
|---|---|
| permlink | are-cybersecurity-labels-on-iot-devices-a-wasted-effort |
| category | hive-163521 |
| json_metadata | {"tags":["cybersecurity","technology","iot","security","privacy","stem"],"image":["https://img.youtube.com/vi/Ohfip99riqo/0.jpg","https://cdn-images-1.medium.com/max/800/1*-5GudKx0n3foercXmBN4Ng.png","https://cdn-images-1.medium.com/max/800/1*SOvh0gWxQa-hF8ACGV6loA.png","https://cdn-images-1.medium.com/max/800/1*gquLbvHszu4j1HKgn0a_SQ.png","https://cdn-images-1.medium.com/max/800/1*8FF_MIb5DVWg7TtPUEjwWA.png"],"links":["https://www.youtube.com/embed/Ohfip99riqo"],"app":"stemgeeks/0.1","format":"html","canonical_url":"https://stemgeeks.net/@mrosenquist/are-cybersecurity-labels-on-iot-devices-a-wasted-effort"} |
| created | 2021-10-05 22:36:27 |
| last_update | 2021-10-05 22:36:27 |
| depth | 0 |
| children | 7 |
| last_payout | 2021-10-12 22:36:27 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 9.004 HBD |
| curator_payout_value | 8.975 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 4,956 |
| author_reputation | 178,878,611,908,167 |
| root_title | "Are Cybersecurity Labels on IoT Devices a Wasted Effort" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 106,810,857 |
| net_rshares | 16,003,968,532,896 |
| author_curate_reward | "" |
| voter | weight | wgt% | rshares | pct | time |
|---|---|---|---|---|---|
| modeprator | 0 | 774,099,108 | 100% | ||
| bitshares101 | 0 | 273,556,370,704 | 100% | ||
| arcange | 0 | 55,678,802,260 | 1% | ||
| raphaelle | 0 | 538,892,681 | 1% | ||
| mrosenquist | 0 | 201,306,648,570 | 100% | ||
| stevescoins | 0 | 11,847,530,431 | 100% | ||
| ultimus | 0 | 253,293,742 | 100% | ||
| slider2990 | 0 | 7,632,816,849 | 100% | ||
| redes | 0 | 1,883,926,658,082 | 28% | ||
| trans-juanmi | 0 | 497,068,040 | 25% | ||
| dyrt88 | 0 | 2,988,793,770 | 100% | ||
| freebornsociety | 0 | 1,096,640,139 | 5% | ||
| frankydoodle | 0 | 6,128,908,636 | 50% | ||
| fredrikaa | 0 | 1,578,478,413,137 | 100% | ||
| dkmathstats | 0 | 111,913,912,017 | 77% | ||
| warfeed | 0 | 702,340,990 | 50% | ||
| coffeelovers | 0 | 0 | 100% | ||
| yooraa | 0 | 218,614,225 | 100% | ||
| themarkymark | 0 | 3,431,795,164,943 | 10% | ||
| buildawhale | 0 | 7,280,560,446,989 | 10% | ||
| makerhacks | 0 | 33,785,404,683 | 10% | ||
| nathanpieters | 0 | 6,041,560,928 | 50% | ||
| fourfourfun | 0 | 7,803,199,412 | 25% | ||
| upmyvote | 0 | 6,832,433,420 | 10% | ||
| steemflagrewards | 0 | 414,591,605,073 | 100% | ||
| anderssinho | 0 | 7,105,255,592 | 100% | ||
| movement19 | 0 | 928,280,815 | 2.5% | ||
| blainjones | 0 | 9,948,362,650 | 5% | ||
| tonimontana | 0 | 5,392,635,041 | 100% | ||
| enforcer48 | 0 | 130,035,219,465 | 15% | ||
| commonlaw | 0 | 4,720,558,010 | 35% | ||
| izzynoel | 0 | 844,678,603 | 50% | ||
| smartvote | 0 | 44,358,200,930 | 2.1% | ||
| mk992039 | 0 | 193,908,964 | 2% | ||
| guurry123 | 0 | 483,062,165 | 2% | ||
| admiralbot | 0 | 6,301,823,674 | 100% | ||
| harpreetjanda | 0 | 564,091,647 | 2% | ||
| ctime | 0 | 124,579,095,790 | 1.5% | ||
| limka | 0 | 108,801,413 | 83.64% | ||
| hedgeserv | 0 | 0 | 100% | ||
| memehub | 0 | 89,740,279,663 | 100% | ||
| aninsidejob | 0 | 6,260,054,822 | 100% | ||
| stemgeeks | 0 | 51,245,437,125 | 50% | ||
| stemcuration | 0 | 960,229,783 | 50% | ||
| babytarazkp | 0 | 3,561,040,638 | 40% | ||
| abh12345.stem | 0 | 2,998,226,662 | 100% | ||
| elianaicgomes | 0 | 7,171,541,994 | 10% | ||
| brustem | 0 | 726,036,456 | 100% | ||
| stem.alfa | 0 | 136,549,267 | 100% | ||
| stemd | 0 | 319,912,697 | 100% | ||
| yggdrasil.laguna | 0 | 539,782,802 | 100% | ||
| chicoduro | 0 | 3,293,993,800 | 25% | ||
| chapmain | 0 | 100,594,338 | 100% | ||
| stuntman.mike | 0 | 5,652,433,241 | 25% | ||
| fengchao | 0 | 1,972,421,927 | 1% | ||
| heystack | 0 | 1,581,251,349 | 100% | ||
| poshbot | 0 | 222,634,381 | 10% | ||
| recoveryinc | 0 | 2,995,366,204 | 5% | ||
| dying | 0 | 1,472,989,970 | 5% | ||
| pfwaus | 0 | 774,643,774 | 100% | ||
| dorkpower | 0 | 2,709,824,636 | 100% | ||
| aiovo | 0 | 66,404,741 | 2% | ||
| stemcur | 0 | 786,915,235 | 100% | ||
| brofund-stem | 0 | 3,777,115,934 | 100% | ||
| rikarivka | 0 | 2,539,250,665 | 50% | ||
| rupinder | 0 | 152,842,386 | 2% | ||
| stemline | 0 | 3,128,603,061 | 25% | ||
| he-index | 0 | 10,174,578,033 | 20% | ||
| meestemboom | 0 | 795,048,696 | 40% | ||
| academiccuration | 0 | 874,575,029 | 100% | ||
| emrebeyler.stem | 0 | 1,485,544,380 | 100% | ||
| ctpsb.cut | 0 | 1,270,949,395 | 10% | ||
| krishu.stem | 0 | 871,398,668 | 100% | ||
| ruari | 0 | 504,274,509 | 100% | ||
| samrisso | 0 | 5,954,238,634 | 5% | ||
| tfranzini | 0 | 1,339,011,597 | 10% | ||
| dronegirl | 0 | 274,031,620 | 100% | ||
| adamada.stem | 0 | 703,684,201 | 100% | ||
| zdigital222 | 0 | 118,546,493 | 100% | ||
| juecoree.stem | 0 | 627,886,425 | 100% | ||
| memecurator | 0 | 770,758,784 | 100% | ||
| memesupport | 0 | 3,936,097,230 | 100% | ||
| holovision.stem | 0 | 134,437,388 | 50% | ||
| solominer.stake | 0 | 876,671,166 | 100% | ||
| star.stem | 0 | 1,681,891,554 | 50% | ||
| solominer.stem | 0 | 670,998,330 | 100% | ||
| mubeenalee | 0 | 915,067,368 | 100% | ||
| enovf | 0 | 577,746,543 | 100% | ||
| apeminingclub | 0 | 119,501,553,828 | 10% | ||
| tyrnis.curation | 0 | 509,571,886 | 50% |
agree we need to do it the right way to benefit consumers more
| author | aiovo |
|---|---|
| permlink | r0jquh |
| category | hive-163521 |
| json_metadata | {"tags":["stem"],"app":"stemgeeks/0.1","canonical_url":"https://stemgeeks.net/@aiovo/r0jquh"} |
| created | 2021-10-06 08:13:30 |
| last_update | 2021-10-06 08:13:30 |
| depth | 1 |
| children | 0 |
| last_payout | 2021-10-13 08:13:30 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 0.034 HBD |
| curator_payout_value | 0.032 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 62 |
| author_reputation | 15,911,295,900,579 |
| root_title | "Are Cybersecurity Labels on IoT Devices a Wasted Effort" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 106,820,116 |
| net_rshares | 61,201,818,237 |
| author_curate_reward | "" |
| voter | weight | wgt% | rshares | pct | time |
|---|---|---|---|---|---|
| mrosenquist | 0 | 40,221,329,714 | 20% | ||
| stemgeeks | 0 | 20,334,174,215 | 20% | ||
| stemcuration | 0 | 351,442,918 | 20% | ||
| yggdrasil.laguna | 0 | 10,485,279 | 10% | ||
| dronegirl | 0 | 284,386,111 | 100% |
I dont think that its waste instead its helpful to make people aware of security and safety.
| author | alokkumar121 |
|---|---|
| permlink | r0kv7o |
| category | hive-163521 |
| json_metadata | {"tags":["stem"],"app":"stemgeeks/0.1","canonical_url":"https://stemgeeks.net/@alokkumar121/r0kv7o"} |
| created | 2021-10-06 22:45:27 |
| last_update | 2021-10-06 22:45:27 |
| depth | 1 |
| children | 1 |
| last_payout | 2021-10-13 22:45:27 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 0.033 HBD |
| curator_payout_value | 0.032 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 92 |
| author_reputation | 2,489,691,104,953,059 |
| root_title | "Are Cybersecurity Labels on IoT Devices a Wasted Effort" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 106,836,643 |
| net_rshares | 59,984,892,755 |
| author_curate_reward | "" |
| voter | weight | wgt% | rshares | pct | time |
|---|---|---|---|---|---|
| mrosenquist | 0 | 39,826,883,622 | 20% | ||
| stemgeeks | 0 | 19,809,400,572 | 20% | ||
| stemcuration | 0 | 340,258,921 | 20% | ||
| yggdrasil.laguna | 0 | 8,349,640 | 10% |
I hope so. But they have to read and understand the labels.
| author | mrosenquist |
|---|---|
| permlink | r0n4lk |
| category | hive-163521 |
| json_metadata | {"app":"hiveblog/0.1"} |
| created | 2021-10-08 04:03:21 |
| last_update | 2021-10-08 04:03:21 |
| depth | 2 |
| children | 0 |
| last_payout | 2021-10-15 04:03:21 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 0.000 HBD |
| curator_payout_value | 0.000 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 60 |
| author_reputation | 178,878,611,908,167 |
| root_title | "Are Cybersecurity Labels on IoT Devices a Wasted Effort" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 106,868,474 |
| net_rshares | 0 |
Its not a waste effort and it will help marketing and if gives the appearance that they tried to make it safe. Thats more important than that its actually safe
| author | dronegirl | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| permlink | r0jys3 | ||||||||||||
| category | hive-163521 | ||||||||||||
| json_metadata | {"tags":["stem"],"app":"stemgeeks/0.1","canonical_url":"https://stemgeeks.net/@dronegirl/r0jys3"} | ||||||||||||
| created | 2021-10-06 11:04:51 | ||||||||||||
| last_update | 2021-10-06 11:17:06 | ||||||||||||
| depth | 1 | ||||||||||||
| children | 1 | ||||||||||||
| last_payout | 2021-10-13 11:04:51 | ||||||||||||
| cashout_time | 1969-12-31 23:59:59 | ||||||||||||
| total_payout_value | 0.022 HBD | ||||||||||||
| curator_payout_value | 0.021 HBD | ||||||||||||
| pending_payout_value | 0.000 HBD | ||||||||||||
| promoted | 0.000 HBD | ||||||||||||
| body_length | 159 | ||||||||||||
| author_reputation | 268,282,759,034 | ||||||||||||
| root_title | "Are Cybersecurity Labels on IoT Devices a Wasted Effort" | ||||||||||||
| beneficiaries |
| ||||||||||||
| max_accepted_payout | 1,000,000.000 HBD | ||||||||||||
| percent_hbd | 10,000 | ||||||||||||
| post_id | 106,822,833 | ||||||||||||
| net_rshares | 40,984,056,087 | ||||||||||||
| author_curate_reward | "" |
| voter | weight | wgt% | rshares | pct | time |
|---|---|---|---|---|---|
| mrosenquist | 0 | 19,926,997,496 | 10% | ||
| stemgeeks | 0 | 20,415,699,096 | 20% | ||
| stemcuration | 0 | 353,045,112 | 20% | ||
| yggdrasil.laguna | 0 | 10,605,627 | 10% | ||
| dronegirl | 0 | 277,708,756 | 100% |
I would prefer actually secure, private, and safe.
| author | mrosenquist |
|---|---|
| permlink | r0n4kr |
| category | hive-163521 |
| json_metadata | {"app":"hiveblog/0.1"} |
| created | 2021-10-08 04:02:51 |
| last_update | 2021-10-08 04:02:51 |
| depth | 2 |
| children | 0 |
| last_payout | 2021-10-15 04:02:51 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 0.000 HBD |
| curator_payout_value | 0.000 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 50 |
| author_reputation | 178,878,611,908,167 |
| root_title | "Are Cybersecurity Labels on IoT Devices a Wasted Effort" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 106,868,466 |
| net_rshares | 0 |
Congratulations @mrosenquist! You have completed the following achievement on the Hive blockchain and have been rewarded with new badge(s) : <table><tr><td><img src="https://images.hive.blog/60x70/http://hivebuzz.me/@mrosenquist/upvoted.png?202110061838"></td><td>You received more than 35000 upvotes.<br>Your next target is to reach 40000 upvotes.</td></tr> </table> <sub>_You can view your badges on [your board](https://hivebuzz.me/@mrosenquist) and compare yourself to others in the [Ranking](https://hivebuzz.me/ranking)_</sub> <sub>_If you no longer want to receive notifications, reply to this comment with the word_ `STOP`</sub> **Check out the last post from @hivebuzz:** <table><tr><td><a href="/hivebuzz/@hivebuzz/pud-202110-feedback"><img src="https://images.hive.blog/64x128/https://i.imgur.com/zHjYI1k.jpg"></a></td><td><a href="/hivebuzz/@hivebuzz/pud-202110-feedback">Feedback from the October 1st Hive Power Up Day</a></td></tr><tr><td><a href="/hivebuzz/@hivebuzz/pum-202109-final"><img src="https://images.hive.blog/64x128/https://i.imgur.com/lpF7k06.png"></a></td><td><a href="/hivebuzz/@hivebuzz/pum-202109-final">Hive Power Up Month Challenge - Winners List</a></td></tr></table>
| author | hivebuzz |
|---|---|
| permlink | hivebuzz-notify-mrosenquist-20211006t185907 |
| category | hive-163521 |
| json_metadata | {"image":["http://hivebuzz.me/notify.t6.png"]} |
| created | 2021-10-06 18:59:06 |
| last_update | 2021-10-06 18:59:06 |
| depth | 1 |
| children | 0 |
| last_payout | 2021-10-13 18:59:06 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 0.000 HBD |
| curator_payout_value | 0.000 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 1,206 |
| author_reputation | 370,640,322,869,961 |
| root_title | "Are Cybersecurity Labels on IoT Devices a Wasted Effort" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 106,832,335 |
| net_rshares | 9,880,322,839 |
| author_curate_reward | "" |
| voter | weight | wgt% | rshares | pct | time |
|---|---|---|---|---|---|
| mrosenquist | 0 | 9,880,322,839 | 5% |
Nutrition labels all over again. So many ways to hide or mischaracterize bad elements. They need to get this right!
| author | ultimus |
|---|---|
| permlink | r0j139 |
| category | hive-163521 |
| json_metadata | {"app":"hiveblog/0.1"} |
| created | 2021-10-05 22:57:12 |
| last_update | 2021-10-05 22:57:12 |
| depth | 1 |
| children | 0 |
| last_payout | 2021-10-12 22:57:12 |
| cashout_time | 1969-12-31 23:59:59 |
| total_payout_value | 0.123 HBD |
| curator_payout_value | 0.123 HBD |
| pending_payout_value | 0.000 HBD |
| promoted | 0.000 HBD |
| body_length | 117 |
| author_reputation | 6,664,676,750,516 |
| root_title | "Are Cybersecurity Labels on IoT Devices a Wasted Effort" |
| beneficiaries | [] |
| max_accepted_payout | 1,000,000.000 HBD |
| percent_hbd | 10,000 |
| post_id | 106,811,264 |
| net_rshares | 221,473,021,029 |
| author_curate_reward | "" |
| voter | weight | wgt% | rshares | pct | time |
|---|---|---|---|---|---|
| mrosenquist | 0 | 201,306,648,570 | 100% | ||
| stemgeeks | 0 | 19,533,819,960 | 20% | ||
| stemcuration | 0 | 335,693,801 | 20% | ||
| yggdrasil.laguna | 0 | 5,685,407 | 10% | ||
| dronegirl | 0 | 291,173,291 | 100% |
hiveblocks