With 18.8 billion connected IoT devices expected by the end of 2024, it’s no surprise that device-level security is a growing concern for regulators. The new Cyber Trust Mark in the U.S. is designed to help consumers easily identify smart devices that meet certain cybersecurity standards like smart home cameras, routers, thermostats and other IoT products. And while that’s currently voluntary, other mandatory measures are coming into force like the EU’s CRA which will see manufacturers bring compliant products to market by 2027. This is in response to a market that previously saw 29% of cellular IoT modules shipped in Q2 2024 with no dedicated protection features.
OPEN PDF IN BROWSER
SAVE PDF ON YOUR DEVICE
Dive into this report that looks at security considerations for software and hardware in the IoT module supply chain, covering topics like:
- The role of SBOMs and VEX documents – Manufacturers need to verify that no vulnerable or unauthorised software components are introduced during firmware updates, for example.
- Anti-tamper measures – Cryptographic signatures and hashes are essential for ensuring software updates and components have not been tampered with during distribution or implementation.
- Verifying country of origin – Understanding where software comes from helps ensure software components in cellular IoT modules have robust native cybersecurity practices, further protecting IoT devices.
- Pen testing, hardware-based RoT and trusted vendors – Measures should be taken to also ensure hardware-based security elements, supported by initiatives like IoT SAFE.
This report also suggests best practices; in collaboration with Quectel, that software, hardware and holistic manufacturers should take to ensure vulnerabilities are not present like testing, PKI, robust SBOM and other approaches. To get an edge on device security and prepare your operation for the connected marketplaces of tomorrow, click to access this report now.
OPEN PDF IN BROWSER
SAVE PDF ON YOUR DEVICE
