The challenge of secure IoT development

We focus here on the concept of IoT systems. This includes not only the integration of multiple IoT products and supporting services for an organization, but also discrete IoT products sold by developers.

Rarely does an IoT product developer bring a single device to market. Instead, offerings include interfaces for mobile applications, cloud services, peer devices, and data services. Often, the IoT product developer maintains the device during operation (such as through a subscription service).

We therefore consider an IoT product itself as a component in a larger system or systems. Product developers should begin adopting a system engineering mindset to understand the risks associated with interactions between multiple components within a system. 

IoT developers must meet market demands, stay up to date with fast-changing technology...