The IoT and Security: 3 Strategies Every Pro Must Know

The IoT and Security: 3 Strategies Every Pro Must Know

Law enforcement and security professionals can benefit from the IoT — and not just to watch people more closely. Follow these three steps to prepare for the IoT reality, protect your own vulnerabilities, and find creative solutions to your investigative problems.

We’ve already seen the impact of technology and social media on investigations, but for the Internet of Things, that impact is just beginning.

Police and private investigators have used location metadata from photos to track people down, but imagine how much more information they can gain from all the smart devices on the market today. Gadgets like Nest thermostats, internet-accessible refrigerators and other smart home devices are collecting data that can tell security staff more about people’s daily habits, including when they are (or aren’t) at home.

Police are currently being trained to check the data from these devices during investigations, as it can provide valuable information about alibis, witness statements and even the crime scene itself. As the IoT continues to develop, understanding how these interconnected devices handle user data will become critical to investigative work.

Changing the Landscape

Investigative techniques that involve open-source intelligence channels, such as deep web searches, could soon be more effective as people increase their IoT footprints. However, as these devices collect more data, they are also becoming more sophisticated and secure.

No longer will it be possible to simply seize a device to secure the data it holds or even to seize the server that it is communicating with. Cloud computing and widespread adoption of encryption have made information retrieval more difficult for anyone other than the intended user, which can frustrate investigators. As the IoT grows, these challenges will only become more widespread.

Digital forensics teams are working on ways to tackle this problem, but leveraging the IoT during investigations still poses significant challenges. Digital forensics specialists need to understand basic network types, such as Wi-Fi and mobile, as well as cloud storage, sensors, and RFID tech. Because IoT technology is a combination of many different tech areas, IoT forensics are more complicated than traditional forensics.

Despite the challenges, investigators must strive to understand the rising role of the IoT and how they can leverage the technology to their advantage.

Adapting to New Surveillance Strategies

Surveillance today is as much about creativity as it is about technical knowledge and staying aware of industry developments. So many connected devices are either unsecured or poorly secured, so using these devices to watch, track, and listen requires knowing what they are and thinking of new ways to use them.

Samsung’s smart TVs, for example, house microphones that were (until a recent fix) always on. Other poorly secured devices could be an investigator’s gateway into an otherwise airtight personal network. These vulnerabilities represent methods to conduct surveillance that require only a subpoena or other court order to tech vendors, which was impossible before the rollout of IoT devices.

As the IoT expands, the security industry is responding by turning away from physical tactics in favor of software surveillance and communications encryption. That doesn’t mean all investigators will need to become hackers to keep their jobs; it simply means they will need to understand the possibilities within the new landscape and how they can take advantage of their expanding tool kits.

How to Prepare for the New IoT Reality

Law enforcement and security professionals can benefit from the IoT — and not just to watch people more closely. Follow these three steps to prepare for the IoT reality, protect your own vulnerabilities, and find creative solutions to your investigative problems:

1. Improve Resource Usage

Investigators can leverage data from IoT devices to maximize their resources. Machines can collect and analyze data to tell officers and investigators where they need to be and where trouble is most likely to happen.

That can mean deploying patrol cars to gunshot locations or using data from a smart thermostat to see when suspects leave home, which allows law enforcement and investigators to make better use of their time and resources and be at the right place at the right time more often.

2. Identify Security Gaps

Security professionals get targeted by the bad guys too. IoT devices make life easier, but when managed improperly, they can also create gaps that compromise evidence or endanger an investigation.

To make the most of IoT technology and ensure it’s used properly, security staff should understand secure device management and how to mitigate risks. Keep your devices updated to limit your exposure to harmful hacks — such security gaps could compromise evidence or endanger an investigation, so it’s especially crucial that your data and information are protected.

3. Make Current Tools More Efficient

Beyond exploiting the vulnerabilities in suspects’ IoT devices, investigators can use their technology to improve existing tools and make them more cost-effective.

For example, modern security cameras can interact with smartphones from any location to record footage or change perspective. That allows investigators to be in several places at once without being obvious.

You do not have to be a programmer to make the IoT work for you. With a little effort and creativity, you can improve the success rate of your investigations and stay ahead of the technological curve.

Featured

  • Gaining a Competitive Edge

    Ask most companies about their future technology plans and the answers will most likely include AI. Then ask how they plan to deploy it, and that is where the responses may start to vary. Every company has unique surveillance requirements that are based on market focus, scale, scope, risk tolerance, geographic area and, of course, budget. Those factors all play a role in deciding how to configure a surveillance system, and how to effectively implement technologies like AI. Read Now

  • 6 Ways Security Awareness Training Empowers Human Risk Management

    Organizations are realizing that their greatest vulnerability often comes from within – their own people. Human error remains a significant factor in cybersecurity breaches, making it imperative for organizations to address human risk effectively. As a result, security awareness training (SAT) has emerged as a cornerstone in this endeavor because it offers a multifaceted approach to managing human risk. Read Now

  • The Stage is Set

    The security industry spans the entire globe, with manufacturers, developers and suppliers on every continent (well, almost—sorry, Antarctica). That means when regulations pop up in one area, they often have a ripple effect that impacts the entire supply chain. Recent data privacy regulations like GDPR in Europe and CPRA in California made waves when they first went into effect, forcing businesses to change the way they approach data collection and storage to continue operating in those markets. Even highly specific regulations like the U.S.’s National Defense Authorization Act (NDAA) can have international reverberations – and this growing volume of legislation has continued to affect global supply chains in a variety of different ways. Read Now

  • Access Control Technology

    As we move swiftly toward the end of 2024, the security industry is looking at the trends in play, what might be on the horizon, and how they will impact business opportunities and projections. Read Now

Featured Cybersecurity

Webinars

New Products

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities 3

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area. 3

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation. 3