The IoT and Security: 3 Strategies Every Pro Must Know

The IoT and Security: 3 Strategies Every Pro Must Know

Law enforcement and security professionals can benefit from the IoT — and not just to watch people more closely. Follow these three steps to prepare for the IoT reality, protect your own vulnerabilities, and find creative solutions to your investigative problems.

We’ve already seen the impact of technology and social media on investigations, but for the Internet of Things, that impact is just beginning.

Police and private investigators have used location metadata from photos to track people down, but imagine how much more information they can gain from all the smart devices on the market today. Gadgets like Nest thermostats, internet-accessible refrigerators and other smart home devices are collecting data that can tell security staff more about people’s daily habits, including when they are (or aren’t) at home.

Police are currently being trained to check the data from these devices during investigations, as it can provide valuable information about alibis, witness statements and even the crime scene itself. As the IoT continues to develop, understanding how these interconnected devices handle user data will become critical to investigative work.

Changing the Landscape

Investigative techniques that involve open-source intelligence channels, such as deep web searches, could soon be more effective as people increase their IoT footprints. However, as these devices collect more data, they are also becoming more sophisticated and secure.

No longer will it be possible to simply seize a device to secure the data it holds or even to seize the server that it is communicating with. Cloud computing and widespread adoption of encryption have made information retrieval more difficult for anyone other than the intended user, which can frustrate investigators. As the IoT grows, these challenges will only become more widespread.

Digital forensics teams are working on ways to tackle this problem, but leveraging the IoT during investigations still poses significant challenges. Digital forensics specialists need to understand basic network types, such as Wi-Fi and mobile, as well as cloud storage, sensors, and RFID tech. Because IoT technology is a combination of many different tech areas, IoT forensics are more complicated than traditional forensics.

Despite the challenges, investigators must strive to understand the rising role of the IoT and how they can leverage the technology to their advantage.

Adapting to New Surveillance Strategies

Surveillance today is as much about creativity as it is about technical knowledge and staying aware of industry developments. So many connected devices are either unsecured or poorly secured, so using these devices to watch, track, and listen requires knowing what they are and thinking of new ways to use them.

Samsung’s smart TVs, for example, house microphones that were (until a recent fix) always on. Other poorly secured devices could be an investigator’s gateway into an otherwise airtight personal network. These vulnerabilities represent methods to conduct surveillance that require only a subpoena or other court order to tech vendors, which was impossible before the rollout of IoT devices.

As the IoT expands, the security industry is responding by turning away from physical tactics in favor of software surveillance and communications encryption. That doesn’t mean all investigators will need to become hackers to keep their jobs; it simply means they will need to understand the possibilities within the new landscape and how they can take advantage of their expanding tool kits.

How to Prepare for the New IoT Reality

Law enforcement and security professionals can benefit from the IoT — and not just to watch people more closely. Follow these three steps to prepare for the IoT reality, protect your own vulnerabilities, and find creative solutions to your investigative problems:

1. Improve Resource Usage

Investigators can leverage data from IoT devices to maximize their resources. Machines can collect and analyze data to tell officers and investigators where they need to be and where trouble is most likely to happen.

That can mean deploying patrol cars to gunshot locations or using data from a smart thermostat to see when suspects leave home, which allows law enforcement and investigators to make better use of their time and resources and be at the right place at the right time more often.

2. Identify Security Gaps

Security professionals get targeted by the bad guys too. IoT devices make life easier, but when managed improperly, they can also create gaps that compromise evidence or endanger an investigation.

To make the most of IoT technology and ensure it’s used properly, security staff should understand secure device management and how to mitigate risks. Keep your devices updated to limit your exposure to harmful hacks — such security gaps could compromise evidence or endanger an investigation, so it’s especially crucial that your data and information are protected.

3. Make Current Tools More Efficient

Beyond exploiting the vulnerabilities in suspects’ IoT devices, investigators can use their technology to improve existing tools and make them more cost-effective.

For example, modern security cameras can interact with smartphones from any location to record footage or change perspective. That allows investigators to be in several places at once without being obvious.

You do not have to be a programmer to make the IoT work for you. With a little effort and creativity, you can improve the success rate of your investigations and stay ahead of the technological curve.

Featured

  • Freedom of Choice

    In today's security landscape, we are witnessing a fundamental transformation in how organizations manage digital evidence. Law enforcement agencies, campus security teams, and large facility operators face increasingly complex challenges with expanding video data, tightening budget constraints and inflexible systems that limit innovation. Read Now

  • Accelerating a Pathway

    There is a new trend touting the transformational qualities of AI’s ability to deliver actionable data and predictive analysis that in many instances, seems to be a bit of an overpromise. The reality is that very few solutions in the cyber-physical security (CPS) space live up to this high expectation with the one exception being the new generation of Physical Identity and Access Management (PIAM) software – herein recategorized as PIAM+. Read Now

  • Protecting Your Zones

    It is game day. You can feel the crowd’s energy. In the parking lot. At the gate. In the stadium. On the concourse. Fans are eager to party. Food and merchandise vendors ready themselves for the rush. Read Now

  • Street Smarts

    The ongoing acceptance of AI and advanced data analytics has allowed surveillance camera technology to shift from being a tactical tool to a strategic business solution. Combining traditional surveillance technology with AI-based data-driven insights can streamline transportation systems, enhance traffic management, improve situational awareness, optimize resource allocation and streamline emergency response procedures. Read Now

  • The Progress of Biometrics

New Products

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises.

  • Luma x20

    Luma x20

    Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.”

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings.