English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Best practices for Internet of Things (IoT) security have recently attractedconsiderable attention worldwide from industry and governments, while academicresearch has highlighted the failure of many IoT product manufacturers tofollow accepted practices. We explore not the failure to follow best practices,but rather a surprising lack of understanding, and void in the literature, onwhat (generically) "best practice" means, independent of meaningfullyidentifying specific individual practices. Confusion is evident from guidelinesthat conflate desired outcomes with security practices to achieve thoseoutcomes. How do best practices, good practices, and standard practices differ?Or guidelines, recommendations, and requirements? Can something be a bestpractice if it is not actionable? We consider categories of best practices, andhow they apply over the lifecycle of IoT devices. For concreteness in ourdiscussion, we analyze and categorize a set of 1014 IoT security bestpractices, recommendations, and guidelines from industrial, government, andacademic sources. As one example result, we find that about 70\% of thesepractices or guidelines relate to early IoT device lifecycle stages,highlighting the critical position of manufacturers in addressing the securityissues in question. We hope that our work provides a basis for the community tobuild on in order to better understand best practices, identify and reachconsensus on specific practices, and then find ways to motivate relevantstakeholders to follow them.

Best Practices for IoT Security: What Does That Even Mean?