Securing the future: Key insights from the 10th IoT Security Foundation Conference
As the 10th IoT Security Foundation (IoTSF) conference in London concludes, IAR's General Manager for Security Solutions, Tim Woodruff, shares his insights.
It was a privilege to attend the IoTSF conference, where industry leaders gathered to explore IoT security's past, present, and future. A key highlight was the presentation by IAR’s Lead Security Architect, Andrew Bott, titled "How secure is your IoT device? Indispensable ingredients for a secure IoT product". His talk offered a practical roadmap for developers, emphasizing the critical need to integrate security into IoT devices from the outset. The presentation distilled this approach into "Nine essential steps" for securing products with embedded computing capabilities.
The event kicked off with an opening plenary session, featuring notable speakers such as John Moor, Managing Director of IoT Security Foundation, and Prof. Alex Mouzakitis, Programme Director, Cyber Security at Jaguar Land Rover, who explored the future of automotive cybersecurity. Another compelling session was led by Apostol Vassilev, Research Manager at NIST, discussing the risks and rewards of AI in the context of IoT security.
Cybercrime: A Growing Economic Force
One of the most striking statistics shared during the conference was that cybercrime is now larger than the combined GDPs of Germany, the UK, and France, and is projected to surpass China’s GDP within this decade. This growing threat underscores the importance of robust security measures, particularly as IoT devices continue to increase across industries.
Legislation: The New Reality
The discussions made it clear that regulatory frameworks for IoT security are no longer a distant prospect—they are already here. Although regulations have been simplified compared to IoT Security Foundation’s best practices, many organizations still struggle with compliance. This is a critical area where practical, efficient solutions are needed to help businesses navigate the complexities of IoT security standards.
Challenges of Secure Updates and Device Identity
A recurring theme throughout the conference was the difficulty of implementing secure updates and managing unique device identities—two of the most challenging aspects of IoT security. These problems are time-consuming to solve but essential for maintaining the integrity of IoT systems. IAR’s Embedded Trust and Secure Deploy solutions were highlighted as key tools that help developers automate these processes, streamlining the deployment of secure, resilient IoT devices.
The Future of IoT Security
Beyond the individual sessions, panel discussions featured experts such as Dr. Stephen Pattison, Peter Davies, and Dr. Anna Maria Mandalari, who explored evolving threats and defense mechanisms. Discussions ranged from the foundational changes needed in IoT security to the growing importance of cross-domain security patterns.
The IoT Security Foundation Conference was a reminder that while the challenges in IoT security are significant, so too are the solutions available. With the right tools, developers can secure products efficiently, ensuring they meet both current regulatory requirements and future security needs.
