Why Cybersecurity is Key to IoT Sensors

Sensors enabled by the Internet of Things are network-connected smart devices that collect and transmit real-time data about their environment. The data they provide lets people make better-informed decisions.

The use of IoT sensors has grown explosively in recent years because their increasing functionality, small size, and low power consumption allow designers to deploy them in new applications to increase productivity and lower costs. The sensors are being used in new ways to maximize the capabilities of network-connected systems and infrastructure.

The sensors are poised for mass-scale adoption in fields including automotive, health care, industrial automation, energy, and smart cities. But the lack of standardization in IoT sensors, coupled with interoperability challenges, has made them vulnerable to cyberattacks-which creates barriers for their ubiquitous use. Hackers are targeting IoT sensors in greater numbers, in more industries, and with increased sophistication.

Consequences of poor cybersecurity

A cyberattack can lead to financial penalties and legal issues if it renders a business or organization unable to fulfill its contractual obligations. An attack could harm the corporate brand and generate user mistrust of affected systems. It is costly and time-consuming to repair damage caused by an attack.

More concerning is the inability to collect and transmit uncorrupted data in real time from critical applications such as with network-connected medical devices. The growing use of such medical devices to monitor and treat diabetes and other conditions depends on sensor cybersecurity.

Cyberattackers are targeting IoT sensors in greater numbers, in more industries, and with increased sophistication. Interoperability challenges reduce the ability to access the sensors and the data they publish.

Another area where sensor cybersecurity is essential is smart cities, a recently growing market. Smart cities use networks that rely on systems of IoT-enabled sensors to gather data to improve local services, allocate resources more effectively, and manage traffic signals and other infrastructure. If compromised sensors fail to send timely, accurate information, then safety issues might arise. People and property could be in danger if warnings about fires, chemical spills, or other emergency situations fail to reach public safety officials in time.

Sensors can improve operational efficiency

The power and energy sector could significantly benefit from sensor cybersecurity and interoperability to help determine when and where to efficiently distribute power.

Consider the U.S. grid, which comprises about 7,300 power plants; 160,000 miles of high-voltage power lines; and millions of miles of low-voltage power lines and distribution transformers, according to the U.S. Energy Information Administration. The grid consists of equipment of varying vintages and different technologies, is operated by many companies, and is serviced by vendors with differing cybersecurity practices. Achieving adequate cybersecurity in such a large, disjointed system is a monumental challenge, but it could have a great impact on autonomous control of power systems.

In industry, automated systems are critical to improving operational efficiency and precision manufacturing, helping to make up for worker shortages. But when the IoT sensors in automated or semiautomated systems fail to operate, workers could be injured or exposed to toxic substances, and operations could be disrupted.

IEEE standards on sensors

The IEEE Standards Association has a growing portfolio of standards and projects that address different aspects of IoT sensors. Here are a few of them:

IEEE 1451 is a series of standards and projects that describe a set of open, common, network-independent communication interfaces for connecting sensors or actuators to microprocessors, instrumentation systems, and control/field networks. The goal of the series is to allow access of sensor/actuator data through a common set of interfaces, whether they are connected to systems or networks by wired or wireless means.

The IEEE 2700 Standard for Sensor Performance Parameter Definitions provides a common framework for performance specification terminology, units, conditions, and limits. The standard addresses accelerometers, magnetometers, gyrometers/gyroscopes, accelerometer/magnetometer/gyroscope combination sensors, barometer/pressure sensors, hygrometer/humidity sensors, temperature sensors, light sensors, and proximity sensors.

IEEE P2888 is a series of standards projects that address a multitude of areas for virtual reality and augmented reality, including sensor interfaces.

The IEEE 2621 series of standards defines the concept of cybersecurity assurance for wireless diabetes devices, and it specifies security requirements. It also provides instructions on how to achieve assurance.