IoT Security With INFINITE: The 3-Dimensional Internet Of Things Maturity Model

Many companies are interested in using IoT devices, either to optimize their business processes and reduce costs or for lack of alternatives. The situation is similar to a few years ago, when cameras were banned on company premises for security reasons, but all cell phones on the market had cameras. Observations have shown that the security properties of IoT devices with similar functionality can differ significantly. This makes it difficult for management to identify IoT devices that comply with security policies. To enable management to evaluate the security levels of IoT devices before purchase, we introduce INFINITE, our 3-dimensional INternet oF thINgs maturITy modEl. INFINITE can be used at the time of procurement to determine the extent to which an IoT device’s security practices are implemented and whether it meets the company’s security policies. This simplifies the procurement process, prevents the procurement of IoT devices that do not integrate with an enterprise-wide security strategy, and ultimately saves costs. To this end, INFINITE allows us to look at both the software and hardware lifecycle of an IoT device.