Top 3 IoT Security Gaps Today

So coming from the government and coming into the private sector, the issues are really kind of the same. Security is often continually treated as an afterthought. you know Many products are fully designed and prototyped before security even enters a conversation. By then, it's really incredibly expensive to start retrofitting your device with security and putting overhead because it wasn't purpose built with security in mind. um Another thing is, you know, the blind trust and third party components. A lot of these IoT devices are built on these third party components um and, know, free to use libraries. So SDKs, libraries, and even full software stacks are integrated into the the device without really any visibility into their components, their maintenance practices, their patching, and any known vulnerabilities associated with them. And again, you know that's why Finite State, the platform and the services we provide is really, really critical. you know The Finite State platform gives manufacturers deep visibility into their firmware supply chain from third party code risks to hard coded secrets and outdated crypto libraries so they can assess and manage the real world security posture of their device before they even ship it. And then finally, you know, weak or missing update strategies. We talked about this before where, you know, there really is sometimes no business inertia to keep these products when they're in the field updated, even in the government that happens. I mean, we have a lot of they used to have a lot of like missiles and drones and everything that were out there unpatched because I mean, who's going to go out there and patch them? um And sometimes when they would come up with a new version, the old version was still out there somewhere with all the unpatched vulnerabilities. so um So even with over the air infrastructures and updates and from you know many devices, just don't enforce update integrity, as we discussed earlier, tracking update status and that kind of thing. So those three, I think, are a real pain point when it comes to the biggest gaps today in IoT security.