INTRODUCTION: The Increasing Need for Security with Connected Devices
Our lives are increasingly dependent on smart connected devices: we use them to
conduct business, maintain social relationships, make purchases, and enjoy media
content. Despite the obvious benefits, these devices have huge amounts of code and
data that are susceptible to attacks from hackers; furthermore, the sheer number of
applications that are easily available for download represent an even larger opportunity
for fraudsters.
Similarly, automotive and home devices are becoming increasingly connected and
providing more capabilities than their original core functionality.
1
Consumers are
increasingly using their devices in new ways—organizing a trip from one’s TV,
streaming music while driving, and using a smartphone to pay for petrol. These
expanded practices create new security vulnerabilities, which in turn emphasize the
need for mechanisms that allow trusted parties to have access to applications without
granting hackers the same opportunity.
The increased security needs are ultimately driven by new characteristics of
consumers’ smart connected devices; a few such features, and the related security
concerns, are as follows:
• Use of an Open Environment: New devices are generally built with operating
systems that provide an open environment. A key benefit of this is that users
can add applications at any time, often with little concern as to the impact to
the stability and security of the device. An open environment, however,
exposes devices to an expanding variety of attacks. Device manufacturers
want to take advantage of such Operating Systems but need to be in control of
how the software that runs on the device behaves.
• Authentication: The traditional method of authenticating a user involves
requesting a username and password. This is increasingly being deemed
inadequate because consumers use weak passwords or reuse existing ones,
and hackers are increasingly able to gain access to accounts. Because
application or service providers often have stores of personally identifiable and
sensitive information on their servers, such hacks make headlines, upset
consumers, and undermine business confidence. Accordingly, there is a need
for improved authentication mechanisms that protect consumers while allowing
application developers flexibility.
• Privacy: Devices store increasing amounts of personal information (such as
contacts, messages, photos, and video clips) and even sensitive data (including
credentials, passwords, medical data, etc.). To prevent exposure of this
information in the event of loss, theft, malware, or another negative event,
sufficient security is needed to store, process, and distribute such personal
data.
1
The increasing trend for devices to be connected to the Internet and one another, known as the
Internet of Things, is discussed in a separate GlobalPlatform whitepaper published in May 2014.
Visit http://www.globalplatform.org/documents/whitepapers/IoT_public_whitepaper_v1.0.pdf
.
© 2015 GlobalPlatform Inc. 7
剩余36页未读，继续阅读
代码改变世界ctw
- 粉丝: 5w+
- 资源: 44
我的内容管理
展开
最新资源
- zlib-1.2.12压缩包解析与技术要点
- 微信小程序滑动选项卡源码模版发布
- Unity虚拟人物唇同步插件Oculus Lipsync介绍
- Nginx 1.18.0版本WinSW自动安装与管理指南
- Java Swing和JDBC实现的ATM系统源码解析
- 掌握Spark Streaming与Maven集成的分布式大数据处理
- 深入学习推荐系统：教程、案例与项目实践
- Web开发者必备的取色工具软件介绍
- C语言实现李春葆数据结构实验程序
- 超市管理系统开发：asp+SQL Server 2005实战
- Redis伪集群搭建教程与实践
- 掌握网络活动细节：Wireshark v3.6.3网络嗅探工具详解
- 全面掌握美赛：建模、分析与编程实现教程
- Java图书馆系统完整项目源码及SQL文件解析
- PCtoLCD2002软件：高效图片和字符取模转换
- Java开发的体育赛事在线购票系统源码分析
资源上传下载、课程学习等过程中有任何疑问或建议，欢迎提出宝贵意见哦~我们会及时处理！
点击此处反馈
