Company
Date Published
Author
Lauren Johnson
Word count
621
Language
English
Hacker News points
None

Summary

As IoT devices become increasingly prevalent, ensuring their security has become crucial due to their vulnerability from fast market releases lacking robust security features. Dr. Xenia Mountrouidou, a Network Automation Engineer at Network to Code, addresses this issue through IoT Spy, an open-source tcpdump streaming solution designed to gather and visualize IoT security metrics. Her work, presented at ObservabilityCon 2021, highlights the use of a Telegraf-Influx-Grafana (TIG) stack to collect and analyze network data, creating insightful Grafana dashboards that help detect potential security breaches. IoT Spy tracks novel security metrics such as inbound and outbound connections, active services, and packet statistics, providing a detailed understanding of device behavior. These visualizations, which include probabilistic CDFs, histograms, and time series graphs, aid in anomaly detection and offer probability scores indicating potential device compromises. Future developments aim to enhance anomaly detection using Z scores and expand implementation through a Telegraf plugin, bolstering the security of smart devices.