US-based Internet security company Rapid7 has expanded its strategic consulting and security testing offerings to help organisations securely develop and deploy IoT devices.
As part of the IoT practice, Rapid7 will offer strategic guidance, threat modelling, device design consulting and incident response across consumer, enterprise, industrial, medical, and transportation devices
For strategic guidance, Rapid7 will offer a specialist consultancy that will help develop IoT technologies with security built-in from the ground up. The consultants will work with industry experts and trade groups to help develop standards and best practices for IoT security and will funnel this expertise into engagements with IoT developers.
The company will help develop comprehensive threat models of the entire system that can evolve with the complete product lifecycle to help identify and mitigate the most critical issues, as well as to document the product’s security posture. It will consult in designing of the device from the ground up so that hardware issues do not become vulnerable of the software security architecture.
More importantly, Rapid7’s hardware teams will assist in getting the forensic information directly from a product in case of an attack.
The company is dedicated to using security research to better protect consumers and organisations through coordinated disclosure, clear communications, and jointly agreed upon mitigations whenever possible. In addition, Rapid7 specialises in solving complexities involved in network related issues in the transportation industry.
Craig Smith, the founder of Open Garages who joined Rapid7 recently, said: “Rapid7 understands the transportation industry, the needs of its engineers, what methods work, and which ones do not – we’ve seen what happens when security isn’t implemented correctly or is considered too late in the process. We’re focused on identifying real risks to create custom solutions that integrate into what’s most important to the business, without compromising design.
“Over the past five years, we’ve seen increased recognition for security research as a valuable part of the transportation development process. Manufacturers are working to better understand how software vulnerabilities impact the safety of their products – we’re excited to continue forward on this path,” Smith added.
Interested in hearing industry leaders discuss subjects like this and sharing their IoT use-cases? Attend the IoT Tech Expo World Series events with upcoming shows in Silicon Valley, London and Amsterdam to learn more.