cyber securtiy

When someone says embedded operating systems. The first thing that comes to mind is IOT. Small devices that have a specific purpose. However, lots and lot of devices have purpose built embedded operating systems. From door bells, and video cameras, to gaming consoles, TVs, DVD players, thermostats, and refrigerators. Other things that you may not have considered, cars, red light cameras, home assistants, tsunami sensors, routers, switches, and firewalls. Some of these devices are built on Linux or a stripped-down version of Linux.

For some of the device’s security is a must. Encryption, digital certificates, and VPN enabled to allow for secure commination to central cloud command and control servers. The ability to limit by IP address what computers are able to connect to them in order to manage the devices. The removal of a remote access protocol like telnet or ssh. Recently a large number of the devices have started to allow the https protocol instead of just http. This allows for secure encrypted information when being setup. Something as simple as the ability to upgrade the firmware needs to be included to be able to patch vulnerabilities. Buy even that process needs to be made secure so the system cannot be hijack with rogue software.

Some of the security features have not been included over time, in order to same on memory, processing power, and battery life. However, I think that in future these devices need to go through more rigorous security and penetration testing prior to being release.

Recently California became the first state with an Internet of Things cybersecurity law (Robertson, 2018) undoubtedly other states will follow.

Robertson, Adi. "California Just Became The First State With An Internet Of Things Cybersecurity Law." The Verge. N.p., 2018. Web. 19 July 2019.