Keysight Technologies has delivered a new IoT Security Assessment software solution that enables IoT chip and device manufacturers, as well as organisations deploying IoT devices, to perform comprehensive, automated cybersecurity assessments.
Increasing numbers of connected IoT devices enable hackers to leverage cybersecurity vulnerabilities for a range of attacks including malware, ransomware and exfiltration of data. According to Statista, the total installed base of IoT connected devices worldwide is projected to grow to 30.9 billion units by 2025 from 13.8 billion units expected in 2021.
"It is hard to accurately gauge the scope of BrakTooth affected chipsets," commented Sudipta Chattopadhyay, assistant professor, SUTD. "We advise all Bluetooth product manufacturers to conduct appropriate risk assessments, especially if their product may include a vulnerable chipset. We are thankful to Keysight for generously supporting our research and the opportunity to collaborate with the experienced Keysight security team."
"Research activities like these at SUTD are critical to improving cybersecurity in the connected world. If the good guys don't improve it, the cyber criminals will take advantage of vulnerabilities for nefarious purposes," said Steve McGregory, senior director of Keysight's security research and development team. "While investment into research is needed and helpful, software and chipset manufacturers are responsible for delivering secure products using rigorous security testing."
Keysight's IoT Security Assessment Software
Keysight's IoT Security Assessment software leverages more than 20 years of experience in network security testing to reveal security vulnerabilities across any network technology. The software offers comprehensive, automated testing to rapidly cover a large matrix of known and unknown vulnerabilities. IoT security assessments include novel cybersecurity attack tools and techniques for wireless interfaces such as Wi-Fi, Bluetooth, and Bluetooth Low Energy (BLE) to test known vulnerabilities, as well as to discover new vulnerabilities.
Development organisations can easily integrate Keysight's API-driven solution into their development pipeline with a single API for control and reporting. Organizations deploying IoT devices can leverage the software to validate IoT devices before they are delivered to end users and as new vulnerabilities become a concern. Ongoing research from Keysight's Application and Threat Intelligence Research Center provides updates to the latest protocol fuzzing and attack techniques.