IoT Security.

The discipline of protecting Internet-of-Things devices, gateways, networks, and cloud services from compromise, given their scale, constrained resources, and long lifetimes. It belongs to the OT / ICS / IoT category of cybersecurity.

The discipline of protecting Internet-of-Things devices, gateways, networks, and cloud services from compromise, given their scale, constrained resources, and long lifetimes.

IoT security covers the design, deployment, and operation of safeguards for Internet-of-Things ecosystems: consumer gadgets, smart-home devices, connected vehicles, medical implants, smart-city sensors, and industrial IIoT assets. It must contend with constrained CPUs and memory, intermittent connectivity, weak default credentials, infrequent patches, and supply chains spanning many vendors. Core controls include unique device identity (often via secure elements or TPM-like chips), strong device authentication, signed firmware with secure boot, encrypted-by-default communications (TLS, DTLS, MQTT over TLS), network segmentation, and robust update mechanisms. Regulations such as the EU Cyber Resilience Act, the UK PSTI Act, and standards like ETSI EN 303 645 and NIST IR 8259 now codify minimum IoT security requirements.

Defences for IoT Security typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: Internet of Things security, IoT cybersecurity.