What measures should be taken against the increasing number of attacks on IoT devices?

In an interview with Wise TV, Ediz Öztürk, founder of edZconsult, provides a detailed overview of the history of IoT (Internet of Things) and M2M (Machine-to-Machine) technologies, the differences between them, and the security risks present today. He also touches upon topics such as new attack surfaces introduced by 5G, location-independent work models, the “Zero Trust” security approach, and blockchain-based e-identity systems.

When looking at the world of IoT—the Internet of Things—it is necessary to briefly touch upon its history. As you know, the story actually begins with M2M (Machine-to-Machine) communication, where multiple machines interact using specialized protocols. This framework gained significant prominence and popularity in the 2010s, coinciding with the development of 3G systems. The transition from M2M to IoT happened quite rapidly, leading many to assume that IoT has simply replaced M2M. In reality, M2M still exists; we continue to utilize M2M architectures, particularly within the Industrial Internet of Things (IIoT). So, what distinguishes M2M from IoT? There are subtle nuances—differences in how they access and utilize data, or how they integrate and employ intelligent systems. By grasping these nuances, one can better understand how the Internet of Things has integrated into today’s IT landscape. As you mentioned, we are talking about an ecosystem where tens of billions of systems operate in tandem—encompassing everything from healthcare systems to automotive infrastructure. With the advent of 5G, we will increasingly hear about V2X—or “Vehicle-to-Everything”—communication, which is bound to become a reality. 5G networks will enable a significant increase in speed—roughly tenfold, or in some cases, even a hundredfold—within a given area. Naturally, this creates a much larger attack surface. So, how do we prevent this? That is one of the most critical questions. Technology trends that began around 2011—accelerated by the impact of COVID-19—have converged into a paradigm of “operations from anywhere,” leading to the emergence of location-independent services. This shift is fundamentally rooted in the fact that companies themselves are no longer tied to a specific physical location. In the past, I could have defined the boundaries of any given company by pointing to its network infrastructure—specifying exactly where connections began and ended. Today, however, in a hybrid work environment where hundreds of connections originate from outside the organization, relying solely on systems like VPNs is no longer sufficient. We must look toward solutions such as multi-factor authentication (MFA), digital identity systems—especially those based on blockchain—and, crucially, the “Zero Trust” network policy (ZTN). Think of a VPN as a tunnel: while the internet outside the tunnel is insecure, we encapsulate data within that tunnel, operating under the assumption that the data inside remains secure. However, in a typical VPN system, once you reach a certain point—for instance, a specific network zone—any further access within that zone depends entirely on the internal architecture. The “Zero Trust” approach, by contrast, shifts this paradigm significantly. Through micro-segmentation, it mandates that every single access request undergo a rigorous process of authentication and authorization. By implementing these measures, we can effectively ensure security across both OT (Operational Technology) and IT (Information Technology) environments.

The Internet of Things (IoT) and M2M: From the Past to the Present

The Internet of Things (IoT) and Machine-to-Machine (M2M) technologies hold a significant place in today’s digital world. While IoT enables devices to communicate with one another via the internet, M2M allows devices to communicate directly using specialized protocols. In this article, we will examine the differences between IoT and M2M, their histories, and their current applications.

The Birth of M2M Technology

M2M gained popularity in the 2010s with the development of 3G technologies. This technology enables machines to communicate directly with each other through specific protocols. M2M is widely used, particularly in industrial applications, and serves as the foundation for IoT.

The Rise of IoT

Unlike M2M, IoT allows devices to exchange data over the internet. This technology has revolutionized various sectors, including healthcare and automotive. IoT makes devices smarter and more interconnected.

Differences Between IoT and M2M

The fundamental difference between IoT and M2M lies in how they access and utilize data. While IoT provides access to a broad network of data via the internet, M2M offers a more limited and direct form of communication. These two technologies serve different application areas and complement one another.

5G and the Future of IoT

5G technology enhances the potential of IoT. By providing faster and more reliable connections, 5G enables IoT devices to operate more effectively. This offers a major advantage, especially in applications such as V2X (Vehicle-to-Everything).

Security and IoT

The widespread adoption of IoT also brings security risks. Zero Trust policies and multi-factor authentication systems are essential for securing IoT networks. These systems mandate authentication and authorization processes for every access attempt.

Hybrid Work Environments and IoT

The COVID-19 pandemic has heightened the importance of hybrid work environments. IoT can be leveraged to enhance productivity in such settings, making location-independent services more accessible.

Summary

IoT and M2M technologies are key components of digital transformation. Both offer unique advantages within their respective domains and complement one another. The advancement of 5G and the implementation of robust security measures will facilitate the further proliferation of IoT. Meanwhile, hybrid work environments and location-independent services continue to expand the opportunities presented by IoT.