Domain logins to devices disabled in AD/AAD Hardware rooted trust, Malicious Bad code in dev Evaluation of Evaluation of evaluation of SDK/firmware base device/firmware device/firmware firmware/device, code signing, secure boot Capability to detect new Capability to detect new Tampering of Device Physical security sensors/devices that are sensors/devices that are device connected connected Loss of data in Capability to detect new Capability to detect new transit between Encryption of Data sensors/devices that are sensors/devices that are sensor and data-in-transit connected connected controller Loss of data in transit between Encryption of Data N/A Encryption of data-in-transit controller and services Capability to detect new Capability to detect new Device Fake sensor Physical security sensors/devices that are sensors/devices that are connected connected Device Fake device N/A Physical security Physical security External factors contributing to Physical security, Data N/A N/A falsified sensor quality control readings
Domain logins to devices disabled in AD/AAD Malicious SDK/firmware Bad code in dev base Evaluation of device/firmware Evaluation of device/firmware Hardware rooted trust, evaluation of firmware/device, code signing, secure boot Device Tampering of device Physical security Capability to detect new sensors/devices that are connected Capability to detect new sensors/devices that are connected Data Loss of data in transit between sensor and controller Encryption of data-in-transit Capability to detect new sensors/devices that are connected Capability to detect new sensors/devices that are connected Data Loss of data in transit between controller and services N/A Encryption of Encryption of data-in-transit Device Fake sensor Physical security Capability to detect new sensors/devices that are connected Capability to detect new sensors/devices that are connected Device Fake device N/A Physical security Physical security Data External factors contributing to falsified sensor readings Physical security, quality control N/A N/A
7863_Creating_security_controls_for_IoT_devices_at_Microsoft.docx