The Current State of Connected Device Security in 2021 | Ordr's Greg Murphy

IoT For All Podcast · 25 Oct 2021 · 28m

What this episode covers

Greg Murphy, CEO of Ordr, discusses the critical challenges of securing the billions of agentless IoT devices in enterprise environments. He explains that traditional IT security tools fail because many IoT devices run outdated operating systems and cannot support security agents, creating massive visibility gaps. Murphy highlights the Colonial Pipeline ransomware attack as a wake-up call for the industry and emphasizes that the Chief Information Security Officer (CISO) is ultimately responsible for securing both IT and OT assets. He advises organizations to prioritize network visibility and behavioral analysis to detect anomalies in devices like MRI machines or access control gates.

Other shows on the same ground, closest first.

  • Over the Air · 31m

    Breaking IoT Connectivity Barriers with Chris Baird, CEO of OptConnect

    Chris Baird, CEO of OptConnect, discusses the evolution of IoT connectivity from early copper lines and Wi-Fi to modern cellular solutions for unattended devices like vending machines and kiosks. He details OptConnect's strategic pivot to private networks following the Heartbleed vulnerability and their current focus on 'Max Aware,' a hardware platform that enables edge instrumentation and anomaly detection for customers deploying at scale. Baird also highlights the growing IoT ecosystem in Utah, citing companies like Traeger and Monit as examples of successful connected product innovation.

  • EE Times Current · 44m

    Can We Get Serious About Cybersecurity Now?

    Damon Small, a technical director at the cybersecurity firm NCC Group, discusses the Colonial Pipeline ransomware attack and the broader implications for critical infrastructure security. He explains how the breach of a billing IT system, rather than operational technology (OT), forced a shutdown due to federal regulations requiring a bill of lading, highlighting the dangerous convergence of IT and OT. Small argues that cybersecurity must be viewed as a business enabler rather than a cost center and calls for stricter government regulation to compel organizations to protect their information assets.

  • Manufacturing Happy Hour · 49m

    204: OT Security Best Practices for Manufacturers with Fortinet's Rich Springer

    Rich Springer, Director of Marketing for OT Solutions at Fortinet, discusses the evolving landscape of operational technology (OT) security for manufacturers. He explains why the traditional 'air gap' strategy is no longer viable due to IT/OT convergence and human factors, and emphasizes the critical need for collaboration between IT and OT teams to address patching challenges and network segmentation. Springer advocates for tabletop exercises to define incident response roles and assess the real-world impact of cyberattacks on production lines, noting that ransomware actors are increasingly targeting manufacturing for higher payouts.

  • Coredump Sessions · 58m

    #008: Navigating the Changing IoT Security Landscape: A Survival Guide for Product Leaders

    Giovanni Alberto Falcione, CTO at Exine, joins Memfault's François Baldassari and Thomas Sarlandie to discuss the impact of the EU's Cyber Resilience Act (CRA) on IoT security. They analyze the shift from voluntary standards like NIST 800-53 to mandatory compliance, highlighting the critical need for runtime security monitoring and Software Bill of Materials (SBOM) tracking. The conversation details how eBPF technology enables low-overhead anomaly detection and how OTA updates are essential for mitigating vulnerabilities in the field.

  • Manufacturing Happy Hour · 43m

    255: How AI is Reshaping Security and OT Network Requirements featuring Felipe Sabino Costa, Sr. Product Manager for Networking & Cybersecurity at Moxa

    Felipe Sabino Costa, Sr. Product Manager for Networking & Cybersecurity at Moxa, explains how the shift from historical logging to real-time predictive analytics in Operational Technology (OT) is straining legacy infrastructure. He highlights that 80-85% of global industry lacks basic defense at the edge, as old systems were not designed for the high bandwidth demands of AI-driven applications like intelligent transportation and semiconductor manufacturing. Costa discusses how AI enables attackers to craft sophisticated, adaptive phishing and port-scanning attacks, necessitating a move beyond simple air-gapping to layered security frameworks like NIST and IEC 62443. He uses a 'nutrition label' analogy for IEC 62443 to explain how certifications help manufacturers verify product security features and choose the right partners for resilient network design.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by IoT For All Podcast. The episode itself belongs to its publisher.