Invisible and forgotten: Zero-day blooms in the IoT
Kartik Palani, Emily G. Holt, Sean W. Smith · 2016
In the IoT, massive distribution and long physical lifetimes will disrupt the "penetrate and patch" security paradigm that helps mitigate the consequences of the vulnerabilities endemic in individual systems. In this paper, we examine what will happen in the IoT if we build its systems the same way. We collect data and model the vulnerability blooms and patching delays in historical systems. We present the models and discuss future IoT networks where similar blooms happen but patching does not. We discuss initial results, and our plans to extend the models to look more deeply at these questions in our future work.