As the popularity of Internet of Things (IoT) devices increase, so does the amount of attacks that are made against these systems.
In fact, last year, there was such a huge attack on Amazon’s systems that caused the service to go down and was executed by using IPs from various IoT devices around the world.
The major problem with this is that because IoT is so new, there isn’t much protection against these products, until today.
Cloudflare has announced their own solution for solving some of these problems, revealing the release of a new private network called Cloudflare Orbit that has been designed to help protect against attacks to these IoT devices.
They explained more about this new system with the following:
Thinking about this challenge, we were reminded of when the ShellShock vulnerability was discovered, Cloudflare was able to automatically keep the requests that would trigger the vulnerability from reaching our customers. With Orbit, Cloudflare can do the same thing, only for devices. For example, when Jeep was shown to be vulnerable, instead of recalling 1.4 million vehicles, Fiat Chrysler could have patched the bug in all the vehicles with just a simple rule in Cloudflare’s firewall restricting access to the vulnerable DBUS service listening on port 6667 of every Jeep.
Orbit sits one layer before the device and provides a shield of security, so even if the device is running past its operating system’s expiration date, Cloudflare protects it from exploits. And while devices may be seldom patched, the Cloudflare security team is shipping code every day, adding new firewall rules to Cloudflare’s edge. Think of it like changing IoT to I*oT — devices can still access the Internet, but only after passing through Cloudflare where malicious requests can be filtered.
Basically, the manufacturer of the IoT device would write their own logic on Cloudflare’s edge services, create a set of firewall rules, push updates to this Orbit layer automatically, and then to all of their device worldwide, without their users having to install anything, or even noticing any difference.
This then solves the big problem with IoT devices, updating the darn things.
Going through the process of installing new firmware on devices (especially ones that might require a hard connection to your computer) is not only annoying but also way too difficult for the user to really bother, with Cloudflare Orbit, the idea is that the user will never have to think about an update but still remain protected with the latest firmware.
And that’s not all, having the requests go through Cloudflare means that manufacturers will get a range the standard Cloudflare benefits, including faster connections, compression, and of course, because you are using their servers, you would need less of your own.
You can read more about Cloudflare and the new Cloudflare Orbit announcement at the source link below.