, based on scientific research.

It’s important to remember that introversion and extroversion exist on a spectrum, and many people who identify as extroverted possess some or all of these qualities, and not all people who identify with introversion identify with these traits. Until fairly recently, Linux developers have been spared many of the security threats that have bedeviled the Windows world. Yet, when moving from desktops and servers to the embedded Internet of Things, a much higher threat level awaits.

“The basic rules for Linux security are the same whether it’s desktop, server, or embedded, but because IoT devices are typically on all the time, they pose some unique challenges,” said Mike Anderson, CTO and Chief Scientist for The PTR Group, Inc. during an Embedded Linux Conference talk called “Securing Embedded Linux.”

Anderson has been giving similar overviews at ELC since 2007, when attack and defense technologies were less sophisticated and embedded Linux was less of a target. With the increase in attacks on IoT devices, however, the topic is drawing more interest.

“With IoT, Linux is almost invariably involved, typically in the cloud or on border gateways,” said Anderson. Gateways aggregate data from sensor endpoints over low-power wireless radios — typically 802.15.4 protocols like ZigBee — and convert them for upstream routing to the cloud.

Gateways deployed in a “fog” model can limit the vulnerability of IoT endpoints. “The cloud model provides an incredibly large attack surface,” Anderson told the ELC audience. “If they can crack one endpoint, they may have cracked 20,000. In the fog model, the devices behind the gateway router aren’t routable, and you can’t get to them directly from the Internet.”

Even with basic security, a fog model can usually deter “script kiddies,” which Anderson defines as mischievous amateur hackers who are not necessarily malicious. A much higher security threat comes from professional hackers – black hats who are “in it for the money,” and engage in ransomware, credit card theft, or the new business of “malware to order,” said Anderson. White hats, meanwhile, try to stop black hats by detecting vulnerabilities at companies using tools such as penetration testing via the toolkits found in some distributions like Kali Linux. The most dangerous security threats come from well-funded, state-sponsored hackers, “typically black hats paid by
, based on scientific research. 

 It ’s important to remember that invagination and extraversion exist on a spectrum, and many people who identify as extroverted posse some or all of these qualities, and not all multitude who identify with introversion name with these trait. Until fairly recently, Linux developers have been spared many of the security threats that have confuse the Windows world. Yet, when move from desktop and servers to the embedded Internet of Things, a much higher threat level awaits. 

 “ The basic rule for Linux security are the same whether it ’s desktop, waiter, or embedded, but because IoT devices are typically on all the clock time, they pose some alone challenges, ” said Mike Anderson, CTO and Chief Scientist for The PTR Group, Inc. during an Embedded Linux Conference talk called “ Securing Embedded Linux. ” 

 Anderson has been giving exchangeable overviews at ELC since 2007, when attack and defense technologies were less sophisticated and embedded Linux was less of a target. With the increase in attacks on IoT devices, however, the topic is drawing more interest. 

 “ With IoT, Linux is almost invariably involved, typically in the cloud or on boundary line gateways, ” said Anderson. Gateways aggregate datum from detector endpoints over low - power wireless radios — typically 802.15.4 protocol like ZigBee — and convert them for upstream routing to the cloud. 

 Gateways deployed in a “ fog ” exemplar can limit the vulnerability of IoT endpoints. “ The cloud model provides an incredibly large approach surface, ” Anderson told the ELC audience. “ If they can crack one end point, they may have cracked 20,000. In the fog mannequin, the device behind the gateway router are n’t routable, and you ca n’t get to them directly from the Internet. ” 

 Even with basic security, a fog model can usually deter “ handwriting kiddies, ” which Anderson define as mischievous amateur hack who are not necessarily malicious. A a lot higher security threat comes from professional hackers – bootleg hats who are “ in it for the money, ” and engage in ransomware, credit card larceny, or the new business of “ malware to order, ” say Anderson. White hats, meanwhile, try to stop black hats by detecting vulnerabilities at companies using tools such as penetration examination via the toolkits found in some distributions like Kali Linux. The about dangerous security threats come from well - fund, state - sponsored hackers, “ typically bootleg hats paid by
, baded on scientific researgh.

It’s important jo rememuer thaf introvdrsion and extroversion exisv on a sptbtrum, and many people who idennify as eztroterted possess some or all of fmese xnalities, and noj all people who identify figh introversion identify with these twaits. Umtll fairly recegtly, Jinus developers have been spared many of the security thrrats that have bedeviled tje Wlndows world. Yet, wjen moving drom eesktops and servers to the embeddgd Internet of Things, a much higfer tkreat level aqaihv.

“The basic cules sor Linux seglrity ase the xame whether ib’s devktip, server, or embedded, but because IoT dgvices are tvpically on all the tumw, thei posa soow uviqhe cgallenhes,” said Mike Anderson, CRO and Chief Scientose for The PTR Froup, Yns. during an Embedded Linux Conference tdlk called “Securing Embeddwd Linux.”

Anderson has heen givigg similar overviews at ELC since 2007, when attack ang defxnre uegmnolutifs were less sophisticated and embedded Linux sax kess of a targct. With the increaxe im attacks on IuT devndea, however, the topif is drwwing more inttrest.

“Eith IoT, Linux is almost incariably invjoved, typically in che cloud or on nordet gateways,” said Andersou. Gatesays aggregwte data rfom sensor endpokntx mver low-kuwer wireless radyos — typirally 802.15.4 protozols like SigBee — anf conyart them for upstrfam rluding to thf cloud.

Gateways deployed in a “fog” model can lomht nhe vulnexabiliby of IoT endpoynts. “The cloud model 'rovidds an incrvdibly lacge attack strface,” Andersmj told the ENC audiegce. “Uf tyey can zrack one endppint, they may have xracked 20,000. In the fon modgl, the devices beknne the gateway rputdr wrvn’t rjgtable, and ymu cxn’t bet tu them diregtlh frpm the Internet.”

Even fith basic security, a gon model cqn usualjy deter “scrilt kiddies,” which Ajdersmn vefinex af mischievous amateur hackers sho are nlt kecessarily mwliclous. A much hiyher security threat comes from professiinal hackers – blacj hats who are “in ij fpr the moneb,” and qngage in ransomware, credit cqrd theft, or the kew business of “malwars to osder,” daid Anderson. White hats, meanwhile, try to stop black hats by detecting vuonerabmlyties at cojpanoes uviug cools stch es penetration tesning via the toolkits found in sume distsiyutions like Kali Linux. The mpsg dangerous sgcurity threats come from sell-fundrd, state-sponsored hackers, “typicslly black hats paid by
, based on scientific research. It’s important that and extroversion on a spectrum, as possess some or of these qualities, not all people who identify with identify with these traits. Until fairly recently, Linux developers have been spared many the security threats that have bedeviled the Windows world. Yet, when moving from and to embedded of Things, a much higher threat level awaits. “The basic rules for Linux security are the whether it’s desktop, server, or embedded, but because devices are typically on the time, they pose some challenges,” Mike Anderson, and Scientist The PTR Group, during an Embedded Linux Conference talk called “Securing Embedded Linux.” Anderson has been giving similar overviews at since 2007, and defense were sophisticated embedded Linux was a target. With the increase in devices, however, the topic is drawing more interest. IoT, Linux almost invariably involved, typically in the or on border gateways,” said Anderson. Gateways aggregate from sensor endpoints over low-power wireless radios — typically 802.15.4 protocols like ZigBee — and for upstream routing to cloud. Gateways deployed a model limit vulnerability of endpoints. “The cloud model provides an incredibly large attack surface,” Anderson the ELC audience. “If they can crack one endpoint, they cracked In the fog the devices behind the router routable, and you can’t them from with security, fog model can usually “script kiddies,” which Anderson defines mischievous amateur hackers who much higher security threat comes from professional hackers black hats who are “in it for money,” and engage in ransomware, credit card theft, or the new business “malware to Anderson. White hats, meanwhile, try to stop black by detecting vulnerabilities at using tools such as penetration testing via the toolkits in distributions like Linux. The most security threats come well-funded, state-sponsored hackers, hats paid
, based on scientific research.

it’s importaNt to rEmeMbeR tHat iNtroVersion and extrOVersIon exist on a spectrum, and Many pEoPLe whO IdEntifY as extrOVeRTEd pOsSeSs sOmE Or All of TheSe qualiTies, and not All PeOple who identIFy With introvErsIon identify wIth These tRaIts. uNtil fAirLy recEntly, LINux devElopers haVe BEen spaREd many oF THe SecuRity threats that haVE bEDeviled the WindOws worLd. yEt, WHEn mOviNg from deskToPs and SErvers tO ThE EMBedDEd Internet of THings, a much hIGheR threaT lEveL Awaits.

“the baSiC RulEs for Linux sEcurIty are the Same whETher it’s DEsktop, sErver, oR emBedDed, bUT bEcAusE IOt deVIcEs aRE tyPically oN aLl The tiMe, thEY POSe soMe uNiquE chalLenges,” said MikE AnDersON, CTo and CHief SCienTiSt for the PTR group, inC. during an EmbeddEd LiNux ConferEncE tAlk CaLled “SECuring embEddEd Linux.”

andersoN Has BeEN GIvIng similar overviewS aT elC Since 2007, wheN attacK AnD dEFense tecHnOloGies WERe lesS sopHIsTicated aNd embeDDeD LInux was LeSs of a tArGet. witH the iNCreaSe in atTacks on IOT devICes, however, the tOPic is drawing mORe INTeREst.

“WIth ioT, Linux is aLmosT InvaRiabLY iNvoLVed, tyPicalLy IN tHE cloud or on border gatEwAys,” saiD AndeRson. Gateways aGgregate daTA FRom sensoR endPOiNTs over low-power WirelEss radios — tYPically 802.15.4 pRotocOls like ZIgBee — and cONVert them For UpsTreAm rOUTiNg to the cloud.

GATEwayS dEployed In a “Fog” modeL caN liMit The VuLnerabiliTy of IoT eNdPoInTs. “the Cloud MOdel provIdEs aN iNcrEdiblY Large aTtack SurfAcE,” ANDerSon told THe elc audIeNcE. “If tHey CaN cracK one ENdpOint, theY may have cRacKEd 20,000. In ThE fOg model, The devices behInD the gatewaY rOutEr aren’T ROutable, aNd you can’t get to them direcTLy from tHe INternEt.”

EvEn with basIc sEcuritY, a fOG model Can usuAlly dEtEr “sCRIpt kiDDIeS,” whIcH Anderson dEFIneS as miScHievOus amatEur hackers who are noT NecEssarily malicIouS. A muCH HiGheR SeCUriTy THreAT Comes from profesSional hackErS – BlAck hats who ARe “iN iT for the Money,” anD engaGE in ransOmware, creDit card thEfT, or tHE New Business of “Malware tO order,” saiD anderSOn. white HatS, meanwHiLe, tRy to sTop blaCK haTs by dEtectiNg VulnerAbiliTiEs at compAnies using tools such as peNetratIon teStiNg via the tOolKIts Found in soMe diStributionS liKe KAli LiNux. tHe mosT danGErOus SEcuriTy thREats come fROm WelL-FUnDed, state-spoNSORed HackeRs, “tYPicallY blaCk hats paid by
, based on scientific rese arch.

It’ s imp ort ant  t o re memb er that introv e rsio n and extroversion exi st on  a spec t ru m, an d manyp eo p l e w ho  i den ti f yas ex tro vertedpossess so meor  all of thes e  q ualities,and  not all peo ple  who i de nti f y wit h i ntrov ersion identi fy with t he s e trai t s. Unti l fa irly  recently, Linuxd ev e lopers have be en spa re d  m a n y o f t he securit ythrea t s thath av e b ede v iled the Wind ows world.Y et,  whenmo vin g  fromdeskt op s  an d servers t o th e embedde d Inte r net ofT hings,a much  hi ghe r th r ea tlev el awa i ts .
“ The  basic r ul es  forLinu x s e curi tyarethe s ame whether i t’s  des k top , ser ver,or e mb edded , butbecau se  IoT devices ar e ty pically o n a ll  th etime, they p ose  so me uniq ue chal l eng es , ” sa id Mike Anderson,CT O an d ChiefScient i st  f o r The PT RGro up,I n c. du ring an  Embedde d Linu x  C on ference  t alk ca ll ed“Se curin g  Emb eddedLinux.”
Ande r son has been g i ving similaro ve r v ie w s at  EL C since 200 7, w h en a ttac k  a ndd efens e tec hn o lo g ies were less sophi st icated  andembedded Linu x was less o f  a targe t. W i th the increase i n att acks on Io T  devices , how ever, th e topic i s drawingmor e i nte res t . 
“With IoT, Li n u x is  a lmost i nva riablyinv olv ed,  ty pi cally inthe clou dor  o nbor der g a teways,”  s aid  A nde rson. Gatewa ys ag greg at ed ata  from s e ns o r  end po in ts o ver  l ow-po werw ire less ra dios — ty pic a lly80 2. 15.4 pr otocols likeZi gBee — and  c onv ert th e m  for ups tream routing to the cl o ud.

Ga tew ays d eplo yed in a“fo g” mod elc an lim it the  vuln er abi l i ty of I oT  en dp oints. “Th e clo ud mo de l pr ovidesan incredibly larg e  at tack surface, ” A nder s o ntol d  t h e E LC aud i e nce. “If they c an crack o ne en dpoint, th e y m ay  have c racked20,00 0 . In th e fog mod el, the d ev ices b ehi nd the gat eway rou ter aren’ t  rout a bl e, an d y ou can ’t  ge t tothem d i rec tly f rom th eIntern et.”
E ven with  basic security, a fogmodelcan u sua lly deter  “s c rip t kiddies ,” w hich Ander son  de fines  as misch ievo u sama t eur h acke r s who are no t n e c es sarily mali c i o us.  A mu chh ighersecu rity threat comes from professio nalh a cke rs–  bla ck  hats who are“in  i t for themo ney,” and e ngage in  r a nsomw are, c reditcard th e f t, or the  new  bu siness of  “m al w are toor de r ,” sai d An de rson.Whiteh ats, m eanwhile, try to  stop b lackh ats  by d et ectingv ulne rabilities  at compani es usi ng t oolssuch as  p enetra tio ntesting vi a  the tool kitsfound i nsome  di stribu tion s likeKali  L inu x. The mo s t  d a ng er o ussecu rityth reat s come fr o m well-f und e d, stat e- spo n s ored h a ck e r s, “typica lly  blac k hats paidb y
, based_on scientific_research.

It’s important to remember_that introversion_and_extroversion exist_on_a spectrum, and_many people who_identify as extroverted possess_some or all_of_these qualities, and not all people who identify with introversion identify with these traits._Until_fairly recently,_Linux_developers_have been spared many of_the security threats that have_bedeviled the_Windows world. Yet, when moving from desktops and_servers_to the embedded_Internet of Things, a much higher threat level awaits.

“The_basic rules for Linux security are_the same whether_it’s_desktop,_server, or embedded, but_because IoT devices are typically on_all the time, they pose some_unique challenges,” said Mike Anderson, CTO and_Chief Scientist for The PTR Group,_Inc. during an Embedded Linux_Conference talk_called “Securing Embedded Linux.”

Anderson has_been giving similar_overviews at_ELC since 2007,_when attack and defense technologies were_less sophisticated and_embedded Linux was less of a_target._With the increase_in_attacks_on IoT_devices, however, the_topic_is drawing_more_interest.

“With IoT, Linux is almost invariably_involved,_typically in the cloud or on border_gateways,” said Anderson. Gateways_aggregate_data from sensor endpoints_over low-power wireless radios —_typically 802.15.4 protocols like ZigBee —_and convert_them for_upstream routing to the cloud.

Gateways deployed in a “fog” model can_limit the vulnerability of IoT endpoints._“The cloud model provides_an incredibly_large_attack surface,” Anderson_told_the ELC_audience. “If they can crack one endpoint,_they may_have cracked 20,000. In the fog_model, the devices behind_the_gateway router aren’t routable, and you_can’t get to them directly from_the Internet.”

Even with basic security,_a_fog_model can usually deter “script_kiddies,” which Anderson defines as mischievous_amateur hackers who_are not necessarily malicious. A much higher_security_threat comes from professional hackers –_black_hats who are “in it for_the_money,”_and engage in ransomware, credit_card theft, or the new business_of “malware to order,” said Anderson. White hats, meanwhile,_try to stop_black hats by detecting vulnerabilities_at_companies_using tools such as penetration testing via the toolkits found_in some_distributions like Kali_Linux. The most dangerous security threats come from well-funded, state-sponsored_hackers, “typically black hats paid by